Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,889 advisories

Loading
AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL... Low Unreviewed
CVE-2005-1720 was published May 1, 2022
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote... Low Unreviewed
CVE-2005-1696 was published May 1, 2022
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service ... Low Unreviewed
CVE-2005-1686 was published May 1, 2022
Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0... Low Unreviewed
CVE-2005-1695 was published May 1, 2022
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh,... Low Unreviewed
CVE-2005-1683 was published May 1, 2022
** DISPUTED ** JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not... Low Unreviewed
CVE-2005-1682 was published May 1, 2022
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before... Low Unreviewed
CVE-2005-1678 was published May 1, 2022
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and... Low Unreviewed
CVE-2005-1671 was published May 1, 2022
mod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions,... Low Unreviewed
CVE-2005-1641 was published May 1, 2022
Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the... Low Unreviewed
CVE-2005-1627 was published May 1, 2022
Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which... Low Unreviewed
CVE-2005-1617 was published May 1, 2022
EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows... Low Unreviewed
CVE-2005-1578 was published May 1, 2022
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP... Low Unreviewed
CVE-2005-1576 was published May 1, 2022
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs,... Low Unreviewed
CVE-2005-1518 was published May 1, 2022
Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web... Low Unreviewed
CVE-2005-1488 was published May 1, 2022
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist,... Low Unreviewed
CVE-2005-1490 was published May 1, 2022
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain... Low Unreviewed
CVE-2005-1472 was published May 1, 2022
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is... Low Unreviewed
CVE-2005-1430 was published May 1, 2022
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in... Low Unreviewed
CVE-2005-1424 was published May 1, 2022
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, ... Low Unreviewed
CVE-2005-1410 was published May 1, 2022
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before... Low Unreviewed
CVE-2005-1405 was published May 1, 2022
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to... Low Unreviewed
CVE-2005-1396 was published May 1, 2022
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long... Low Unreviewed
CVE-2005-1385 was published May 1, 2022
The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow... Low Unreviewed
CVE-2005-1368 was published May 1, 2022
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2... Low Unreviewed
CVE-2005-1369 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database