GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+
5,055 advisories
Filter by severity
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha,...
High
Unreviewed
CVE-2010-0283
was published
May 2, 2022
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate...
High
Unreviewed
CVE-2010-0270
was published
May 2, 2022
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1...
High
Unreviewed
CVE-2010-0189
was published
May 2, 2022
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel...
High
Unreviewed
CVE-2010-0111
was published
May 2, 2022
fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint...
High
Unreviewed
CVE-2010-0114
was published
May 2, 2022
The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices,...
High
Unreviewed
CVE-2010-0101
was published
May 2, 2022
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which...
High
Unreviewed
CVE-2010-0045
was published
May 2, 2022
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and...
High
Unreviewed
CVE-2010-0022
was published
May 2, 2022
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and...
High
Unreviewed
CVE-2010-0020
was published
May 2, 2022
The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2...
High
Unreviewed
CVE-2010-0016
was published
May 2, 2022
DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8...
High
Unreviewed
CVE-2009-5147
was published
May 2, 2022
Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period...
High
Unreviewed
CVE-2009-5038
was published
May 2, 2022
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow...
High
Unreviewed
CVE-2009-4921
was published
May 2, 2022
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow...
High
Unreviewed
CVE-2009-4918
was published
May 2, 2022
addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via...
High
Unreviewed
CVE-2009-4854
was published
May 2, 2022
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a...
High
Unreviewed
CVE-2009-4810
was published
May 2, 2022
Improper input validation in Mort Bay Jetty
High
CVE-2009-4611
was published
for
org.mortbay.jetty:jetty
(Maven)
May 2, 2022
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication...
High
Unreviewed
CVE-2009-4546
was published
May 2, 2022
drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not...
High
Unreviewed
CVE-2009-4537
was published
May 2, 2022
AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions...
High
Unreviewed
CVE-2009-4372
was published
May 2, 2022
A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise...
High
Unreviewed
CVE-2009-4272
was published
May 2, 2022
The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate...
High
Unreviewed
CVE-2009-4137
was published
May 2, 2022
Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier...
High
Unreviewed
CVE-2009-4106
was published
May 2, 2022
infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome...
High
Unreviewed
CVE-2009-4101
was published
May 2, 2022
Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges,...
High
Unreviewed
CVE-2009-4102
was published
May 2, 2022
ProTip!
Advisories are also available from the
GraphQL API