Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,144
NuGet
735
pip
3,947
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

103,281 advisories

Loading
Information Disclosure vulnerabilities allow access to application configuration information. ... High Unreviewed
CVE-2024-51543 was published Dec 5, 2024
Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected... High Unreviewed
CVE-2024-51541 was published Dec 5, 2024
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... High Unreviewed
CVE-2024-53703 was published Dec 5, 2024
Server-Side Request Forgery vulnerabilities were found providing a potential for access to... High Unreviewed
CVE-2024-6784 was published Dec 5, 2024
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application... High Unreviewed
CVE-2024-48847 was published Dec 5, 2024
Denial of Service vulnerabilities where found providing a potiential for device service... High Unreviewed
CVE-2024-48844 was published Dec 5, 2024
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing... High Unreviewed
CVE-2024-48846 was published Dec 5, 2024
Denial of Service vulnerabilities where found providing a potiential for device service... High Unreviewed
CVE-2024-48843 was published Dec 5, 2024
Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the... High Unreviewed
CVE-2024-11316 was published Dec 5, 2024
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign... High Unreviewed
CVE-2024-52270 was published Dec 5, 2024
Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and... High Unreviewed
CVE-2024-52564 was published Dec 5, 2024
UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier allow a remote... High Unreviewed
CVE-2024-47133 was published Dec 5, 2024
The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials... High Unreviewed
CVE-2024-11429 was published Dec 5, 2024
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a... High Unreviewed
CVE-2018-9396 was published Dec 5, 2024
In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds... High Unreviewed
CVE-2018-9463 was published Dec 5, 2024
In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow... High Unreviewed
CVE-2018-9404 was published Dec 5, 2024
In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could... High Unreviewed
CVE-2018-9399 was published Dec 5, 2024
In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151... High Unreviewed
CVE-2018-9400 was published Dec 5, 2024
In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a... High Unreviewed
CVE-2018-9397 was published Dec 5, 2024
In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check.... High Unreviewed
CVE-2018-9402 was published Dec 5, 2024
In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after... High Unreviewed
CVE-2018-9439 was published Dec 5, 2024
In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper... High Unreviewed
CVE-2018-9398 was published Dec 5, 2024
In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a... High Unreviewed
CVE-2018-9403 was published Dec 5, 2024
In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect... High Unreviewed
CVE-2018-9462 was published Dec 5, 2024
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request. High Unreviewed
CVE-2024-50947 was published Dec 4, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database