Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,890 advisories

Loading
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention)... Low Unreviewed
CVE-2002-1914 was published Apr 30, 2022
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink... Low Unreviewed
CVE-2002-1890 was published Apr 30, 2022
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a... Low Unreviewed
CVE-2002-1892 was published Apr 30, 2022
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization... Low Unreviewed
CVE-2002-1888 was published Apr 30, 2022
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a... Low Unreviewed
CVE-2002-1876 was published Apr 30, 2022
Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log... Low Unreviewed
CVE-2002-1869 was published Apr 30, 2022
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text... Low Unreviewed
CVE-2002-1848 was published Apr 30, 2022
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an... Low Unreviewed
CVE-2002-1827 was published Apr 30, 2022
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers... Low Unreviewed
CVE-2002-1813 was published Apr 30, 2022
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0... Low Unreviewed
CVE-2002-1785 was published Apr 30, 2022
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a... Low Unreviewed
CVE-2002-1782 was published Apr 30, 2022
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial... Low Unreviewed
CVE-2002-1754 was published Apr 30, 2022
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files... Low Unreviewed
CVE-2002-1764 was published Apr 30, 2022
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user... Low Unreviewed
CVE-2002-1739 was published Apr 30, 2022
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and... Low Unreviewed
CVE-2002-1740 was published Apr 30, 2022
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing... Low Unreviewed
CVE-2002-1731 was published Apr 30, 2022
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local... Low Unreviewed
CVE-2002-1737 was published Apr 30, 2022
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local... Low Unreviewed
CVE-2002-1711 was published Apr 30, 2022
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the... Low Unreviewed
CVE-2002-1710 was published Apr 30, 2022
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home... Low Unreviewed
CVE-2002-1713 was published Apr 30, 2022
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a... Low Unreviewed
CVE-2002-1696 was published Apr 30, 2022
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary... Low Unreviewed
CVE-2002-1692 was published Apr 30, 2022
Buffer overflow in the diagnostics library in AIX allows local users to "cause data and... Low Unreviewed
CVE-2002-1687 was published Apr 30, 2022
NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the... Low Unreviewed
CVE-2002-1682 was published Apr 30, 2022
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are... Low Unreviewed
CVE-2002-1673 was published Apr 30, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database