Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,054 advisories

Loading
HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute... High Unreviewed
CVE-2008-4559 was published May 2, 2022
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery... High Unreviewed
CVE-2008-4509 was published May 2, 2022
Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow... High Unreviewed
CVE-2008-4505 was published May 2, 2022
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of... High Unreviewed
CVE-2008-4482 was published May 2, 2022
Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly... High Unreviewed
CVE-2008-4444 was published May 2, 2022
The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the... High Unreviewed
CVE-2008-4441 was published May 2, 2022
Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager ... High Unreviewed
CVE-2008-4428 was published May 2, 2022
The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not... High Unreviewed
CVE-2008-4404 was published May 2, 2022
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup ... High Unreviewed
CVE-2008-4397 was published May 2, 2022
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x... High Unreviewed
CVE-2008-4388 was published May 2, 2022
The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service ... High Unreviewed
CVE-2008-4380 was published May 2, 2022
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system... High Unreviewed
CVE-2008-4363 was published May 2, 2022
Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has... High Unreviewed
CVE-2008-4358 was published May 2, 2022
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows... High Unreviewed
CVE-2008-4343 was published May 2, 2022
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1... High Unreviewed
CVE-2008-4342 was published May 2, 2022
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and... High Unreviewed
CVE-2008-4329 was published May 2, 2022
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell... High Unreviewed
CVE-2008-4318 was published May 2, 2022
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server ... High Unreviewed
CVE-2008-4283 was published May 2, 2022
UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service ... High Unreviewed
CVE-2008-4224 was published May 2, 2022
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows... High Unreviewed
CVE-2008-4163 was published May 2, 2022
PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers... High Unreviewed
CVE-2008-4137 was published May 2, 2022
JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest:... High Unreviewed
CVE-2008-4105 was published May 2, 2022
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user... High Unreviewed
CVE-2008-4101 was published May 2, 2022
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated... High Unreviewed
CVE-2008-4096 was published May 2, 2022
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE... High Unreviewed
CVE-2008-4050 was published May 2, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database