Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,263
Erlang
31
GitHub Actions
21
Go
2,033
Maven
5,000+
npm
3,732
NuGet
662
pip
3,411
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+

123 advisories

Loading
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are... High Unreviewed
CVE-2023-38246 was published Aug 10, 2023
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are... High Unreviewed
CVE-2023-38234 was published Aug 10, 2023
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are... High Unreviewed
CVE-2023-38226 was published Aug 10, 2023
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are... High Unreviewed
CVE-2023-38223 was published Aug 10, 2023
A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open... High Unreviewed
CVE-2022-42885 was published Jul 21, 2023
A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open... High Unreviewed
CVE-2022-44451 was published Jul 21, 2023
A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of... High Unreviewed
CVE-2022-46280 was published Jul 21, 2023
Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of... High Unreviewed
CVE-2023-21618 was published Jun 15, 2023
The affected product does not properly validate user-supplied data. If a user... High Unreviewed
CVE-2023-31244 was published Jun 6, 2023
A malicious actor may convince a user to open a malicious USD file that may trigger an... High Unreviewed
CVE-2023-25007 was published May 12, 2023
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized... High Unreviewed
CVE-2023-29278 was published May 12, 2023
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... High Unreviewed
CVE-2022-43609 was published Mar 29, 2023
Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer... High Unreviewed
CVE-2023-26334 was published Mar 28, 2023
A use-of-uninitialized-pointer vulnerability exists in the Forward Open... High Unreviewed
CVE-2022-43606 was published Mar 16, 2023
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).... High Unreviewed
CVE-2023-24978 was published Feb 14, 2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid... High Unreviewed
CVE-2023-24562 was published Feb 14, 2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid... High Unreviewed
CVE-2023-24561 was published Feb 14, 2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid... High Unreviewed
CVE-2023-24563 was published Feb 14, 2023
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the... High Unreviewed
CVE-2022-33280 was published Feb 12, 2023
CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having... High Unreviewed
CVE-2023-22366 was published Jan 17, 2023
Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an... High Unreviewed
CVE-2022-34480 was published Dec 22, 2022
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls... High Unreviewed
CVE-2022-2952 was published Dec 8, 2022
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls... High Unreviewed
CVE-2022-3084 was published Dec 8, 2022
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied... High Unreviewed
CVE-2022-3377 was published Nov 16, 2022
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied... High Unreviewed
CVE-2022-3378 was published Oct 28, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database