Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,211 advisories

Loading
Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8... Moderate Unreviewed
CVE-2022-28791 was published May 4, 2022
Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not... Moderate Unreviewed
CVE-2011-0051 was published May 3, 2022
The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an... Moderate Unreviewed
CVE-2011-0040 was published May 3, 2022
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify... Moderate Unreviewed
CVE-2011-0025 was published May 3, 2022
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of... Moderate Unreviewed
CVE-2011-0015 was published May 3, 2022
MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers... Moderate Unreviewed
CVE-2011-0003 was published May 3, 2022
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and... Moderate Unreviewed
CVE-2010-0097 was published May 3, 2022
The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not... Moderate Unreviewed
CVE-2009-4327 was published May 3, 2022
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9... Moderate Unreviewed
CVE-2009-4325 was published May 3, 2022
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows... Moderate Unreviewed
CVE-2009-0172 was published May 3, 2022
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5... Moderate Unreviewed
CVE-2009-0173 was published May 3, 2022
Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before... Moderate Unreviewed
CVE-2008-3960 was published May 3, 2022
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not... Moderate Unreviewed
CVE-2007-1349 was published May 3, 2022
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not... Moderate Unreviewed
CVE-2007-0908 was published May 3, 2022
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1... Moderate Unreviewed
CVE-2006-4340 was published May 3, 2022
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)... Moderate Unreviewed
CVE-2006-2223 was published May 3, 2022
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and... Moderate Unreviewed
CVE-2006-1729 was published May 3, 2022
The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers... Moderate Unreviewed
CVE-2005-3183 was published May 3, 2022
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages... Moderate Unreviewed
CVE-2002-0146 was published May 3, 2022
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user... Moderate Unreviewed
CVE-2010-1455 was published May 2, 2022
Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding... Moderate Unreviewed
CVE-2010-1379 was published May 2, 2022
The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT... Moderate Unreviewed
CVE-2010-1322 was published May 2, 2022
The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers... Moderate Unreviewed
CVE-2010-1311 was published May 2, 2022
Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger... Moderate Unreviewed
CVE-2010-1235 was published May 2, 2022
The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS... Moderate Unreviewed
CVE-2010-1226 was published May 2, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database