Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,826
Erlang
36
GitHub Actions
32
Go
2,426
Maven
5,000+
npm
4,058
NuGet
723
pip
3,848
Pub
12
RubyGems
934
Rust
1,006
Swift
38
Unreviewed advisories
All unreviewed
5,000+

2,570 advisories

Loading
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in... High Unreviewed
CVE-2013-2751 was published May 14, 2022
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to... High Unreviewed
CVE-2013-1349 was published May 13, 2022
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows... High Unreviewed
CVE-2013-4376 was published May 17, 2022
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3... High Unreviewed
CVE-2012-0262 was published May 4, 2022
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows... High Unreviewed
CVE-2012-0261 was published May 4, 2022
The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote... High Unreviewed
CVE-2013-6795 was published May 17, 2022
The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and... High Unreviewed
CVE-2013-4813 was published May 17, 2022
wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has... High Unreviewed
CVE-2013-4338 was published May 17, 2022
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a... High Unreviewed
CVE-2013-3143 was published May 14, 2022
WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code... High Unreviewed
CVE-2013-0912 was published May 17, 2022
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and... High Unreviewed
CVE-2013-1488 was published May 17, 2022
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update... High Unreviewed
CVE-2013-1491 was published May 17, 2022
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012... High Unreviewed
CVE-2012-0439 was published May 4, 2022
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM... High Unreviewed
CVE-2013-1637 was published May 17, 2022
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an... High Unreviewed
CVE-2013-1638 was published May 17, 2022
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update... High Unreviewed
CVE-2013-0401 was published May 5, 2022
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7... High Unreviewed
CVE-2012-6329 was published May 17, 2022
Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service... High Unreviewed
CVE-2012-6465 was published May 17, 2022
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote... High Unreviewed
CVE-2012-5690 was published May 17, 2022
The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC... High Unreviewed
CVE-2012-2971 was published May 13, 2022
The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2,... High Unreviewed
CVE-2012-5223 was published May 17, 2022
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed... High Unreviewed
CVE-2012-0209 was published May 4, 2022
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame... High Unreviewed
CVE-2012-5159 was published May 17, 2022
Xunlei Thunder before 7.2.6 allows remote attackers to execute arbitrary code via a crafted file,... High Unreviewed
CVE-2012-2224 was published May 17, 2022
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0... High Unreviewed
CVE-2012-1205 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database