GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,874
Erlang
37
GitHub Actions
36
Go
2,520
Maven
5,000+
npm
4,160
NuGet
741
pip
3,961
Pub
12
RubyGems
946
Rust
1,028
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,336 advisories
Filter by severity
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...
Critical
Unreviewed
CVE-2024-57684
was published
Jan 16, 2025
The Settings module has the file privilege escalation vulnerability.Successful exploitation of...
High
Unreviewed
CVE-2023-1693
was published
May 20, 2023
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous...
High
Unreviewed
CVE-2023-33240
was published
May 19, 2023
In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to...
High
Unreviewed
CVE-2024-49737
was published
Jan 22, 2025
In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs...
High
Unreviewed
CVE-2024-34730
was published
Jan 22, 2025
A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated...
Critical
Unreviewed
CVE-2025-20156
was published
Jan 22, 2025
Insecure permissions in the ps_customer table of Prestashop scquickaccounting before v3.7.3...
Moderate
Unreviewed
CVE-2023-30281
was published
May 16, 2023
Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...
Critical
Unreviewed
CVE-2024-46505
was published
Jan 9, 2025
Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to...
High
Unreviewed
CVE-2025-0543
was published
Jan 25, 2025
There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate...
Moderate
Unreviewed
CVE-2024-22062
was published
Jul 9, 2024
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura...
High
Unreviewed
CVE-2025-24176
was published
Jan 28, 2025
This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia...
Critical
Unreviewed
CVE-2025-24135
was published
Jan 28, 2025
Local privilege escalation due to insecure folder permissions. The following products are...
Moderate
Unreviewed
CVE-2025-24826
was published
Jan 28, 2025
CMSimple 5.16 allows the user to edit log.php file via print page.
Critical
Unreviewed
CVE-2024-57548
was published
Jan 28, 2025
A use after free issue was addressed with improved memory management. This issue is fixed in...
High
Unreviewed
CVE-2025-24085
was published
Jan 28, 2025
Snowflake JDBC uses insecure temporary credential cache file permissions
Moderate
CVE-2025-24790
was published
for
net.snowflake:snowflake-jdbc
(Maven)
Jan 29, 2025
Snowflake.Data has weak temporary files permissions
Moderate
CVE-2025-24788
was published
for
Snowflake.Data
(NuGet)
Jan 29, 2025
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need...
High
Unreviewed
CVE-2023-1809
was published
May 2, 2023
A vulnerability in the NetExtender Windows client log export function allows unauthorized access...
High
Unreviewed
CVE-2025-23007
was published
Jan 30, 2025
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process...
High
Unreviewed
CVE-2024-1488
was published
Feb 15, 2024
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows...
High
Unreviewed
CVE-2021-23166
was published
Apr 25, 2023
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c...
Moderate
Unreviewed
CVE-2024-52783
was published
Jan 15, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia...
Moderate
Unreviewed
CVE-2025-24140
was published
Jan 28, 2025
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to...
Moderate
Unreviewed
CVE-2024-40514
was published
Jan 17, 2025
ProTip!
Advisories are also available from the
GraphQL API