GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
1,201 advisories
Filter by severity
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux...
Moderate
Unreviewed
CVE-2009-0876
was published
May 2, 2022
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application...
Moderate
Unreviewed
CVE-2008-4284
was published
May 2, 2022
Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect...
Moderate
Unreviewed
CVE-2008-4162
was published
May 2, 2022
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...
Moderate
Unreviewed
CVE-2008-4192
was published
May 2, 2022
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a...
Moderate
Unreviewed
CVE-2009-1142
was published
Nov 23, 2022
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users...
Moderate
Unreviewed
CVE-2008-3791
was published
May 2, 2022
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine...
Moderate
Unreviewed
CVE-2009-0347
was published
May 2, 2022
James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on...
Moderate
Unreviewed
CVE-2009-1253
was published
May 2, 2022
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local...
Moderate
Unreviewed
CVE-2008-3524
was published
May 2, 2022
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to...
Moderate
Unreviewed
CVE-2008-3456
was published
May 2, 2022
freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a...
High
Unreviewed
CVE-2008-4474
was published
May 2, 2022
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote...
Moderate
Unreviewed
CVE-2008-3261
was published
May 1, 2022
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a...
Moderate
Unreviewed
CVE-2008-4191
was published
May 2, 2022
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local...
Moderate
Unreviewed
CVE-2008-4190
was published
May 2, 2022
Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow...
High
Unreviewed
CVE-2008-4108
was published
May 2, 2022
MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...
Moderate
Unreviewed
CVE-2008-4098
was published
May 2, 2022
opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.
Moderate
Unreviewed
CVE-2008-2389
was published
May 1, 2022
The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for...
Moderate
Unreviewed
CVE-2009-0416
was published
May 2, 2022
Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial...
Moderate
Unreviewed
CVE-2009-0321
was published
May 2, 2022
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on...
Moderate
Unreviewed
CVE-2008-3931
was published
May 2, 2022
migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a...
Moderate
Unreviewed
CVE-2008-3930
was published
May 2, 2022
genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink...
High
Unreviewed
CVE-2008-3927
was published
May 2, 2022
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink...
High
Unreviewed
CVE-2008-3929
was published
May 2, 2022
winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack...
Moderate
Unreviewed
CVE-2009-0313
was published
May 2, 2022
configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack...
High
Unreviewed
CVE-2008-3883
was published
May 2, 2022
ProTip!
Advisories are also available from the
GraphQL API