Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,890 advisories

Loading
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on... Low Unreviewed
CVE-2005-2960 was published May 1, 2022
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the... Low Unreviewed
CVE-2005-2962 was published May 1, 2022
KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching... Low Unreviewed
CVE-2005-2948 was published May 1, 2022
arc 5.21j and earlier create temporary files with world-readable permissions, which allows local... Low Unreviewed
CVE-2005-2945 was published May 1, 2022
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly... Low Unreviewed
CVE-2005-2873 was published May 1, 2022
Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt... Low Unreviewed
CVE-2005-2879 was published May 1, 2022
URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1)... Low Unreviewed
CVE-2005-2864 was published May 1, 2022
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows... Low Unreviewed
CVE-2005-2868 was published May 1, 2022
smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a... Low Unreviewed
CVE-2005-2851 was published May 1, 2022
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local... Low Unreviewed
CVE-2005-2809 was published May 1, 2022
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2... Low Unreviewed
CVE-2005-2800 was published May 1, 2022
cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local... Low Unreviewed
CVE-2005-2785 was published May 1, 2022
The user interface in the Windows Firewall does not properly display certain malformed entries in... Low Unreviewed
CVE-2005-2765 was published May 1, 2022
Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when... Low Unreviewed
CVE-2005-2766 was published May 1, 2022
Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows... Low Unreviewed
CVE-2005-2762 was published May 1, 2022
Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service ... Low Unreviewed
CVE-2005-2755 was published May 1, 2022
Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without... Low Unreviewed
CVE-2005-2750 was published May 1, 2022
An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory... Low Unreviewed
CVE-2005-2752 was published May 1, 2022
Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes... Low Unreviewed
CVE-2005-2749 was published May 1, 2022
memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access... Low Unreviewed
CVE-2005-2751 was published May 1, 2022
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local... Low Unreviewed
CVE-2005-2748 was published May 1, 2022
Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times... Low Unreviewed
CVE-2005-2739 was published May 1, 2022
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote... Low Unreviewed
CVE-2005-2731 was published May 1, 2022
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly... Low Unreviewed
CVE-2005-2725 was published May 1, 2022
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does... Low Unreviewed
CVE-2005-2708 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database