Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,752
Maven
5,000+
npm
4,357
NuGet
765
pip
4,121
Pub
12
RubyGems
961
Rust
1,069
Swift
45
Unreviewed advisories
All unreviewed
5,000+

305,925 advisories

Loading
A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count... High Unreviewed
CVE-2023-28393 was published Sep 25, 2023
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft... Critical Unreviewed
CVE-2023-32284 was published Sep 25, 2023
An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding... Critical Unreviewed
CVE-2023-40163 was published Sep 25, 2023
A permissions issue was addressed with improved redaction of sensitive information. This issue is... Moderate Unreviewed
CVE-2023-23495 was published Sep 27, 2023
A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11... High Unreviewed
CVE-2023-32541 was published Sep 27, 2023
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of... High Unreviewed
CVE-2023-32653 was published Sep 25, 2023
A lock screen issue was addressed with improved state management. This issue is fixed in macOS... Low Unreviewed
CVE-2023-37448 was published Sep 27, 2023
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of... Critical Unreviewed
CVE-2023-32614 was published Sep 25, 2023
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft... Critical Unreviewed
CVE-2023-35002 was published Sep 25, 2023
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2023-40402 was published Sep 27, 2023
A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft... Critical Unreviewed
CVE-2023-39453 was published Sep 25, 2023
This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS... High Unreviewed
CVE-2023-32396 was published Sep 27, 2023
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and... Moderate Unreviewed
CVE-2023-40391 was published Sep 27, 2023
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in... Low Unreviewed
CVE-2023-40386 was published Sep 27, 2023
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in... Moderate Unreviewed
CVE-2023-40388 was published Sep 27, 2023
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn... Moderate Unreviewed
CVE-2023-4498 was published Sep 6, 2023
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23... Critical Unreviewed
CVE-2023-40890 was published Aug 29, 2023
Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted... Moderate Unreviewed
CVE-2023-38745 was published Jul 25, 2023
A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a... Moderate Unreviewed
CVE-2023-34872 was published Jul 31, 2023
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial... High Unreviewed
CVE-2022-48541 was published Aug 22, 2023
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3... High Unreviewed
CVE-2023-25124 was published Jul 6, 2023
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3... High Unreviewed
CVE-2023-25119 was published Jul 6, 2023
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3... High Unreviewed
CVE-2023-25121 was published Jul 6, 2023
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3... High Unreviewed
CVE-2023-25122 was published Jul 6, 2023
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3... High Unreviewed
CVE-2023-25123 was published Jul 6, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database