GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,127
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
15,618 advisories
Filter by severity
userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local...
Low
Unreviewed
CVE-2013-2142
was published
May 17, 2022
WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site...
Low
Unreviewed
CVE-2010-5297
was published
May 17, 2022
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite...
Low
Unreviewed
CVE-2012-0786
was published
May 17, 2022
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite...
Low
Unreviewed
CVE-2012-6607
was published
May 17, 2022
The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the...
Low
Unreviewed
CVE-2013-2234
was published
May 17, 2022
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7...
Low
Unreviewed
CVE-2013-4331
was published
May 17, 2022
Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1...
Low
Unreviewed
CVE-2013-4383
was published
May 17, 2022
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x...
Low
Unreviewed
CVE-2013-6033
was published
May 17, 2022
The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not...
Low
Unreviewed
CVE-2013-2237
was published
May 17, 2022
The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves...
Low
Unreviewed
CVE-2013-0914
was published
May 17, 2022
net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which...
Low
Unreviewed
CVE-2013-2634
was published
May 17, 2022
The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not...
Low
Unreviewed
CVE-2013-2635
was published
May 17, 2022
Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in...
Low
Unreviewed
CVE-2013-5871
was published
May 17, 2022
Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion...
Low
Unreviewed
CVE-2013-5808
was published
May 17, 2022
Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in...
Low
Unreviewed
CVE-2013-5868
was published
May 17, 2022
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...
Low
Unreviewed
CVE-2013-5874
was published
May 17, 2022
Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8...
Low
Unreviewed
CVE-2014-0370
was published
May 17, 2022
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...
Low
Unreviewed
CVE-2014-0371
was published
May 17, 2022
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...
Low
Unreviewed
CVE-2014-0381
was published
May 17, 2022
Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11...
Low
Unreviewed
CVE-2014-0383
was published
May 17, 2022
Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in...
Low
Unreviewed
CVE-2014-0444
was published
May 17, 2022
Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not...
Low
Unreviewed
CVE-2011-0543
was published
May 17, 2022
fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows...
Low
Unreviewed
CVE-2011-0541
was published
May 17, 2022
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote...
Low
Unreviewed
CVE-2010-3089
was published
May 17, 2022
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml,...
Low
Unreviewed
CVE-2013-1069
was published
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API