GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
11,563 advisories
Filter by severity
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9...
Moderate
Unreviewed
CVE-2009-4325
was published
May 3, 2022
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows...
Moderate
Unreviewed
CVE-2009-0172
was published
May 3, 2022
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5...
Moderate
Unreviewed
CVE-2009-0173
was published
May 3, 2022
Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before...
Moderate
Unreviewed
CVE-2008-3960
was published
May 3, 2022
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and...
High
Unreviewed
CVE-2008-3530
was published
May 3, 2022
NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a...
High
Unreviewed
CVE-2008-3584
was published
May 3, 2022
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2)...
High
Unreviewed
CVE-2008-2476
was published
May 3, 2022
The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before...
Low
Unreviewed
CVE-2007-3654
was published
May 3, 2022
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not...
Moderate
Unreviewed
CVE-2007-1349
was published
May 3, 2022
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...
Moderate
Unreviewed
CVE-2007-0908
was published
May 3, 2022
The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and...
Low
Unreviewed
CVE-2006-6653
was published
May 3, 2022
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords...
High
Unreviewed
CVE-2006-5867
was published
May 3, 2022
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1...
Moderate
Unreviewed
CVE-2006-4340
was published
May 3, 2022
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)...
Moderate
Unreviewed
CVE-2006-2223
was published
May 3, 2022
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and...
Moderate
Unreviewed
CVE-2006-1729
was published
May 3, 2022
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...
Low
Unreviewed
CVE-2006-1721
was published
May 3, 2022
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows...
High
Unreviewed
CVE-2006-0884
was published
May 3, 2022
The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers...
Moderate
Unreviewed
CVE-2005-3183
was published
May 3, 2022
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial...
High
Unreviewed
CVE-2005-0449
was published
May 3, 2022
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that...
High
Unreviewed
CVE-2004-1125
was published
May 3, 2022
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages...
Moderate
Unreviewed
CVE-2002-0146
was published
May 3, 2022
The WinVerifyTrust function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...
High
Unreviewed
CVE-2013-3900
was published
May 3, 2022
Denial of service vulnerability exists in libxmljs
High
CVE-2022-21144
was published
for
libxmljs
(npm)
May 3, 2022
Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2...
Critical
Unreviewed
CVE-2022-28054
was published
May 3, 2022
A vulnerability in the HCI Modbus TCP COMPONENT of Hitachi Energy RTU500 series CMU Firmware that...
High
Unreviewed
CVE-2022-28613
was published
May 3, 2022
ProTip!
Advisories are also available from the
GraphQL API