Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,471
Erlang
33
GitHub Actions
24
Go
2,173
Maven
5,000+
npm
3,834
NuGet
696
pip
3,511
Pub
12
RubyGems
910
Rust
908
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

10,342 advisories

Loading
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote... Low Unreviewed
CVE-2004-1500 was published Apr 29, 2022
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via... Low Unreviewed
CVE-2004-1490 was published Apr 29, 2022
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from... Low Unreviewed
CVE-2004-1489 was published Apr 29, 2022
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code... Low Unreviewed
CVE-2004-1465 was published Apr 29, 2022
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00,... Low Unreviewed
CVE-2004-1451 was published Apr 29, 2022
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10... Low Unreviewed
CVE-2004-1453 was published Apr 29, 2022
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR... Low Unreviewed
CVE-2004-1445 was published Apr 29, 2022
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated... Low Unreviewed
CVE-2004-1438 was published Apr 29, 2022
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to... Low Unreviewed
CVE-2004-1449 was published Apr 29, 2022
Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite... Low Unreviewed
CVE-2004-1411 was published Apr 29, 2022
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service ... Low Unreviewed
CVE-2004-1396 was published Apr 29, 2022
The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or... Low Unreviewed
CVE-2004-1387 was published Apr 29, 2022
The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files... Low Unreviewed
CVE-2004-1382 was published Apr 29, 2022
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow... Low Unreviewed
CVE-2004-1377 was published Apr 29, 2022
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a... Low Unreviewed
CVE-2004-1355 was published Apr 29, 2022
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the... Low Unreviewed
CVE-2004-1349 was published Apr 29, 2022
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to... Low Unreviewed
CVE-2004-1356 was published Apr 29, 2022
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows... Low Unreviewed
CVE-2004-1360 was published Apr 29, 2022
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to... Low Unreviewed
CVE-2004-1340 was published Apr 29, 2022
The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service... Low Unreviewed
CVE-2004-1346 was published Apr 29, 2022
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows... Low Unreviewed
CVE-2004-1333 was published Apr 29, 2022
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local... Low Unreviewed
CVE-2004-1334 was published Apr 29, 2022
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names,... Low Unreviewed
CVE-2004-1336 was published Apr 29, 2022
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users... Low Unreviewed
CVE-2004-1335 was published Apr 29, 2022
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass... Low Unreviewed
CVE-2004-1331 was published Apr 29, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database