GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
1,120 advisories
Filter by severity
Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to...
High
Unreviewed
CVE-2025-0543
was published
Jan 25, 2025
Cache confusion in Jenkins Eiffel Broadcaster Plugin
Moderate
CVE-2025-24400
was published
for
com.axis.jenkins.plugins.eiffel:eiffel-broadcaster
(Maven)
Jan 22, 2025
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
High
CVE-2025-24399
was published
for
org.jenkins-ci.plugins:oic-auth
(Maven)
Jan 22, 2025
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process...
High
Unreviewed
CVE-2024-1488
was published
Feb 15, 2024
Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...
Critical
Unreviewed
CVE-2024-46505
was published
Jan 9, 2025
Insecure permissions in the ps_customer table of Prestashop scquickaccounting before v3.7.3...
Moderate
Unreviewed
CVE-2023-30281
was published
May 16, 2023
A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated...
Critical
Unreviewed
CVE-2025-20156
was published
Jan 22, 2025
In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs...
High
Unreviewed
CVE-2024-34730
was published
Jan 22, 2025
In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to...
High
Unreviewed
CVE-2024-49737
was published
Jan 22, 2025
In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an...
High
Unreviewed
CVE-2024-49742
was published
Jan 22, 2025
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit...
High
Unreviewed
CVE-2024-49736
was published
Jan 22, 2025
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous...
High
Unreviewed
CVE-2023-33240
was published
May 19, 2023
WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application...
Critical
Unreviewed
CVE-2024-57032
was published
Jan 17, 2025
The Settings module has the file privilege escalation vulnerability.Successful exploitation of...
High
Unreviewed
CVE-2023-1693
was published
May 20, 2023
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...
Critical
Unreviewed
CVE-2024-57684
was published
Jan 16, 2025
A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...
Moderate
Unreviewed
CVE-2019-3870
was published
May 13, 2022
The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its...
High
Unreviewed
CVE-2023-29733
was published
May 30, 2023
Vulnerability of improper permission control in the window management module
Impact: Successful...
High
Unreviewed
CVE-2024-56447
was published
Jan 8, 2025
Permission control vulnerability in the Connectivity module
Impact: Successful exploitation of...
Moderate
Unreviewed
CVE-2024-56440
was published
Jan 8, 2025
Vulnerability of improper permission control in the Gallery module
Impact: Successful...
Moderate
Unreviewed
CVE-2023-52954
was published
Jan 8, 2025
Vaultwarden vulnerable to user impersonation
High
CVE-2024-55225
was published
for
vaultwarden
(Rust)
Jan 9, 2025
In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user...
High
Unreviewed
CVE-2024-46464
was published
Jan 10, 2025
An issue in Audimex EE v.15.1.20 and before allows a remote attacker to escalate privileges.
Critical
Unreviewed
CVE-2024-51162
was published
Nov 20, 2024
pgAdmin has Incorrect Default Permissions
High
CVE-2023-1907
was published
for
pgadmin4
(pip)
Jan 9, 2025
ProTip!
Advisories are also available from the
GraphQL API