Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+

5,014 advisories

Loading
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,... High Unreviewed
CVE-2023-31343 was published Feb 12, 2025
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to... High Unreviewed
CVE-2024-21925 was published Feb 11, 2025
SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally... High Unreviewed
CVE-2024-0179 was published Feb 11, 2025
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21375 was published Feb 11, 2025
Microsoft Surface Security Feature Bypass Vulnerability High Unreviewed
CVE-2025-21194 was published Feb 11, 2025
A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3... High Unreviewed
CVE-2025-24499 was published Feb 11, 2025
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine High
CVE-2025-24970 was published for io.netty:netty-handler (Maven) Feb 10, 2025
johnou
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful... High Unreviewed
CVE-2024-57960 was published Feb 6, 2025
Apache James vulnerable to denial of service through the use of IMAP literals High
CVE-2024-37358 was published for org.apache.james.protocols:protocols-imap (Maven) Feb 6, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56135 was published Feb 5, 2025
When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central... High Unreviewed
CVE-2025-24319 was published Feb 5, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56132 was published Feb 5, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56131 was published Feb 5, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56133 was published Feb 5, 2025
Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS... High Unreviewed
CVE-2024-56134 was published Feb 5, 2025
Browsershot Path Traversal High
CVE-2025-1022 was published for spatie/browsershot (Composer) Feb 5, 2025
Memory corruption while configuring a Hypervisor based input virtual device. High Unreviewed
CVE-2024-38420 was published Feb 3, 2025
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services... High Unreviewed
CVE-2023-50733 was published Jan 22, 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21344 was published Jan 14, 2025
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21370 was published Jan 14, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability High Unreviewed
CVE-2025-21230 was published Jan 14, 2025
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21235 was published Jan 14, 2025
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability High Unreviewed
CVE-2025-21234 was published Jan 14, 2025
go-git clients vulnerable to DoS via maliciously crafted Git server replies High
CVE-2025-21614 was published for github.com/go-git/go-git (Go) Jan 6, 2025
bdilalu
An improper input insertion vulnerability in AiCloud on certain router models may lead to... High Unreviewed
CVE-2024-12912 was published Jan 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database