GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,035
Maven
5,000+
npm
3,732
NuGet
662
pip
3,413
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
4,277 advisories
Filter by severity
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally...
High
Unreviewed
CVE-2024-47238
was published
Dec 12, 2024
Read/Write vulnerability in the image decoding module
Impact: Successful exploitation of this...
High
Unreviewed
CVE-2024-54107
was published
Dec 12, 2024
Microsoft Defender for Endpoint on Android Spoofing Vulnerability
High
Unreviewed
CVE-2024-49057
was published
Dec 12, 2024
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Improper Input Validation...
High
Unreviewed
CVE-2024-52982
was published
Dec 10, 2024
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM...
High
Unreviewed
CVE-2024-52051
was published
Dec 10, 2024
Memory corruption while processing API calls to NPU with invalid input.
High
Unreviewed
CVE-2024-43052
was published
Dec 2, 2024
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
High
Unreviewed
CVE-2017-15832
was published
Nov 26, 2024
Valid Host header field can cause Apache Traffic Server to crash on some platforms.
This issue...
High
Unreviewed
CVE-2024-50305
was published
Nov 14, 2024
Improper Input Validation vulnerability in Apache Traffic Server.
This issue affects Apache...
High
Unreviewed
CVE-2024-38479
was published
Nov 14, 2024
Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a...
High
Unreviewed
CVE-2024-36482
was published
Nov 13, 2024
Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may...
High
Unreviewed
CVE-2024-41167
was published
Nov 13, 2024
Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update...
High
Unreviewed
CVE-2024-36282
was published
Nov 13, 2024
Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a...
High
Unreviewed
CVE-2024-31154
was published
Nov 13, 2024
Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow...
High
Unreviewed
CVE-2024-31158
was published
Nov 13, 2024
Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may...
High
Unreviewed
CVE-2024-28028
was published
Nov 13, 2024
CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality...
High
Unreviewed
CVE-2024-8936
was published
Nov 13, 2024
Microsoft Word Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-49033
was published
Nov 12, 2024
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted...
High
Unreviewed
CVE-2024-21974
was published
Nov 12, 2024
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted...
High
Unreviewed
CVE-2024-21975
was published
Nov 12, 2024
A Remote
Code Execution vulnerability exists in the affected product. The vulnerability requires...
High
Unreviewed
CVE-2024-10944
was published
Nov 12, 2024
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted...
High
Unreviewed
CVE-2024-21976
was published
Nov 12, 2024
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...
High
Unreviewed
CVE-2024-50557
was published
Nov 12, 2024
A remote code execution vulnerability exists in the affected
product. The vulnerability allows...
High
Unreviewed
CVE-2024-37365
was published
Nov 12, 2024
Account users in Apache CloudStack by default are allowed to register templates to be downloaded...
High
Unreviewed
CVE-2024-50386
was published
Nov 12, 2024
A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat...
High
Unreviewed
CVE-2024-20484
was published
Nov 6, 2024
ProTip!
Advisories are also available from the
GraphQL API