GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
3,830 advisories
Filter by severity
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of...
High
Unreviewed
CVE-2020-10181
was published
May 24, 2022
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles...
Moderate
Unreviewed
CVE-2020-0638
was published
May 24, 2022
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not...
High
Unreviewed
CVE-2019-1388
was published
May 24, 2022
An unprivileged network attacker could gain system privileges to provisioned Intel manageability...
Critical
Unreviewed
CVE-2017-5689
was published
May 13, 2022
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4...
Low
Unreviewed
CVE-2025-5496
was published
Oct 21, 2025
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx....
High
Unreviewed
CVE-2025-9067
was published
Oct 14, 2025
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer...
High
Unreviewed
CVE-2025-9068
was published
Oct 14, 2025
In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This...
High
Unreviewed
CVE-2022-20360
was published
Aug 11, 2022
The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this...
Critical
Unreviewed
CVE-2022-37002
was published
Aug 11, 2022
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due...
High
Unreviewed
CVE-2022-20347
was published
Aug 11, 2022
'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area),...
Critical
Unreviewed
CVE-2022-20239
was published
Aug 11, 2022
Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with...
High
Unreviewed
CVE-2025-2858
was published
Mar 28, 2025
Open WebUI Allows Admin Deletion via API Endpoint
High
CVE-2024-7039
was published
for
open-webui
(pip)
Mar 20, 2025
In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management...
Moderate
Unreviewed
CVE-2024-9431
was published
Mar 20, 2025
Improper Privilege Management vulnerability in Centreon web allows Privilege Escalation.
ACL are...
Moderate
Unreviewed
CVE-2025-4649
was published
May 13, 2025
In lunary-ai/lunary v1.5.0, improper privilege management in the models.ts file allows users with...
Moderate
Unreviewed
CVE-2024-10273
was published
Mar 20, 2025
In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API...
Moderate
Unreviewed
CVE-2024-7048
was published
Oct 10, 2024
The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for...
High
Unreviewed
CVE-2025-6042
was published
Oct 15, 2025
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8...
High
Unreviewed
CVE-2024-3325
was published
Jul 10, 2024
Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability...
Moderate
Unreviewed
CVE-2025-56747
was published
Oct 14, 2025
Improper Privilege Management vulnerability in Ekstrem Bir Bilgisayar Danismanlik Ic Ve Dis...
High
Unreviewed
CVE-2024-4341
was published
Jul 8, 2024
Improper Privilege Management vulnerability in Nomysoft Informatics Nomysem allows Collect Data...
Critical
Unreviewed
CVE-2024-8074
was published
Nov 12, 2024
Improper Privilege Management vulnerability in SAMPA? Holding AKOS allows Collect Data as...
Moderate
Unreviewed
CVE-2024-4259
was published
Sep 3, 2024
Improper Privilege Management vulnerability in Menulux Information Technologies Managment Portal...
Moderate
Unreviewed
CVE-2024-4428
was published
Aug 29, 2024
The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,...
Critical
Unreviewed
CVE-2025-11533
was published
Oct 11, 2025
ProTip!
Advisories are also available from the
GraphQL API