GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,051
Erlang
29
GitHub Actions
19
Go
1,887
Maven
5,000+
npm
3,602
NuGet
638
pip
3,205
Pub
10
RubyGems
852
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,517 advisories
Filter by severity
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when...
Moderate
Unreviewed
CVE-2022-29480
was published
May 6, 2022
A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58...
High
Unreviewed
CVE-2013-4602
was published
May 5, 2022
cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when...
High
Unreviewed
CVE-2013-7470
was published
May 5, 2022
Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user...
Moderate
Unreviewed
CVE-2022-25779
was published
May 5, 2022
The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12...
High
Unreviewed
CVE-2012-0382
was published
May 4, 2022
The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote...
Moderate
Unreviewed
CVE-2012-0260
was published
May 4, 2022
The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to...
Moderate
Unreviewed
CVE-2012-0058
was published
May 4, 2022
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without...
High
Unreviewed
CVE-2012-0024
was published
May 4, 2022
A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD)...
Moderate
Unreviewed
CVE-2022-20748
was published
May 4, 2022
A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software...
High
Unreviewed
CVE-2022-20760
was published
May 4, 2022
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted...
Moderate
Unreviewed
CVE-2005-1260
was published
May 3, 2022
The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2...
Moderate
Unreviewed
CVE-2010-0205
was published
May 2, 2022
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial...
Moderate
Unreviewed
CVE-2009-3621
was published
May 2, 2022
Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of...
Moderate
Unreviewed
CVE-2009-3270
was published
May 2, 2022
Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers...
Moderate
Unreviewed
CVE-2009-3267
was published
May 2, 2022
Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services ...
Moderate
Unreviewed
CVE-2009-2521
was published
May 2, 2022
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...
High
Unreviewed
CVE-2009-1890
was published
May 2, 2022
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...
High
Unreviewed
CVE-2009-1891
was published
May 2, 2022
The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow...
High
Unreviewed
CVE-2008-4077
was published
May 2, 2022
The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel...
Moderate
Unreviewed
CVE-2008-3534
was published
May 2, 2022
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by...
Moderate
Unreviewed
CVE-2008-0132
was published
May 1, 2022
Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from...
Moderate
Unreviewed
CVE-2007-4725
was published
May 1, 2022
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service ...
Moderate
Unreviewed
CVE-2007-2650
was published
May 1, 2022
AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows...
Moderate
Unreviewed
CVE-2007-1377
was published
May 1, 2022
** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large...
High
Unreviewed
CVE-2007-0086
was published
May 1, 2022
ProTip!
Advisories are also available from the
GraphQL API