Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+

1,852 advisories

Loading
heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2.... Critical Unreviewed
CVE-2022-1286 was published Apr 11, 2022
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function... Critical Unreviewed
CVE-2022-37069 was published Aug 26, 2022
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function... Critical Unreviewed
CVE-2022-37086 was published Aug 26, 2022
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function... Critical Unreviewed
CVE-2022-36517 was published Aug 26, 2022
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function... Critical Unreviewed
CVE-2022-37073 was published Aug 26, 2022
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library... Critical Unreviewed
CVE-2022-27571 was published Apr 12, 2022
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox... Critical Unreviewed
CVE-2022-36320 was published Dec 22, 2022
A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an... Critical Unreviewed
CVE-2021-43453 was published Apr 8, 2022
There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of... Critical Unreviewed
CVE-2022-27022 was published Apr 8, 2022
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList. Critical Unreviewed
CVE-2022-37091 was published Aug 26, 2022
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function... Critical Unreviewed
CVE-2022-36519 was published Aug 26, 2022
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList. Critical Unreviewed
CVE-2022-37093 was published Aug 26, 2022
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory... Critical Unreviewed
CVE-2022-31737 was published Dec 22, 2022
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR... Critical Unreviewed
CVE-2022-27572 was published Apr 12, 2022
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR... Critical Unreviewed
CVE-2022-27569 was published Apr 12, 2022
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR... Critical Unreviewed
CVE-2022-27568 was published Apr 12, 2022
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior... Critical Unreviewed
CVE-2022-27570 was published Apr 12, 2022
Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to... Critical Unreviewed
CVE-2022-26098 was published Apr 12, 2022
** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression... Critical Unreviewed
CVE-2022-26507 was published Apr 15, 2022
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c... Critical Unreviewed
CVE-2022-28044 was published Apr 16, 2022
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker... Critical Unreviewed
CVE-2022-21228 was published Apr 13, 2022
A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function... Critical Unreviewed
CVE-2021-26730 was published Oct 24, 2022
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of... Critical Unreviewed
CVE-2018-4013 was published May 13, 2022
A heap-based overflow vulnerability exists in the PowerPoint document conversion function of... Critical Unreviewed
CVE-2019-5019 was published Apr 30, 2022
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and... Critical Unreviewed
CVE-2017-9226 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database