GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,015
Maven
5,000+
npm
3,721
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
852
Swift
36
Unreviewed advisories
All unreviewed
5,000+
325 advisories
Filter by severity
Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local...
High
Unreviewed
CVE-2009-1262
was published
May 2, 2022
Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier...
High
Unreviewed
CVE-2009-1210
was published
May 2, 2022
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...
Low
Unreviewed
CVE-2009-0754
was published
May 2, 2022
Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows...
Low
Unreviewed
CVE-2009-0601
was published
May 2, 2022
Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and...
Moderate
Unreviewed
CVE-2009-0538
was published
May 2, 2022
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other...
High
Unreviewed
CVE-2009-0364
was published
May 2, 2022
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...
Moderate
Unreviewed
CVE-2008-3963
was published
May 2, 2022
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows...
Moderate
Unreviewed
CVE-2008-3940
was published
May 2, 2022
Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before...
High
Unreviewed
CVE-2008-3871
was published
May 2, 2022
Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0...
High
Unreviewed
CVE-2008-3734
was published
May 2, 2022
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after...
High
Unreviewed
CVE-2008-3533
was published
May 2, 2022
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company)...
High
Unreviewed
CVE-2008-3116
was published
May 1, 2022
Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted...
Moderate
Unreviewed
CVE-2008-2310
was published
May 1, 2022
Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows...
Moderate
Unreviewed
CVE-2008-1705
was published
May 1, 2022
Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and...
Moderate
Unreviewed
CVE-2008-1658
was published
May 1, 2022
Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6...
Moderate
Unreviewed
CVE-2008-1401
was published
May 1, 2022
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management...
Moderate
Unreviewed
CVE-2008-1357
was published
May 1, 2022
Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote...
Moderate
Unreviewed
CVE-2008-1333
was published
May 1, 2022
Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when...
Moderate
Unreviewed
CVE-2008-1206
was published
May 1, 2022
Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote...
Moderate
Unreviewed
CVE-2008-1127
was published
May 1, 2022
Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build...
High
Unreviewed
CVE-2008-1120
was published
May 1, 2022
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and...
High
Unreviewed
CVE-2008-1055
was published
May 1, 2022
Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to...
Moderate
Unreviewed
CVE-2008-0989
was published
May 1, 2022
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris...
High
Unreviewed
CVE-2008-0965
was published
May 1, 2022
Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated...
High
Unreviewed
CVE-2008-0963
was published
May 1, 2022
ProTip!
Advisories are also available from the
GraphQL API