Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,641
Maven
5,000+
npm
4,266
NuGet
760
pip
4,062
Pub
12
RubyGems
956
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,211 advisories

Loading
Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which... Moderate Unreviewed
CVE-2009-4496 was published May 2, 2022
** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitizing non-printable... Moderate Unreviewed
CVE-2009-4488 was published May 2, 2022
thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might... Moderate Unreviewed
CVE-2009-4491 was published May 2, 2022
header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable... Moderate Unreviewed
CVE-2009-4489 was published May 2, 2022
Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable... Moderate Unreviewed
CVE-2009-4493 was published May 2, 2022
AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which... Moderate Unreviewed
CVE-2009-4494 was published May 2, 2022
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email... Moderate Unreviewed
CVE-2009-4467 was published May 2, 2022
Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third... Moderate Unreviewed
CVE-2009-4445 was published May 2, 2022
extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote... Moderate Unreviewed
CVE-2009-4321 was published May 2, 2022
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow... Moderate Unreviewed
CVE-2009-4224 was published May 2, 2022
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736,... Moderate Unreviewed
CVE-2009-4114 was published May 2, 2022
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier... Moderate Unreviewed
CVE-2009-4098 was published May 2, 2022
CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to... Moderate Unreviewed
CVE-2009-4086 was published May 2, 2022
Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage)... Moderate Unreviewed
CVE-2009-4051 was published May 2, 2022
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x... Moderate Unreviewed
CVE-2009-4028 was published May 2, 2022
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0... Moderate Unreviewed
CVE-2009-3830 was published May 2, 2022
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an... Moderate Unreviewed
CVE-2009-3802 was published May 2, 2022
The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel... Moderate Unreviewed
CVE-2009-3640 was published May 2, 2022
The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent... Moderate Unreviewed
CVE-2009-3627 was published May 2, 2022
The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly... Moderate Unreviewed
CVE-2009-3620 was published May 2, 2022
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a... Moderate Unreviewed
CVE-2009-3591 was published May 2, 2022
packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain... Moderate Unreviewed
CVE-2009-3549 was published May 2, 2022
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial... Moderate Unreviewed
CVE-2009-3545 was published May 2, 2022
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly... Moderate Unreviewed
CVE-2009-3523 was published May 2, 2022
npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of... Moderate Unreviewed
CVE-2009-3448 was published May 2, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database