Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,876
Erlang
37
GitHub Actions
36
Go
2,522
Maven
5,000+
npm
4,176
NuGet
741
pip
3,965
Pub
12
RubyGems
947
Rust
1,028
Swift
39
Unreviewed advisories
All unreviewed
5,000+

1,337 advisories

Loading
Local privilege escalation due to insecure folder permissions. The following products are... High Unreviewed
CVE-2024-49389 was published Oct 17, 2024
In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass... Moderate Unreviewed
CVE-2024-46695 was published Sep 13, 2024
In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has... High Unreviewed
CVE-2024-0833 was published Jan 31, 2024
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A... Moderate Unreviewed
CVE-2024-47240 was published Oct 18, 2024
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ignazio Scimone Albo... Moderate Unreviewed
CVE-2024-22301 was published Jan 24, 2024
rtslib-fb weak permissions for /etc/target/saveconfig.json file High
CVE-2020-14019 was published for rtslib-fb (pip) May 24, 2022
Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a... High Unreviewed
CVE-2023-38960 was published Feb 14, 2024
A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8... Moderate Unreviewed
CVE-2024-35287 was published Oct 21, 2024
A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to... Moderate Unreviewed
CVE-2024-10183 was published Oct 22, 2024
Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers... High Unreviewed
CVE-2024-7587 was published Oct 23, 2024
The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions... High Unreviewed
CVE-2024-9947 was published Oct 23, 2024
Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901... High Unreviewed
CVE-2023-40154 was published Oct 23, 2024
netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions Critical
CVE-2019-17383 was published for netaddr (RubyGems) Oct 14, 2019
stuarthannig
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6,... High Unreviewed
CVE-2023-38410 was published Jul 27, 2023
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from... Critical Unreviewed
CVE-2023-33745 was published Jul 27, 2023
Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0... High Unreviewed
CVE-2023-41231 was published Oct 24, 2024
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS... Moderate Unreviewed
CVE-2023-49721 was published Feb 15, 2024
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure... High Unreviewed
CVE-2023-26077 was published Jul 24, 2023
Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for... Moderate Unreviewed
CVE-2023-38334 was published Jul 20, 2023
Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis... Moderate Unreviewed
CVE-2023-38335 was published Jul 20, 2023
there is a possible privilege escalation due to an insecure default value. This could lead to... High Unreviewed
CVE-2024-47016 was published Oct 25, 2024
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request... Critical Unreviewed
CVE-2022-30355 was published Oct 25, 2024
N/A High Unreviewed
CVE-2024-44100 was published Oct 25, 2024
N/A High Unreviewed
CVE-2024-47014 was published Oct 25, 2024
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to... High Unreviewed
CVE-2024-47013 was published Oct 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database