GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,081
Erlang
29
GitHub Actions
19
Go
1,909
Maven
5,000+
npm
3,642
NuGet
638
pip
3,258
Pub
10
RubyGems
869
Rust
820
Swift
35
Unreviewed advisories
All unreviewed
5,000+
712 advisories
Filter by severity
A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects...
Moderate
Unreviewed
CVE-2024-7272
was published
Aug 12, 2024
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker...
High
Unreviewed
CVE-2024-7534
was published
Aug 6, 2024
Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote...
High
Unreviewed
CVE-2024-7535
was published
Aug 6, 2024
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker...
High
Unreviewed
CVE-2024-6994
was published
Aug 6, 2024
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects...
Moderate
Unreviewed
CVE-2024-7055
was published
Aug 6, 2024
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2024-7545
was published
Aug 6, 2024
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2024-7546
was published
Aug 6, 2024
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2024-7543
was published
Aug 6, 2024
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2024-7544
was published
Aug 6, 2024
InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer...
High
Unreviewed
CVE-2024-39392
was published
Aug 2, 2024
A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause...
Moderate
Unreviewed
CVE-2024-41440
was published
Jul 30, 2024
A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows...
Moderate
Unreviewed
CVE-2024-41438
was published
Jul 30, 2024
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows...
Moderate
Unreviewed
CVE-2024-32671
was published
Jul 29, 2024
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated...
High
Unreviewed
CVE-2024-40764
was published
Jul 18, 2024
Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c.
High
Unreviewed
CVE-2024-40129
was published
Jul 16, 2024
A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper...
High
Unreviewed
CVE-2024-39518
was published
Jul 11, 2024
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to...
High
Unreviewed
CVE-2024-39883
was published
Jul 10, 2024
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer...
High
Unreviewed
CVE-2024-20781
was published
Jul 9, 2024
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer...
High
Unreviewed
CVE-2024-20783
was published
Jul 9, 2024
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer...
High
Unreviewed
CVE-2024-20785
was published
Jul 9, 2024
A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with...
High
Unreviewed
CVE-2023-50806
was published
Jul 9, 2024
Secure Boot Security Feature Bypass Vulnerability
Moderate
Unreviewed
CVE-2024-38065
was published
Jul 9, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-38079
was published
Jul 9, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2024-38077
was published
Jul 9, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Critical
Unreviewed
CVE-2024-38076
was published
Jul 9, 2024
ProTip!
Advisories are also available from the
GraphQL API