Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,300
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
960
Swift
38
Unreviewed advisories
All unreviewed
5,000+

470 advisories

Loading
There exists an insecure default user permission in Google Cloud Migrate to containers from... Moderate Unreviewed
CVE-2024-9858 was published Oct 16, 2024
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby... Moderate Unreviewed
CVE-2024-5474 was published Oct 11, 2024
An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper... Moderate Unreviewed
CVE-2024-39544 was published Oct 11, 2024
PAX Android based POS devices allow for escalation of privilege via improperly configured scripts... Moderate Unreviewed
CVE-2023-42133 was published Oct 11, 2024
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to... Moderate Unreviewed
CVE-2024-46544 was published Sep 23, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2024-44135 was published Sep 17, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2024-44151 was published Sep 17, 2024
In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass... Moderate Unreviewed
CVE-2024-46695 was published Sep 13, 2024
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Moderate Unreviewed
CVE-2024-38222 was published Sep 12, 2024
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1... Moderate Unreviewed
CVE-2024-34648 was published Sep 4, 2024
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7... Moderate Unreviewed
CVE-2024-34661 was published Sep 4, 2024
Sensitive information disclosure due to insecure folder permissions. The following products are... Moderate Unreviewed
CVE-2024-34018 was published Aug 29, 2024
request_store has Incorrect Default Permissions Moderate
CVE-2024-43791 was published for request_store (RubyGems) Aug 23, 2024
G-Rath
Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow... Moderate Unreviewed
CVE-2024-26025 was published Aug 14, 2024
Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an... Moderate Unreviewed
CVE-2024-27461 was published Aug 14, 2024
Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software... Moderate Unreviewed
CVE-2024-22378 was published Aug 14, 2024
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated... Moderate Unreviewed
CVE-2024-23974 was published Aug 14, 2024
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024... Moderate Unreviewed
CVE-2024-23495 was published Aug 14, 2024
Incorrect default permissions for some Intel(R) Connectivity Performance Suite software... Moderate Unreviewed
CVE-2023-43747 was published Aug 14, 2024
In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and... Moderate Unreviewed
CVE-2024-6640 was published Aug 12, 2024
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1... Moderate Unreviewed
CVE-2024-34616 was published Aug 7, 2024
Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows... Moderate Unreviewed
CVE-2024-34617 was published Aug 7, 2024
An incorrect permission in the installation directory for the shared NI SystemLink Server... Moderate Unreviewed
CVE-2024-6122 was published Jul 22, 2024
Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft ... Moderate Unreviewed
CVE-2024-21122 was published Jul 17, 2024
The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www... Moderate Unreviewed
CVE-2024-6325 was published Jul 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database