Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,992
Erlang
39
GitHub Actions
38
Go
2,634
Maven
5,000+
npm
4,258
NuGet
760
pip
4,051
Pub
12
RubyGems
955
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,290 advisories

Loading
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer... High Unreviewed
CVE-2023-21594 was published Jan 13, 2023
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. High Unreviewed
CVE-2023-0288 was published Jan 13, 2023
The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while... High Unreviewed
CVE-2022-3160 was published Jan 13, 2023
A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A... High Unreviewed
CVE-2022-43591 was published Jan 12, 2023
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. High Unreviewed
CVE-2023-0051 was published Jan 4, 2023
In wlan driver, there is a possible missing bounds check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-44427 was published Jan 4, 2023
In wlan driver, there is a possible missing bounds check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-44430 was published Jan 4, 2023
In wlan driver, there is a possible missing bounds check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-44428 was published Jan 4, 2023
In wlan driver, there is a possible missing bounds check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-44429 was published Jan 4, 2023
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... High Unreviewed
CVE-2022-43599 was published Dec 23, 2022
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... High Unreviewed
CVE-2022-43600 was published Dec 23, 2022
A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO... Critical Unreviewed
CVE-2022-41838 was published Dec 23, 2022
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... High Unreviewed
CVE-2022-43602 was published Dec 23, 2022
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of... High Unreviewed
CVE-2022-43601 was published Dec 23, 2022
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in... Critical Unreviewed
CVE-2022-41639 was published Dec 23, 2022
Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... High Unreviewed
CVE-2022-43598 was published Dec 23, 2022
Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality... High Unreviewed
CVE-2022-43597 was published Dec 23, 2022
A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of... Critical Unreviewed
CVE-2022-41794 was published Dec 23, 2022
A vulnerability was found in Axiomatic Bento4. It has been rated as critical. Affected by this... High Unreviewed
CVE-2022-4584 was published Dec 17, 2022
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... High Unreviewed
CVE-2022-2601 was published Dec 14, 2022
Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at ... High Unreviewed
CVE-2022-44910 was published Dec 14, 2022
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine... High Unreviewed
CVE-2022-44654 was published Dec 12, 2022
GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could... High Unreviewed
CVE-2022-2948 was published Dec 8, 2022
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. Critical Unreviewed
CVE-2022-3491 was published Dec 3, 2022
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. Critical Unreviewed
CVE-2022-3520 was published Dec 2, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database