Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,840
Erlang
36
GitHub Actions
33
Go
2,464
Maven
5,000+
npm
4,082
NuGet
723
pip
3,880
Pub
12
RubyGems
943
Rust
1,011
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,329 advisories

Loading
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS)... High Unreviewed
CVE-2008-4576 was published May 2, 2022
Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection... High Unreviewed
CVE-2008-4515 was published May 2, 2022
changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not... High Unreviewed
CVE-2008-4427 was published May 2, 2022
Symantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not... High Unreviewed
CVE-2008-4389 was published May 2, 2022
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative... High Unreviewed
CVE-2008-4244 was published May 2, 2022
Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass... High Unreviewed
CVE-2008-4223 was published May 2, 2022
admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain... High Unreviewed
CVE-2008-4081 was published May 2, 2022
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold... High Unreviewed
CVE-2008-4037 was published May 2, 2022
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not... High Unreviewed
CVE-2008-4032 was published May 2, 2022
The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to... High Unreviewed
CVE-2008-3891 was published May 2, 2022
Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote... High Unreviewed
CVE-2008-3729 was published May 2, 2022
The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in... High Unreviewed
CVE-2008-3703 was published May 2, 2022
Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password... High Unreviewed
CVE-2008-3610 was published May 2, 2022
Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk... High Unreviewed
CVE-2008-3579 was published May 2, 2022
Unspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and... High Unreviewed
CVE-2008-3504 was published May 2, 2022
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to... High Unreviewed
CVE-2008-3466 was published May 2, 2022
The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require... High Unreviewed
CVE-2008-3411 was published May 2, 2022
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote... High Unreviewed
CVE-2008-3375 was published May 1, 2022
admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication... High Unreviewed
CVE-2008-3319 was published May 1, 2022
admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication... High Unreviewed
CVE-2008-3322 was published May 1, 2022
admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass... High Unreviewed
CVE-2008-3320 was published May 1, 2022
admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass... High Unreviewed
CVE-2008-3321 was published May 1, 2022
admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication... High Unreviewed
CVE-2008-3317 was published May 1, 2022
admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication... High Unreviewed
CVE-2008-3318 was published May 1, 2022
eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by... High Unreviewed
CVE-2008-3299 was published May 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database