GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
652 advisories
Filter by severity
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows...
Moderate
Unreviewed
CVE-2007-6599
was published
May 1, 2022
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun...
Moderate
Unreviewed
CVE-2007-6216
was published
May 1, 2022
Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac...
Moderate
Unreviewed
CVE-2007-5847
was published
May 1, 2022
Race condition in nss_ldap, when used in applications that are linked against the pthread library...
Moderate
Unreviewed
CVE-2007-5794
was published
May 1, 2022
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers...
Moderate
Unreviewed
CVE-2007-5154
was published
May 1, 2022
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of...
Moderate
Unreviewed
CVE-2007-5132
was published
May 1, 2022
Race condition in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to...
Moderate
Unreviewed
CVE-2007-4696
was published
May 1, 2022
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary...
Moderate
Unreviewed
CVE-2007-3970
was published
May 1, 2022
Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library ...
Moderate
Unreviewed
CVE-2007-3478
was published
May 1, 2022
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows...
Moderate
Unreviewed
CVE-2007-2654
was published
May 1, 2022
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...
Moderate
Unreviewed
CVE-2007-1741
was published
May 1, 2022
MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the...
Moderate
Unreviewed
CVE-2007-1249
was published
May 1, 2022
Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might...
Moderate
Unreviewed
CVE-2007-0997
was published
May 1, 2022
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of...
Moderate
Unreviewed
CVE-2006-6275
was published
May 1, 2022
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the...
Moderate
Unreviewed
CVE-2006-5178
was published
May 1, 2022
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows...
Moderate
Unreviewed
CVE-2006-4801
was published
May 1, 2022
Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack...
Moderate
Unreviewed
CVE-2006-2094
was published
May 1, 2022
Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local...
Moderate
Unreviewed
CVE-2006-0039
was published
May 1, 2022
Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial...
Moderate
Unreviewed
CVE-2005-4883
was published
May 1, 2022
Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite...
Moderate
Unreviewed
CVE-2005-3240
was published
May 1, 2022
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows...
Moderate
Unreviewed
CVE-2000-0864
was published
Apr 30, 2022
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local...
Moderate
Unreviewed
CVE-2004-2698
was published
Apr 29, 2022
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users...
Moderate
Unreviewed
CVE-2004-2697
was published
Apr 29, 2022
Opera offers an Open button to verify that a user wishes to execute a downloaded file, which...
Moderate
Unreviewed
CVE-2004-2659
was published
Apr 29, 2022
Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory...
Moderate
Unreviewed
CVE-2003-1438
was published
Apr 29, 2022
ProTip!
Advisories are also available from the
GraphQL API