GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
529 advisories
Filter by severity
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation...
High
Unreviewed
CVE-2024-9244
was published
Nov 23, 2024
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation...
High
Unreviewed
CVE-2024-9245
was published
Nov 23, 2024
Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-7245
was published
Nov 23, 2024
G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-6871
was published
Nov 23, 2024
An incorrect permission assignment for critical resource vulnerability has been reported to...
High
Unreviewed
CVE-2024-38646
was published
Nov 22, 2024
A low privileged remote attacker may modify the BACNet service properties due to incorrect...
High
Unreviewed
CVE-2024-41974
was published
Nov 18, 2024
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...
High
Unreviewed
CVE-2024-39709
was published
Nov 13, 2024
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05
contains a vulnerability...
High
Unreviewed
CVE-2023-34437
was published
Oct 19, 2023
A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected...
High
Unreviewed
CVE-2024-47808
was published
Nov 12, 2024
A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application...
High
Unreviewed
CVE-2024-47783
was published
Nov 12, 2024
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization...
High
Unreviewed
CVE-2024-45164
was published
Nov 4, 2024
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...
High
Unreviewed
CVE-2024-8900
was published
Sep 17, 2024
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of...
High
Unreviewed
CVE-2024-0128
was published
Oct 26, 2024
Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may...
High
Unreviewed
CVE-2023-33870
was published
Oct 25, 2024
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users...
High
Unreviewed
CVE-2023-6729
was published
Oct 17, 2024
Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226...
High
Unreviewed
CVE-2024-44729
was published
Oct 11, 2024
Insecure permissions in the packaging of tomcat allow local users that win a race during package...
High
Unreviewed
CVE-2024-22029
was published
Oct 16, 2024
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate...
High
Unreviewed
CVE-2023-49257
was published
Jan 12, 2024
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...
High
Unreviewed
CVE-2024-7612
was published
Oct 8, 2024
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an...
High
Unreviewed
CVE-2024-25646
was published
Apr 9, 2024
SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757,...
High
Unreviewed
CVE-2023-49580
was published
Dec 12, 2023
SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing...
High
Unreviewed
CVE-2023-33990
was published
Jul 11, 2023
When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions...
High
Unreviewed
CVE-2023-35870
was published
Jul 11, 2023
IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated...
High
Unreviewed
CVE-2023-47712
was published
May 14, 2024
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated...
High
Unreviewed
CVE-2022-22521
was published
Apr 28, 2022
ProTip!
Advisories are also available from the
GraphQL API