Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,210 advisories

Loading
Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to... Moderate Unreviewed
CVE-2007-1803 was published May 1, 2022
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate... Moderate Unreviewed
CVE-2007-1793 was published May 1, 2022
download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script... Moderate Unreviewed
CVE-2007-1478 was published May 1, 2022
The 4thPass browser (BlackBerry Browser) on the RIM BlackBerry 8100 (Pearl) before 4.2.1 allows... Moderate Unreviewed
CVE-2007-1441 was published May 1, 2022
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2,... Moderate Unreviewed
CVE-2007-1362 was published May 1, 2022
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works... Moderate Unreviewed
CVE-2007-1202 was published May 1, 2022
Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to... Moderate Unreviewed
CVE-2007-1155 was published May 1, 2022
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via... Moderate Unreviewed
CVE-2007-1136 was published May 1, 2022
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by... Moderate Unreviewed
CVE-2007-0802 was published May 1, 2022
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of... Moderate Unreviewed
CVE-2007-0197 was published May 1, 2022
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before... Moderate Unreviewed
CVE-2007-0104 was published May 1, 2022
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote... Moderate Unreviewed
CVE-2007-0103 was published May 1, 2022
The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote... Moderate Unreviewed
CVE-2007-0102 was published May 1, 2022
Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet... Moderate Unreviewed
CVE-2007-0012 was published May 1, 2022
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent... Moderate Unreviewed
CVE-2006-7243 was published May 1, 2022
Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon... Moderate Unreviewed
CVE-2006-7235 was published May 1, 2022
Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers... Moderate Unreviewed
CVE-2006-7225 was published May 1, 2022
PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum)... Moderate Unreviewed
CVE-2006-7208 was published May 1, 2022
product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation... Moderate Unreviewed
CVE-2006-7171 was published May 1, 2022
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not... Moderate Unreviewed
CVE-2006-7160 was published May 1, 2022
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the... Moderate Unreviewed
CVE-2006-6971 was published May 1, 2022
Opera allows remote attackers to cause a denial of service (application crash) via a web page... Moderate Unreviewed
CVE-2006-6955 was published May 1, 2022
Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a... Moderate Unreviewed
CVE-2006-6954 was published May 1, 2022
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a... Moderate Unreviewed
CVE-2006-6956 was published May 1, 2022
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct... Moderate Unreviewed
CVE-2006-6943 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database