GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
740 advisories
Filter by severity
https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The...
High
Unreviewed
CVE-2024-57360
was published
Jan 21, 2025
In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control...
High
Unreviewed
CVE-2024-55957
was published
Jan 22, 2025
Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Service...
High
Unreviewed
CVE-2025-21516
was published
Jan 21, 2025
Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component:...
High
Unreviewed
CVE-2025-21506
was published
Jan 21, 2025
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content...
High
Unreviewed
CVE-2023-40132
was published
Jan 22, 2025
Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). ...
High
Unreviewed
CVE-2025-21532
was published
Jan 21, 2025
AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to...
High
Unreviewed
CVE-2023-31726
was published
May 24, 2023
The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1...
High
Unreviewed
CVE-2023-23299
was published
May 23, 2023
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5,...
High
Unreviewed
CVE-2024-40771
was published
Jan 15, 2025
Incorrect Authorization vulnerability in Drupal Basic HTTP Authentication allows Forceful...
High
Unreviewed
CVE-2024-13291
was published
Jan 9, 2025
Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This...
High
Unreviewed
CVE-2024-13282
was published
Jan 9, 2025
Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...
High
Unreviewed
CVE-2023-25729
was published
Jun 2, 2023
An Insecure Direct Object Reference (IDOR) vulnerability exists in the lunary-ai/lunary...
High
Unreviewed
CVE-2024-1625
was published
Apr 10, 2024
The grc-policy-propagator allows security escalation within the cluster. The propagator allows...
High
Unreviewed
CVE-2023-3027
was published
Jun 6, 2023
An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of...
High
Unreviewed
CVE-2023-29766
was published
Jun 9, 2023
An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause...
High
Unreviewed
CVE-2023-29752
was published
Jun 9, 2023
In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a...
High
Unreviewed
CVE-2023-21245
was published
Jul 13, 2023
A Mazda model (2015-2016) can be unlocked via an unspecified method.
High
Unreviewed
CVE-2023-32219
was published
Jun 12, 2023
Windows Authentication Security Feature Bypass Vulnerability.
High
Unreviewed
CVE-2022-26913
was published
May 11, 2022
Kerberos AppContainer Security Feature Bypass Vulnerability.
High
Unreviewed
CVE-2022-30164
was published
Jun 16, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products,...
High
Unreviewed
CVE-2022-31644
was published
Jun 14, 2023
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products,...
High
Unreviewed
CVE-2022-31646
was published
Jun 14, 2023
An improper access control vulnerability exists in SimplCommerce at commit...
High
Unreviewed
CVE-2024-50945
was published
Dec 27, 2024
Incorrect Authorization vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: through...
High
Unreviewed
CVE-2024-38856
was published
Aug 5, 2024
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an...
High
Unreviewed
CVE-2023-21270
was published
Nov 19, 2024
ProTip!
Advisories are also available from the
GraphQL API