GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
353 advisories
Filter by severity
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7,...
Low
Unreviewed
CVE-2008-4549
was published
May 2, 2022
Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when...
Low
Unreviewed
CVE-2009-0093
was published
May 2, 2022
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security...
Low
Unreviewed
CVE-2009-0682
was published
May 2, 2022
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6...
Low
Unreviewed
CVE-2009-0871
was published
May 2, 2022
IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group...
Low
Unreviewed
CVE-2009-0905
was published
May 2, 2022
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus)...
Low
Unreviewed
CVE-2009-1189
was published
May 2, 2022
net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain...
Low
Unreviewed
CVE-2009-1243
was published
May 2, 2022
ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in...
Low
Unreviewed
CVE-2009-1536
was published
May 2, 2022
The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a...
Low
Unreviewed
CVE-2009-2918
was published
May 2, 2022
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by...
Low
Unreviewed
CVE-2009-4105
was published
May 2, 2022
Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into...
Low
Unreviewed
CVE-2009-5056
was published
May 2, 2022
The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2...
Low
Unreviewed
CVE-2010-0002
was published
May 2, 2022
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...
Low
Unreviewed
CVE-2010-0547
was published
May 2, 2022
The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat...
Low
Unreviewed
CVE-2010-0730
was published
May 2, 2022
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0...
Low
Unreviewed
CVE-2010-0777
was published
May 2, 2022
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...
Low
Unreviewed
CVE-2006-1721
was published
May 3, 2022
The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and...
Low
Unreviewed
CVE-2006-6653
was published
May 3, 2022
The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before...
Low
Unreviewed
CVE-2007-3654
was published
May 3, 2022
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...
Low
Unreviewed
CVE-2012-0021
was published
May 4, 2022
The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a...
Low
Unreviewed
CVE-2013-0122
was published
May 5, 2022
Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for...
Low
Unreviewed
CVE-2017-5081
was published
May 13, 2022
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in...
Low
Unreviewed
CVE-2012-2425
was published
May 13, 2022
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle...
Low
Unreviewed
CVE-2013-4255
was published
May 13, 2022
The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data...
Low
Unreviewed
CVE-2011-1016
was published
May 13, 2022
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,...
Low
Unreviewed
CVE-2014-3532
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API