Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,986
Erlang
39
GitHub Actions
38
Go
2,626
Maven
5,000+
npm
4,258
NuGet
760
pip
4,051
Pub
12
RubyGems
954
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,382 advisories

Loading
Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce... Moderate Unreviewed
CVE-2025-64322 was published Nov 4, 2025
Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft... Moderate Unreviewed
CVE-2025-64319 was published Nov 4, 2025
Tampering of the registry entries might have led to preventing the ESET security products from... Moderate Unreviewed
CVE-2025-4952 was published Oct 31, 2025
Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which... High Unreviewed
CVE-2025-34287 was published Oct 31, 2025
Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets... Moderate Unreviewed
CVE-2025-34135 was published Oct 31, 2025
A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system... Moderate Unreviewed
CVE-2025-11906 was published Oct 30, 2025
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell... High Unreviewed
CVE-2025-54545 was published Oct 30, 2025
On affected platforms, restricted users could use SSH port forwarding to access host-internal... High Unreviewed
CVE-2025-54546 was published Oct 30, 2025
An incorrect permission assignment for a critical resource vulnerability was discovered in... Moderate Unreviewed
CVE-2025-62688 was published Oct 24, 2025
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation... Critical Unreviewed
CVE-2025-12004 was published Oct 21, 2025
A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with... Moderate Unreviewed
CVE-2025-31702 was published Oct 15, 2025
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in... High Unreviewed
CVE-2025-57741 was published Oct 14, 2025
Liferay has Incorrect Permission Assignment for Critical Resource Moderate
CVE-2025-62251 was published for com.liferay:com.liferay.site.navigation.menu.item.asset.vocabulary (Maven) Oct 14, 2025
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their... High Unreviewed
CVE-2025-10751 was published Oct 4, 2025
IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security... Moderate Unreviewed
CVE-2025-36193 was published Sep 29, 2025
iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY... High Unreviewed
CVE-2025-10541 was published Sep 25, 2025
Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource Moderate
CVE-2025-43808 was published for com.liferay.commerce:com.liferay.commerce.product.type.virtual.service (Maven) Sep 19, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and... Moderate Unreviewed
CVE-2025-34189 was published Sep 19, 2025
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23... High Unreviewed
CVE-2025-52873 was published Sep 19, 2025
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23... High Unreviewed
CVE-2025-54497 was published Sep 19, 2025
Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This... Critical Unreviewed
CVE-2025-10643 was published Sep 17, 2025
Dragonfly's directories created via os.MkdirAll are not checked for permissions Low
CVE-2025-59349 was published for d7y.io/dragonfly/v2 (Go) Sep 17, 2025
gaius-qi
Credited to gaius-qi
IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged... Low Unreviewed
CVE-2025-0164 was published Sep 14, 2025
BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation... High Unreviewed
CVE-2025-57392 was published Sep 10, 2025
A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions... Critical Unreviewed
CVE-2025-40804 was published Sep 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database