GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
21
Go
2,094
Maven
5,000+
npm
3,759
NuGet
678
pip
3,445
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
11,339 advisories
Filter by severity
Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when...
Low
Unreviewed
CVE-2002-2050
was published
Apr 30, 2022
Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which...
Low
Unreviewed
CVE-2002-2038
was published
Apr 30, 2022
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option,...
Low
Unreviewed
CVE-2002-2051
was published
Apr 30, 2022
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain...
Low
Unreviewed
CVE-2002-2039
was published
Apr 30, 2022
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has...
Low
Unreviewed
CVE-2002-2028
was published
Apr 30, 2022
The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid...
Low
Unreviewed
CVE-2002-2023
was published
Apr 30, 2022
Apache Tomcat Default Installation Reveals Sensitive Information
Low
CVE-2002-2006
was published
for
org.apache.tomcat:tomcat
(Maven)
Apr 30, 2022
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to...
Low
Unreviewed
CVE-2002-1996
was published
Apr 30, 2022
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local...
Low
Unreviewed
CVE-2002-2001
was published
Apr 30, 2022
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface...
Low
Unreviewed
CVE-2002-1976
was published
Apr 30, 2022
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the ...
Low
Unreviewed
CVE-2002-1977
was published
Apr 30, 2022
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password...
Low
Unreviewed
CVE-2002-1975
was published
Apr 30, 2022
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang)...
Low
Unreviewed
CVE-2002-1983
was published
Apr 30, 2022
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with...
Low
Unreviewed
CVE-2002-1970
was published
Apr 30, 2022
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows...
Low
Unreviewed
CVE-2002-1963
was published
Apr 30, 2022
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions...
Low
Unreviewed
CVE-2002-1968
was published
Apr 30, 2022
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to...
Low
Unreviewed
CVE-2002-1956
was published
Apr 30, 2022
Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password"...
Low
Unreviewed
CVE-2002-1946
was published
Apr 30, 2022
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which...
Low
Unreviewed
CVE-2002-1939
was published
Apr 30, 2022
Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing...
Low
Unreviewed
CVE-2002-1927
was published
Apr 30, 2022
tip on multiple BSD-based operating systems allows local users to cause a denial of service ...
Low
Unreviewed
CVE-2002-1915
was published
Apr 30, 2022
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention)...
Low
Unreviewed
CVE-2002-1914
was published
Apr 30, 2022
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink...
Low
Unreviewed
CVE-2002-1890
was published
Apr 30, 2022
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a...
Low
Unreviewed
CVE-2002-1892
was published
Apr 30, 2022
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization...
Low
Unreviewed
CVE-2002-1888
was published
Apr 30, 2022
ProTip!
Advisories are also available from the
GraphQL API