GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,873
Erlang
37
GitHub Actions
36
Go
2,519
Maven
5,000+
npm
4,156
NuGet
736
pip
3,956
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,336 advisories
Filter by severity
Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R)...
Moderate
Unreviewed
CVE-2023-29162
was published
Mar 28, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2024-44135
was published
Sep 17, 2024
An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via...
Critical
Unreviewed
CVE-2024-55215
was published
Feb 8, 2025
In multiple locations, there is a possible failure to persist permissions settings due to...
High
Unreviewed
CVE-2024-49735
was published
Jan 22, 2025
By default, SANnav OVA is shipped with root user login enabled. While protected by a password,...
Moderate
Unreviewed
CVE-2024-2859
was published
Apr 27, 2024
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS...
High
Unreviewed
CVE-2023-42928
was published
Feb 21, 2024
In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from...
High
Unreviewed
CVE-2024-0034
was published
Feb 16, 2024
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
High
Unreviewed
CVE-2024-21116
was published
Apr 17, 2024
WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application...
Critical
Unreviewed
CVE-2024-57032
was published
Jan 17, 2025
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
High
CVE-2025-24399
was published
for
org.jenkins-ci.plugins:oic-auth
(Maven)
Jan 22, 2025
Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies....
High
Unreviewed
CVE-2025-22918
was published
Feb 3, 2025
Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). ...
High
Unreviewed
CVE-2025-21532
was published
Jan 21, 2025
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to...
High
Unreviewed
CVE-2024-49744
was published
Jan 22, 2025
Privilege escalation in Automatic Systems Maintenance SlimLane...
High
Unreviewed
CVE-2024-48822
was published
Oct 14, 2024
In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to...
High
Unreviewed
CVE-2024-40655
was published
Sep 11, 2024
An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been...
High
Unreviewed
CVE-2024-39924
was published
Sep 13, 2024
Permission control vulnerability in the calendarProvider module.Successful exploitation of this...
High
Unreviewed
CVE-2023-52379
was published
Feb 18, 2024
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.
Critical
Unreviewed
CVE-2024-55959
was published
Jan 21, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS...
Critical
Unreviewed
CVE-2025-24174
was published
Jan 28, 2025
In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking...
High
Unreviewed
CVE-2024-43765
was published
Jan 22, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2024-44151
was published
Sep 17, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-24093
was published
Jan 28, 2025
Local file inclusion in Automatic Systems Maintenance SlimLane...
Critical
Unreviewed
CVE-2024-48823
was published
Oct 14, 2024
In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control...
High
Unreviewed
CVE-2024-55957
was published
Jan 22, 2025
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers...
Moderate
Unreviewed
CVE-2024-48572
was published
Oct 30, 2024
ProTip!
Advisories are also available from the
GraphQL API