GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
838 advisories
Filter by severity
Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist /...
High
Unreviewed
CVE-2024-43131
was published
Aug 13, 2024
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...
High
Unreviewed
CVE-2024-41939
was published
Aug 13, 2024
Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user...
High
Unreviewed
CVE-2024-7697
was published
Aug 12, 2024
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy...
High
Unreviewed
CVE-2024-7266
was published
Aug 7, 2024
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy...
High
Unreviewed
CVE-2024-7265
was published
Aug 7, 2024
CloudStack account-users by default use username and password based authentication for API and UI...
High
Unreviewed
CVE-2024-42062
was published
Aug 7, 2024
Incorrect Authorization vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: through...
High
Unreviewed
CVE-2024-38856
was published
Aug 5, 2024
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly...
High
Unreviewed
CVE-2024-38884
was published
Aug 2, 2024
AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have...
High
Unreviewed
CVE-2024-31970
was published
Jul 24, 2024
Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite ...
High
Unreviewed
CVE-2024-21149
was published
Jul 17, 2024
Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to...
High
Unreviewed
CVE-2024-6323
was published
Jun 27, 2024
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications,...
High
Unreviewed
CVE-2024-37002
was published
Jun 25, 2024
IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0...
High
Unreviewed
CVE-2024-38329
was published
Jun 19, 2024
The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an...
High
Unreviewed
CVE-2024-2098
was published
Jun 13, 2024
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos...
High
Unreviewed
CVE-2024-2698
was published
Jun 12, 2024
This issue was addressed with improved permissions checking. This issue is fixed in macOS Sonoma...
High
Unreviewed
CVE-2024-27848
was published
Jun 10, 2024
An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including...
High
Unreviewed
CVE-2024-5130
was published
Jun 6, 2024
The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-5324
was published
Jun 6, 2024
In the Linux kernel, the following vulnerability has been resolved:
tracefs: Reset permissions...
High
Unreviewed
CVE-2024-36963
was published
Jun 3, 2024
Zoho ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a...
High
Unreviewed
CVE-2024-27312
was published
May 20, 2024
MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64...
High
Unreviewed
CVE-2024-3745
was published
May 18, 2024
An authorization issue was addressed with improved state management. This issue is fixed in macOS...
High
Unreviewed
CVE-2024-27798
was published
May 14, 2024
In multiple locations, there is a possible notification listener grant to an app running in the...
High
Unreviewed
CVE-2024-0043
was published
May 7, 2024
A vulnerability exists in the web-authentication component of the SDM600. If exploited an...
High
Unreviewed
CVE-2024-2378
was published
Apr 30, 2024
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine). ...
High
Unreviewed
CVE-2024-21083
was published
Apr 17, 2024
ProTip!
Advisories are also available from the
GraphQL API