GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,347
Erlang
31
GitHub Actions
22
Go
2,117
Maven
5,000+
npm
3,768
NuGet
680
pip
3,457
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
1,232 advisories
Filter by severity
When etcupdate encounters conflicts while merging files, it saves a version containing conflict...
Moderate
Unreviewed
CVE-2025-0374
was published
Jan 30, 2025
Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow...
Moderate
Unreviewed
CVE-2024-36294
was published
Nov 13, 2024
IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local...
Moderate
Unreviewed
CVE-2024-45657
was published
Feb 4, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
High
Unreviewed
CVE-2025-21571
was published
Jan 21, 2025
Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability.
High
Unreviewed
CVE-2024-34897
was published
Feb 3, 2025
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile...
High
Unreviewed
CVE-2025-21564
was published
Jan 21, 2025
Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow...
Moderate
Unreviewed
CVE-2024-36276
was published
Nov 13, 2024
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...
Moderate
Unreviewed
CVE-2025-21566
was published
Jan 21, 2025
Insecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information...
Moderate
Unreviewed
CVE-2024-39967
was published
Jan 16, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...
Moderate
Unreviewed
CVE-2025-21523
was published
Jan 21, 2025
When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll...
Moderate
Unreviewed
CVE-2023-33251
was published
May 21, 2023
A privilege escalation vulnerability exists in the affected product. The vulnerability allows low...
High
Unreviewed
CVE-2024-37369
was published
Jun 14, 2024
A privilege escalation vulnerability exists in the affected products which could allow a...
High
Unreviewed
CVE-2024-6435
was published
Jul 16, 2024
CVE-2024-7513 IMPACT
A code execution vulnerability exists in the affected product. The...
High
Unreviewed
CVE-2024-7513
was published
Aug 14, 2024
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Moderate
CVE-2024-29869
was published
for
org.apache.hive:hive-exec
(Maven)
Jan 29, 2025
An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an...
High
Unreviewed
CVE-2025-24527
was published
Jan 29, 2025
Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain...
High
Unreviewed
CVE-2024-57547
was published
Jan 28, 2025
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem...
High
Unreviewed
CVE-2023-29092
was published
May 9, 2023
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above....
High
Unreviewed
CVE-2025-24481
was published
Jan 28, 2025
Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project...
High
Unreviewed
CVE-2024-46881
was published
Jan 26, 2025
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.
Critical
Unreviewed
CVE-2024-55959
was published
Jan 21, 2025
The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for...
Critical
Unreviewed
CVE-2024-53931
was published
Jan 7, 2025
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the...
Low
Unreviewed
CVE-2024-52328
was published
Jan 23, 2025
The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme)...
Critical
Unreviewed
CVE-2024-53932
was published
Jan 7, 2025
A local low-level user on the server machine with credentials to the running OAS services can...
High
Unreviewed
CVE-2024-11220
was published
Dec 6, 2024
ProTip!
Advisories are also available from the
GraphQL API