Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,389 advisories

Loading
A vulnerability has been identified in JT2Go (All Versions < V13.1.0), JT2Go (V 13.1.0), Solid... High Unreviewed
CVE-2020-26989 was published May 24, 2022
The affected product is vulnerable to three stack-based buffer overflows, which may allow an... Critical Unreviewed
CVE-2020-25189 was published May 24, 2022
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... Critical Unreviewed
CVE-2020-17407 was published May 24, 2022
In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be... High Unreviewed
CVE-2020-16234 was published May 24, 2022
HMS Industrial Networks AB eCatcher all versions prior to 6.5.5. The affected product is... High Unreviewed
CVE-2020-14498 was published May 24, 2022
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An... High Unreviewed
CVE-2020-5735 was published May 24, 2022
Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary... Critical Unreviewed
CVE-2019-3951 was published May 24, 2022
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... Critical Unreviewed
CVE-2019-19333 was published May 24, 2022
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... Critical Unreviewed
CVE-2019-19334 was published May 24, 2022
A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell... High Unreviewed
CVE-2019-14897 was published May 24, 2022
TurboVNC server code contains stack buffer overflow vulnerability in commit prior to... Critical Unreviewed
CVE-2019-15683 was published May 24, 2022
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... High Unreviewed
CVE-2019-17145 was published May 24, 2022
An attacker could use a specially crafted project file to overflow the buffer and execute code... High Unreviewed
CVE-2019-13518 was published May 24, 2022
NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows... High Unreviewed
CVE-2019-13156 was published May 24, 2022
Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior... High Unreviewed
CVE-2019-13520 was published May 24, 2022
An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for... High Unreviewed
CVE-2019-1185 was published May 24, 2022
NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an... Moderate Unreviewed
CVE-2019-10974 was published May 24, 2022
Insufficient validation of environment variables in the telnet client supplied in Junos OS can... High Unreviewed
CVE-2019-0053 was published May 24, 2022
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack... High Unreviewed
CVE-2019-10164 was published May 24, 2022
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided... Critical Unreviewed
CVE-2018-20655 was published May 24, 2022
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender... Critical Unreviewed
CVE-2018-6349 was published May 24, 2022
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for... Critical Unreviewed
CVE-2018-6339 was published May 24, 2022
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the... High Unreviewed
CVE-2019-10954 was published May 24, 2022
Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are... Critical Unreviewed
CVE-2021-32941 was published May 24, 2022
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter... High Unreviewed
CVE-2022-24290 was published May 21, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database