GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
10,667 advisories
Filter by severity
Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to...
Moderate
Unreviewed
CVE-2004-2706
was published
Apr 29, 2022
Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting...
Moderate
Unreviewed
CVE-2004-2649
was published
Apr 29, 2022
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2004-2596
was published
Apr 29, 2022
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2004-2592
was published
Apr 29, 2022
Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service ...
Moderate
Unreviewed
CVE-2004-2533
was published
Apr 29, 2022
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote...
High
Unreviewed
CVE-2004-1928
was published
Apr 29, 2022
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to...
Moderate
Unreviewed
CVE-2004-1777
was published
Apr 29, 2022
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application...
Moderate
Unreviewed
CVE-2004-1675
was published
Apr 29, 2022
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of...
Moderate
Unreviewed
CVE-2004-1617
was published
Apr 29, 2022
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote...
High
Unreviewed
CVE-2004-1386
was published
Apr 29, 2022
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...
High
Unreviewed
CVE-2004-1019
was published
Apr 29, 2022
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition,...
High
Unreviewed
CVE-2004-0840
was published
Apr 29, 2022
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters...
High
Unreviewed
CVE-2004-0411
was published
Apr 29, 2022
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote...
Moderate
Unreviewed
CVE-2004-0276
was published
Apr 29, 2022
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a...
Moderate
Unreviewed
CVE-2004-0244
was published
Apr 29, 2022
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a...
Moderate
Unreviewed
CVE-2003-1569
was published
Apr 29, 2022
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer...
Moderate
Unreviewed
CVE-2003-1568
was published
Apr 29, 2022
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does...
Moderate
Unreviewed
CVE-2003-1538
was published
Apr 29, 2022
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file...
Moderate
Unreviewed
CVE-2003-1485
was published
Apr 29, 2022
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers...
Moderate
Unreviewed
CVE-2003-1488
was published
Apr 29, 2022
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service ...
High
Unreviewed
CVE-2003-1490
was published
Apr 29, 2022
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers...
High
Unreviewed
CVE-2003-1487
was published
Apr 29, 2022
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows...
Low
Unreviewed
CVE-2003-1463
was published
Apr 29, 2022
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of...
Moderate
Unreviewed
CVE-2003-1471
was published
Apr 29, 2022
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative...
Moderate
Unreviewed
CVE-2003-1456
was published
Apr 29, 2022
ProTip!
Advisories are also available from the
GraphQL API