Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

9,897 advisories

Loading
Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to... Low Unreviewed
CVE-2003-1295 was published Apr 29, 2022
Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a... Low Unreviewed
CVE-2003-1273 was published Apr 29, 2022
cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain... Low Unreviewed
CVE-2003-1281 was published Apr 29, 2022
Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users... Low Unreviewed
CVE-2003-1265 was published Apr 29, 2022
Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash)... Low Unreviewed
CVE-2003-1261 was published Apr 29, 2022
NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows... Low Unreviewed
CVE-2003-1246 was published Apr 29, 2022
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers,... Low Unreviewed
CVE-2003-1233 was published Apr 29, 2022
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords... Low Unreviewed
CVE-2003-1225 was published Apr 29, 2022
BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password... Low Unreviewed
CVE-2003-1226 was published Apr 29, 2022
Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the... Low Unreviewed
CVE-2003-1224 was published Apr 29, 2022
Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of... Low Unreviewed
CVE-2003-1174 was published Apr 29, 2022
Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45... Low Unreviewed
CVE-2003-1129 was published Apr 29, 2022
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which... Low Unreviewed
CVE-2003-1133 was published Apr 29, 2022
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service ... Low Unreviewed
CVE-2003-1135 was published Apr 29, 2022
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash),... Low Unreviewed
CVE-2003-1134 was published Apr 29, 2022
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ... Low Unreviewed
CVE-2003-1120 was published Apr 29, 2022
ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS... Low Unreviewed
CVE-2003-1122 was published Apr 29, 2022
Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to... Low Unreviewed
CVE-2003-1105 was published Apr 29, 2022
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in ... Low Unreviewed
CVE-2003-1099 was published Apr 29, 2022
Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of... Low Unreviewed
CVE-2003-1080 was published Apr 29, 2022
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete... Low Unreviewed
CVE-2003-1073 was published Apr 29, 2022
Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to... Low Unreviewed
CVE-2003-1077 was published Apr 29, 2022
Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel... Low Unreviewed
CVE-2003-1072 was published Apr 29, 2022
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged... Low Unreviewed
CVE-2003-1071 was published Apr 29, 2022
Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for... Low Unreviewed
CVE-2003-1065 was published Apr 29, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database