Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,645
Maven
5,000+
npm
4,271
NuGet
760
pip
4,065
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+

9,975 advisories

Loading
MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set High
CVE-2010-0667 was published for moin (pip) May 2, 2022
anonymous4ACL24
Credited to anonymous4ACL24
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before... Moderate Unreviewed
CVE-2010-0663 was published May 2, 2022
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in... Moderate Unreviewed
CVE-2010-0660 was published May 2, 2022
WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing... Moderate Unreviewed
CVE-2010-0656 was published May 2, 2022
Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3... Moderate Unreviewed
CVE-2010-0654 was published May 2, 2022
Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the... Moderate Unreviewed
CVE-2010-0652 was published May 2, 2022
Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet... Moderate Unreviewed
CVE-2010-0653 was published May 2, 2022
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5,... Moderate Unreviewed
CVE-2010-0651 was published May 2, 2022
Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL... Moderate Unreviewed
CVE-2010-0648 was published May 2, 2022
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries... Moderate Unreviewed
CVE-2010-0644 was published May 2, 2022
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all... Moderate Unreviewed
CVE-2010-0643 was published May 2, 2022
Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files... Moderate Unreviewed
CVE-2010-0642 was published May 2, 2022
Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco... High Unreviewed
CVE-2010-0572 was published May 2, 2022
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through... Moderate Unreviewed
CVE-2010-0563 was published May 2, 2022
HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers... Moderate Unreviewed
CVE-2010-0551 was published May 2, 2022
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060... Moderate Unreviewed
CVE-2010-0549 was published May 2, 2022
Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre... Moderate Unreviewed
CVE-2010-0548 was published May 2, 2022
Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which... Moderate Unreviewed
CVE-2010-0523 was published May 2, 2022
Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted... Moderate Unreviewed
CVE-2010-0494 was published May 2, 2022
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified ... Moderate Unreviewed
CVE-2010-0488 was published May 2, 2022
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain... Moderate Unreviewed
CVE-2010-0463 was published May 2, 2022
Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain... Moderate Unreviewed
CVE-2010-0464 was published May 2, 2022
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,... Moderate Unreviewed
CVE-2010-0434 was published May 2, 2022
Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent... Low Unreviewed
CVE-2010-0384 was published May 2, 2022
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain... Moderate Unreviewed
CVE-2010-0383 was published May 2, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database