Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,874
Erlang
37
GitHub Actions
36
Go
2,520
Maven
5,000+
npm
4,160
NuGet
741
pip
3,961
Pub
12
RubyGems
946
Rust
1,028
Swift
39
Unreviewed advisories
All unreviewed
5,000+

1,336 advisories

Loading
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before... Critical Unreviewed
CVE-2022-25899 was published Aug 19, 2022
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions High
CVE-2025-27154 was published for spotipy (pip) Feb 28, 2025
alichtman
Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows)... High Unreviewed
CVE-2025-24864 was published Mar 6, 2025
Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows)... High Unreviewed
CVE-2025-22447 was published Mar 6, 2025
An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06... High Unreviewed
CVE-2022-45552 was published Mar 3, 2023
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration... Moderate Unreviewed
CVE-2025-27926 was published Mar 11, 2025
Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address... High Unreviewed
CVE-2024-44786 was published Nov 22, 2024
In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an... High Unreviewed
CVE-2024-49742 was published Jan 22, 2025
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local... High Unreviewed
CVE-2024-30977 was published Apr 5, 2024
In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant... High Unreviewed
CVE-2024-49732 was published Jan 22, 2025
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567... Moderate Unreviewed
CVE-2024-25654 was published Mar 18, 2024
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers... Moderate Unreviewed
CVE-2024-48572 was published Oct 30, 2024
In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control... High Unreviewed
CVE-2024-55957 was published Jan 22, 2025
Local file inclusion in Automatic Systems Maintenance SlimLane... Critical Unreviewed
CVE-2024-48823 was published Oct 14, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Critical Unreviewed
CVE-2025-24093 was published Jan 28, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2024-44151 was published Sep 17, 2024
In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking... High Unreviewed
CVE-2024-43765 was published Jan 22, 2025
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions. Critical Unreviewed
CVE-2024-55959 was published Jan 21, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS... Critical Unreviewed
CVE-2025-24174 was published Jan 28, 2025
Permission control vulnerability in the calendarProvider module.Successful exploitation of this... High Unreviewed
CVE-2023-52379 was published Feb 18, 2024
In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to... High Unreviewed
CVE-2024-40655 was published Sep 11, 2024
An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been... High Unreviewed
CVE-2024-39924 was published Sep 13, 2024
Privilege escalation in Automatic Systems Maintenance SlimLane... High Unreviewed
CVE-2024-48822 was published Oct 14, 2024
Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). ... High Unreviewed
CVE-2025-21532 was published Jan 21, 2025
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to... High Unreviewed
CVE-2024-49744 was published Jan 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database