Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,332
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

382 advisories

Loading
In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used... Moderate Unreviewed
CVE-2024-0042 was published May 7, 2024
Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-51560 was published May 3, 2024
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-42105 was published May 3, 2024
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-42102 was published May 3, 2024
PDF-XChange Editor addScript Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-42074 was published May 3, 2024
Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability. This vulnerability... High Unreviewed
CVE-2023-38091 was published May 3, 2024
libxmljs vulnerable to type confusion when parsing specially crafted XML High
CVE-2024-34391 was published for libxmljs (npm) May 2, 2024
libxmljs vulnerable to type confusion when parsing specially crafted XML High
CVE-2024-34392 was published for libxmljs (npm) May 2, 2024
Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to... High Unreviewed
CVE-2024-4058 was published May 1, 2024
A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997... High Unreviewed
CVE-2024-25575 was published Apr 30, 2024
marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause... Moderate Unreviewed
CVE-2023-50433 was published Apr 30, 2024
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-26232 was published Apr 9, 2024
Remote Procedure Call Runtime Remote Code Execution Vulnerability High Unreviewed
CVE-2024-20678 was published Apr 9, 2024
eyre: Parts of Report are dropped as the wrong type during downcast High
GHSA-4v52-7q2x-v4xj was published for eyre (Rust) Apr 5, 2024
Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-30357 was published Apr 2, 2024
Wasmtime vulnerable to panic when using a dropped extenref-typed element segment Low
CVE-2024-30266 was published for wasmtime (Rust) Apr 2, 2024
ShinWonho
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type... Low Unreviewed
CVE-2024-21834 was published Apr 2, 2024
In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This... High Unreviewed
CVE-2024-27236 was published Mar 11, 2024
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to... High Unreviewed
CVE-2024-1939 was published Feb 29, 2024
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21357 was published Feb 13, 2024
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21363 was published Feb 13, 2024
In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead... Moderate Unreviewed
CVE-2024-20012 was published Feb 5, 2024
In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead... Moderate Unreviewed
CVE-2024-20010 was published Feb 5, 2024
A type confusion issue was addressed with improved checks. This issue is fixed in tvOS 17.3, iOS... High Unreviewed
CVE-2024-23222 was published Jan 23, 2024
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to... High Unreviewed
CVE-2024-0518 was published Jan 17, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database