GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
11,628 advisories
Filter by severity
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and...
High
Unreviewed
CVE-2010-1562
was published
May 17, 2022
The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11...
High
Unreviewed
CVE-2010-1561
was published
May 17, 2022
The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8...
High
Unreviewed
CVE-2011-2883
was published
May 17, 2022
Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML...
Moderate
Unreviewed
CVE-2011-2892
was published
May 17, 2022
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...
Low
Unreviewed
CVE-2010-3862
was published
May 17, 2022
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote...
High
Unreviewed
CVE-2011-1774
was published
May 17, 2022
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1...
High
Unreviewed
CVE-2011-2092
was published
May 17, 2022
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified...
High
Unreviewed
CVE-2010-4803
was published
May 17, 2022
Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote...
High
Unreviewed
CVE-2010-1844
was published
May 17, 2022
ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote...
Moderate
Unreviewed
CVE-2010-3616
was published
May 17, 2022
Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other...
Moderate
Unreviewed
CVE-2010-1645
was published
May 17, 2022
Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2010-2505
was published
May 17, 2022
Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified...
High
Unreviewed
CVE-2010-4727
was published
May 17, 2022
Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module ...
High
Unreviewed
CVE-2010-2819
was published
May 17, 2022
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly...
Moderate
Unreviewed
CVE-2011-0418
was published
May 17, 2022
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an...
Moderate
Unreviewed
CVE-2011-0190
was published
May 17, 2022
The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1...
Moderate
Unreviewed
CVE-2011-0431
was published
May 17, 2022
Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which...
Moderate
Unreviewed
CVE-2010-4767
was published
May 17, 2022
Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2...
Moderate
Unreviewed
CVE-2008-7280
was published
May 17, 2022
The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly...
Moderate
Unreviewed
CVE-2011-2772
was published
May 17, 2022
VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API...
Moderate
Unreviewed
CVE-2012-1472
was published
May 17, 2022
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not...
Moderate
Unreviewed
CVE-2010-4788
was published
May 17, 2022
ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote...
Moderate
Unreviewed
CVE-2011-4311
was published
May 17, 2022
The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context...
Moderate
Unreviewed
CVE-2010-4156
was published
May 17, 2022
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of...
Moderate
Unreviewed
CVE-2011-4871
was published
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API