Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,014
Maven
5,000+
npm
3,721
NuGet
662
pip
3,393
Pub
11
RubyGems
890
Rust
852
Swift
36
Unreviewed advisories
All unreviewed
5,000+

390 advisories

Loading
An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro... High Unreviewed
CVE-2023-38128 was published Oct 19, 2023
Type confusion vulnerability in the distributed file module.Successful exploitation of this... High Unreviewed
CVE-2023-44108 was published Oct 11, 2023
Type confusion vulnerability in the distributed file module.Successful exploitation of this... Moderate Unreviewed
CVE-2023-44094 was published Oct 11, 2023
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to... High Unreviewed
CVE-2023-5346 was published Oct 5, 2023
In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in ... Critical Unreviewed
CVE-2023-43154 was published Sep 27, 2023
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x... Critical Unreviewed
CVE-2023-42464 was published Sep 20, 2023
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization... High Unreviewed
CVE-2023-38074 was published Sep 14, 2023
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization... High Unreviewed
CVE-2023-38073 was published Sep 14, 2023
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to... High Unreviewed
CVE-2023-4762 was published Sep 6, 2023
Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to... High Unreviewed
CVE-2023-4352 was published Aug 15, 2023
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and... High Unreviewed
CVE-2023-32358 was published Aug 15, 2023
A type confusion issue was addressed with improved state handling. This issue is fixed in... High Unreviewed
CVE-2022-46706 was published Aug 15, 2023
In multiple locations, there is a possible code execution due to type confusion. This could lead... Critical Unreviewed
CVE-2023-21287 was published Aug 15, 2023
The cam_get_device_priv function does not check the type of handle being returned (device/session... High Unreviewed
CVE-2023-28575 was published Aug 8, 2023
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user... Moderate Unreviewed
CVE-2023-4194 was published Aug 7, 2023
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to... High Unreviewed
CVE-2023-4070 was published Aug 3, 2023
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to... High Unreviewed
CVE-2023-4069 was published Aug 3, 2023
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to... High Unreviewed
CVE-2023-4068 was published Aug 3, 2023
Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to... High Unreviewed
CVE-2022-4912 was published Jul 29, 2023
A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous... High Unreviewed
CVE-2023-28729 was published Jul 21, 2023
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When... Moderate Unreviewed
CVE-2023-34967 was published Jul 20, 2023
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in... High Unreviewed
CVE-2023-32664 was published Jul 19, 2023
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability High Unreviewed
CVE-2023-36887 was published Jul 14, 2023
coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not block multiple Content... Critical Unreviewed
CVE-2023-38199 was published Jul 13, 2023
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201... High Unreviewed
CVE-2023-37376 was published Jul 11, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database