GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,086
Maven
5,000+
npm
3,747
NuGet
674
pip
3,436
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,074 advisories
Filter by severity
Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File...
Moderate
Unreviewed
CVE-2024-54910
was published
Jan 10, 2025
An authenticated attacker can use this vulnerability to perform a privilege escalation to gain...
High
Unreviewed
CVE-2024-11497
was published
Jan 14, 2025
Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication...
Critical
Unreviewed
CVE-2025-0066
was published
Jan 14, 2025
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to...
High
Unreviewed
CVE-2024-55411
was published
Jan 7, 2025
Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for...
Moderate
Unreviewed
CVE-2024-47475
was published
Jan 6, 2025
Sensitive information disclosure due to insecure folder permissions. The following products are...
Moderate
Unreviewed
CVE-2024-49385
was published
Jan 2, 2025
A flaw was found in the OpenShift build process, where the docker-build container is configured...
High
Unreviewed
CVE-2024-45497
was published
Dec 31, 2024
Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p23, < 2.2...
Moderate
Unreviewed
CVE-2024-38864
was published
Dec 19, 2024
In multiple files, there is a possible way to access traces in the dev mode due to a permissions...
Moderate
Unreviewed
CVE-2023-21142
was published
Jun 15, 2023
PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions.
Critical
Unreviewed
CVE-2023-34852
was published
Jun 15, 2023
An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element...
Moderate
Unreviewed
CVE-2020-15595
was published
May 24, 2022
IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical...
Moderate
Unreviewed
CVE-2024-47104
was published
Dec 18, 2024
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information...
Moderate
Unreviewed
CVE-2024-12255
was published
Dec 12, 2024
Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open...
Moderate
Unreviewed
CVE-2024-12564
was published
Dec 12, 2024
The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application ...
High
Unreviewed
CVE-2024-37574
was published
Dec 4, 2024
Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24...
High
Unreviewed
CVE-2024-12363
was published
Dec 11, 2024
Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated...
High
Unreviewed
CVE-2024-7572
was published
Dec 10, 2024
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local...
High
Unreviewed
CVE-2024-8540
was published
Dec 10, 2024
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...
High
Unreviewed
CVE-2024-10256
was published
Dec 10, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...
Critical
Unreviewed
CVE-2024-41647
was published
Dec 7, 2024
In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices...
Moderate
Unreviewed
CVE-2024-8256
was published
Dec 10, 2024
Incorrect permission assignment in temporary access requests component in Devolutions Remote...
High
Unreviewed
CVE-2024-12149
was published
Dec 4, 2024
Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0...
Moderate
Unreviewed
CVE-2024-12151
was published
Dec 4, 2024
Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.8...
Moderate
Unreviewed
CVE-2024-45841
was published
Dec 5, 2024
Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle...
Moderate
Unreviewed
CVE-2024-21063
was published
Apr 17, 2024
ProTip!
Advisories are also available from the
GraphQL API