Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

206 advisories

Loading
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged... High Unreviewed
CVE-2017-5717 was published May 14, 2022
Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker... High Unreviewed
CVE-2017-5115 was published May 14, 2022
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection... Critical Unreviewed
CVE-2016-7979 was published May 14, 2022
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to... High Unreviewed
CVE-2016-8602 was published May 14, 2022
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion... High Unreviewed
CVE-2017-2995 was published May 14, 2022
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ... High Unreviewed
CVE-2017-8291 was published May 14, 2022
A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a... High Unreviewed
CVE-2018-6480 was published May 14, 2022
An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability... High Unreviewed
CVE-2018-7407 was published May 14, 2022
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion... Critical Unreviewed
CVE-2018-4920 was published May 14, 2022
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue... High Unreviewed
CVE-2018-4219 was published May 14, 2022
Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0... High Unreviewed
CVE-2018-12453 was published May 14, 2022
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.... High Unreviewed
CVE-2018-5007 was published May 14, 2022
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote... High Unreviewed
CVE-2017-15413 was published May 14, 2022
The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as... High Unreviewed
CVE-2016-5161 was published May 14, 2022
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an... High Unreviewed
CVE-2018-12386 was published May 14, 2022
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... High Unreviewed
CVE-2018-5861 was published May 14, 2022
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful... Critical Unreviewed
CVE-2018-15981 was published May 14, 2022
In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type... High Unreviewed
CVE-2018-9490 was published May 14, 2022
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain... High Unreviewed
CVE-2018-19134 was published May 14, 2022
In iOS before 11.2, a type confusion issue was addressed with improved memory handling. High Unreviewed
CVE-2017-13888 was published May 14, 2022
Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282... High Unreviewed
CVE-2018-6056 was published May 14, 2022
Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a... High Unreviewed
CVE-2018-6124 was published May 14, 2022
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ... High Unreviewed
CVE-2018-7813 was published May 14, 2022
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ... High Unreviewed
CVE-2018-7815 was published May 14, 2022
Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability.... High Unreviewed
CVE-2018-4945 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database