Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,109
Maven
5,000+
npm
3,765
NuGet
680
pip
3,453
Pub
12
RubyGems
892
Rust
887
Swift
37
Unreviewed advisories
All unreviewed
5,000+

11,384 advisories

Loading
Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to... Low Unreviewed
CVE-2006-0077 was published May 1, 2022
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on... Low Unreviewed
CVE-2006-0050 was published May 1, 2022
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service ... Low Unreviewed
CVE-2006-0053 was published May 1, 2022
The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of... Low Unreviewed
CVE-2005-4869 was published May 1, 2022
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for... Low Unreviewed
CVE-2005-4868 was published May 1, 2022
Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7... Low Unreviewed
CVE-2005-4855 was published May 1, 2022
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on... Low Unreviewed
CVE-2005-4803 was published May 1, 2022
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local... Low Unreviewed
CVE-2005-4796 was published May 1, 2022
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass... Low Unreviewed
CVE-2005-4788 was published May 1, 2022
Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to... Low Unreviewed
CVE-2005-4791 was published May 1, 2022
kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset... Low Unreviewed
CVE-2005-4783 was published May 1, 2022
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce... Low Unreviewed
CVE-2005-4789 was published May 1, 2022
The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem... Low Unreviewed
CVE-2005-4778 was published May 1, 2022
verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than... Low Unreviewed
CVE-2005-4779 was published May 1, 2022
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7... Low Unreviewed
CVE-2005-4761 was published May 1, 2022
BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key... Low Unreviewed
CVE-2005-4755 was published May 1, 2022
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local... Low Unreviewed
CVE-2005-4706 was published May 1, 2022
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and... Low Unreviewed
CVE-2005-4697 was published May 1, 2022
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to... Low Unreviewed
CVE-2005-4701 was published May 1, 2022
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys... Low Unreviewed
CVE-2005-4696 was published May 1, 2022
Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or... Low Unreviewed
CVE-2005-4690 was published May 1, 2022
PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable... Low Unreviewed
CVE-2005-4683 was published May 1, 2022
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary... Low Unreviewed
CVE-2005-4667 was published May 1, 2022
IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file,... Low Unreviewed
CVE-2005-4659 was published May 1, 2022
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite... Low Unreviewed
CVE-2005-4660 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database