GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,128
NuGet
735
pip
3,944
Pub
12
RubyGems
945
Rust
1,024
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,163 advisories
Filter by severity
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by...
Moderate
Unreviewed
CVE-2008-0167
was published
May 1, 2022
The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10...
Moderate
Unreviewed
CVE-2007-5377
was published
May 1, 2022
Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect...
Moderate
Unreviewed
CVE-2007-5695
was published
May 1, 2022
Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to...
Moderate
Unreviewed
CVE-2008-0613
was published
May 1, 2022
The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink...
Moderate
Unreviewed
CVE-2008-1417
was published
May 1, 2022
The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown...
Low
Unreviewed
CVE-2008-0732
was published
May 1, 2022
sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary...
Low
Unreviewed
CVE-2007-6208
was published
May 1, 2022
expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows...
High
Unreviewed
CVE-2008-1078
was published
May 1, 2022
aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the...
High
Unreviewed
CVE-2008-1901
was published
May 1, 2022
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products,...
Moderate
Unreviewed
CVE-2008-2266
was published
May 1, 2022
Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink...
Low
Unreviewed
CVE-2008-0666
was published
May 1, 2022
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary...
Low
Unreviewed
CVE-2007-6595
was published
May 1, 2022
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can...
High
Unreviewed
CVE-2008-0870
was published
May 1, 2022
lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink...
Low
Unreviewed
CVE-2008-1832
was published
May 1, 2022
PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for...
Moderate
Unreviewed
CVE-2008-0525
was published
May 1, 2022
wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite...
Low
Unreviewed
CVE-2008-0665
was published
May 1, 2022
Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact...
High
Unreviewed
CVE-2008-3329
was published
May 1, 2022
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a...
Low
Unreviewed
CVE-2008-0883
was published
May 1, 2022
w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print...
High
Unreviewed
CVE-2008-0930
was published
May 1, 2022
Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900...
High
Unreviewed
CVE-2008-3521
was published
May 2, 2022
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related...
Moderate
Unreviewed
CVE-2008-1103
was published
May 1, 2022
The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in...
Low
Unreviewed
CVE-2008-3699
was published
May 2, 2022
GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows...
Moderate
Unreviewed
CVE-2008-1241
was published
May 1, 2022
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the...
Moderate
Unreviewed
CVE-2008-3216
was published
May 1, 2022
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack...
Moderate
Unreviewed
CVE-2008-4085
was published
May 2, 2022
ProTip!
Advisories are also available from the
GraphQL API