GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,035
Maven
5,000+
npm
3,732
NuGet
662
pip
3,413
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
231 advisories
Filter by severity
Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort...
High
Unreviewed
CVE-2023-39235
was published
Jan 8, 2024
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...
High
Unreviewed
CVE-2023-35994
was published
Jan 8, 2024
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...
High
Unreviewed
CVE-2023-35997
was published
Jan 8, 2024
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...
High
Unreviewed
CVE-2023-35995
was published
Jan 8, 2024
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...
High
Unreviewed
CVE-2023-35996
was published
Jan 8, 2024
Memory corruption in Kernel while parsing metadata.
High
Unreviewed
CVE-2023-33053
was published
Dec 5, 2023
An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles"...
High
Unreviewed
CVE-2023-35126
was published
Oct 19, 2023
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
High
Unreviewed
CVE-2023-24850
was published
Oct 3, 2023
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
High
Unreviewed
CVE-2023-28565
was published
Sep 5, 2023
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
High
Unreviewed
CVE-2023-28548
was published
Sep 5, 2023
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
High
Unreviewed
CVE-2023-28558
was published
Sep 5, 2023
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
High
Unreviewed
CVE-2023-28557
was published
Sep 5, 2023
Memory corruption in WLAN HAL while parsing WMI command parameters.
High
Unreviewed
CVE-2023-28573
was published
Sep 5, 2023
Memory corruption in WLAN HAL while handling command through WMI interfaces.
High
Unreviewed
CVE-2023-28567
was published
Sep 5, 2023
Memory corruption due to improper validation of array index in Audio.
High
Unreviewed
CVE-2022-40534
was published
Sep 5, 2023
Memory Corruption due to improper validation of array index in Linux while updating adn record.
High
Unreviewed
CVE-2023-21636
was published
Sep 5, 2023
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum...
High
Unreviewed
CVE-2022-33275
was published
Sep 5, 2023
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
High
Unreviewed
CVE-2023-21650
was published
Aug 8, 2023
Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact...
High
Unreviewed
CVE-2023-29458
was published
Jul 13, 2023
An access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0...
High
Unreviewed
CVE-2023-31194
was published
Jul 5, 2023
A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local...
High
Unreviewed
CVE-2023-2570
was published
Jun 14, 2023
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document...
High
Unreviewed
CVE-2023-0950
was published
May 25, 2023
Memory corruption due to improper validation of array index in computer vision while testing EVA...
High
Unreviewed
CVE-2022-33281
was published
May 2, 2023
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a...
High
Unreviewed
CVE-2023-2008
was published
Apr 14, 2023
Memory corruption due to improper validation of array index in User Identity Module when APN TLV...
High
Unreviewed
CVE-2022-33302
was published
Apr 13, 2023
ProTip!
Advisories are also available from the
GraphQL API