Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,082 advisories

Loading
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security... High Unreviewed
CVE-2019-8454 was published May 24, 2022
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX... High Unreviewed
CVE-2019-11538 was published May 24, 2022
snap-confine as included in snapd before 2.39 did not guard against symlink races when performing... High Unreviewed
CVE-2019-11503 was published May 24, 2022
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid... High Unreviewed
CVE-2019-11502 was published May 24, 2022
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point... High Unreviewed
CVE-2019-8452 was published May 24, 2022
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can... High Unreviewed
CVE-2022-31258 was published May 21, 2022
HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary... Low Unreviewed
CVE-2013-0200 was published May 17, 2022
** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a... Moderate Unreviewed
CVE-2008-4998 was published May 17, 2022
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp... Moderate Unreviewed
CVE-2008-4988 was published May 17, 2022
** DISPUTED ** init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via... Moderate Unreviewed
CVE-2008-4996 was published May 17, 2022
** DISPUTED ** postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary... Moderate Unreviewed
CVE-2008-4977 was published May 17, 2022
** DISPUTED ** dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary... Moderate Unreviewed
CVE-2008-4997 was published May 17, 2022
** DISPUTED ** master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary... Moderate Unreviewed
CVE-2008-5034 was published May 17, 2022
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink... Moderate Unreviewed
CVE-2008-5146 was published May 17, 2022
test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack... Moderate Unreviewed
CVE-2008-5151 was published May 17, 2022
** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a... Moderate Unreviewed
CVE-2008-5135 was published May 17, 2022
netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack... Moderate Unreviewed
CVE-2008-5379 was published May 17, 2022
sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink... Moderate Unreviewed
CVE-2008-5372 was published May 17, 2022
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the ... Moderate Unreviewed
CVE-2008-5369 was published May 17, 2022
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a... Moderate Unreviewed
CVE-2008-5376 was published May 17, 2022
mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a... Moderate Unreviewed
CVE-2008-5143 was published May 17, 2022
pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a... Moderate Unreviewed
CVE-2008-5370 was published May 17, 2022
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files... Moderate Unreviewed
CVE-2008-5367 was published May 17, 2022
sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a... Moderate Unreviewed
CVE-2008-5148 was published May 17, 2022
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary... Moderate Unreviewed
CVE-2008-5366 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database