GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
11,460 advisories
Filter by severity
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain...
Moderate
Unreviewed
CVE-2009-0942
was published
May 2, 2022
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames...
Moderate
Unreviewed
CVE-2009-0943
was published
May 2, 2022
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and...
High
Unreviewed
CVE-2009-0927
was published
May 2, 2022
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva...
High
Unreviewed
CVE-2009-0912
was published
May 2, 2022
IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group...
Low
Unreviewed
CVE-2009-0905
was published
May 2, 2022
The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers...
Moderate
Unreviewed
CVE-2009-0879
was published
May 2, 2022
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6...
Low
Unreviewed
CVE-2009-0871
was published
May 2, 2022
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition...
Moderate
Unreviewed
CVE-2009-0868
was published
May 2, 2022
The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does...
Moderate
Unreviewed
CVE-2009-0858
was published
May 2, 2022
The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5,...
Moderate
Unreviewed
CVE-2009-0859
was published
May 2, 2022
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...
High
Unreviewed
CVE-2009-0846
was published
May 2, 2022
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows...
High
Unreviewed
CVE-2009-0843
was published
May 2, 2022
The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...
Moderate
Unreviewed
CVE-2009-0845
was published
May 2, 2022
Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54)...
High
Unreviewed
CVE-2009-0813
was published
May 2, 2022
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9...
Moderate
Unreviewed
CVE-2009-0800
was published
May 2, 2022
The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14,...
Moderate
Unreviewed
CVE-2009-0790
was published
May 2, 2022
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows...
Moderate
Unreviewed
CVE-2009-0793
was published
May 2, 2022
Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode...
Moderate
Unreviewed
CVE-2009-0777
was published
May 2, 2022
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2...
Moderate
Unreviewed
CVE-2009-0748
was published
May 2, 2022
Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL...
Moderate
Unreviewed
CVE-2009-0744
was published
May 2, 2022
The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2...
Moderate
Unreviewed
CVE-2009-0745
was published
May 2, 2022
The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and...
Moderate
Unreviewed
CVE-2009-0746
was published
May 2, 2022
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security...
Low
Unreviewed
CVE-2009-0682
was published
May 2, 2022
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted...
High
Unreviewed
CVE-2009-0681
was published
May 2, 2022
Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of...
Moderate
Unreviewed
CVE-2009-0661
was published
May 2, 2022
ProTip!
Advisories are also available from the
GraphQL API