GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,035 advisories
Filter by severity
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution...
High
Unreviewed
CVE-2024-23711
was published
Jul 9, 2024
In multiple locations, there is a possible permission bypass due to a confused deputy. This could...
High
Unreviewed
CVE-2023-21114
was published
Jul 9, 2024
In multiple locations, there is a possible way to reveal images across users data due to a logic...
High
Unreviewed
CVE-2024-31325
was published
Jul 9, 2024
Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege...
High
Unreviewed
CVE-2024-37952
was published
Jul 9, 2024
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows...
High
Unreviewed
CVE-2024-37484
was published
Jul 9, 2024
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor...
High
Unreviewed
CVE-2024-37455
was published
Jul 9, 2024
Improper Privilege Management vulnerability in Ekstrem Bir Bilgisayar Danismanlik Ic Ve Dis...
High
Unreviewed
CVE-2024-4341
was published
Jul 8, 2024
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...
High
Unreviewed
CVE-2024-27711
was published
Jul 5, 2024
An issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain...
High
Unreviewed
CVE-2024-39206
was published
Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate...
High
Unreviewed
CVE-2024-25086
was published
Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate...
High
Unreviewed
CVE-2024-25088
was published
Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate...
High
Unreviewed
CVE-2024-22106
was published
Jul 2, 2024
The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on...
High
Unreviewed
CVE-2024-4395
was published
Jun 28, 2024
In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in...
High
Unreviewed
CVE-2024-5009
was published
Jun 25, 2024
Improper Privilege Management vulnerability in Membership Software WishList Member X allows...
High
Unreviewed
CVE-2024-37107
was published
Jun 24, 2024
Improper privilege management vulnerability in Parallels Desktop Software, which affects versions...
High
Unreviewed
CVE-2024-6240
was published
Jun 21, 2024
Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations...
High
Unreviewed
CVE-2024-2003
was published
Jun 21, 2024
Privilege escalation vulnerability in the AMS module
Impact: Successful exploitation of this...
High
Unreviewed
CVE-2024-36500
was published
Jun 14, 2024
In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead...
High
Unreviewed
CVE-2024-32906
was published
Jun 13, 2024
In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected...
High
Unreviewed
CVE-2024-32899
was published
Jun 13, 2024
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an...
High
Unreviewed
CVE-2024-29784
was published
Jun 13, 2024
An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate...
High
Unreviewed
CVE-2024-37665
was published
Jun 12, 2024
Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that...
High
Unreviewed
CVE-2024-32849
was published
Jun 11, 2024
The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS...
High
Unreviewed
CVE-2024-27811
was published
Jun 10, 2024
An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to...
High
Unreviewed
CVE-2024-34332
was published
Jun 10, 2024
ProTip!
Advisories are also available from the
GraphQL API