Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+

32 advisories

Loading
Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which... Critical Unreviewed
CVE-2021-38441 was published May 6, 2022
An exploitable arbitrary write vulnerability exists in the open document format parser of the... High Unreviewed
CVE-2018-4038 was published May 13, 2022
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality... High Unreviewed
CVE-2018-3971 was published May 13, 2022
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that... High Unreviewed
CVE-2018-16962 was published May 13, 2022
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series... High Unreviewed
CVE-2018-15376 was published May 13, 2022
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series... High Unreviewed
CVE-2018-15375 was published May 13, 2022
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to... High Unreviewed
CVE-2017-6282 was published May 14, 2022
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute... Critical Unreviewed
CVE-2015-8271 was published May 17, 2022
Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability,... High Unreviewed
CVE-2017-10994 was published May 17, 2022
A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow... High Unreviewed
CVE-2021-1390 was published May 24, 2022
A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual... High Unreviewed
CVE-2021-1520 was published May 24, 2022
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition... Moderate Unreviewed
CVE-2021-36057 was published May 24, 2022
The affected product is vulnerable to a unsanitized extract folder for system configuration. A... High Unreviewed
CVE-2021-42540 was published May 24, 2022
Some API functions permit by-design writing or copying data into a given buffer. Since the client... Critical Unreviewed
CVE-2021-38449 was published May 24, 2022
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all... High Unreviewed
CVE-2020-7560 was published May 24, 2022
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the... High Unreviewed
CVE-2022-40262 was published Sep 21, 2022
A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only... High Unreviewed
CVE-2022-40246 was published Sep 21, 2022
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout... High Unreviewed
CVE-2022-35408 was published Sep 23, 2022
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to... High Unreviewed
CVE-2022-37904 was published Dec 12, 2022
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE... Critical Unreviewed
CVE-2022-38143 was published Dec 23, 2022
A vulnerability has been identified in syngo fastView (All versions). The affected application... High Unreviewed
CVE-2021-45465 was published Jan 4, 2024
Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition... High Unreviewed
CVE-2024-20741 was published Feb 15, 2024
Return registers were overwritten which could have allowed an attacker to execute arbitrary code.... High Unreviewed
CVE-2024-2607 was published Mar 19, 2024
Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards ... High Unreviewed
CVE-2024-36877 was published Aug 12, 2024
Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition... High Unreviewed
CVE-2024-45142 was published Oct 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database