GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
123 advisories
Filter by severity
IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that...
Moderate
Unreviewed
CVE-2023-43018
was published
Nov 3, 2023
SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are
susceptible to a...
Moderate
Unreviewed
CVE-2023-27312
was published
Oct 12, 2023
SnapCenter versions 3.x and 4.x prior to 4.9 are susceptible to a
vulnerability which may allow...
High
Unreviewed
CVE-2023-27313
was published
Oct 12, 2023
kOps privilege escalation vulnerability
High
CVE-2023-1943
was published
for
k8s.io/kops
(Go)
Oct 12, 2023
A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to...
High
Unreviewed
CVE-2023-5207
was published
Sep 30, 2023
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access...
Moderate
Unreviewed
CVE-2023-4003
was published
Sep 27, 2023
Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code...
Critical
Unreviewed
CVE-2023-4662
was published
Sep 15, 2023
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which...
High
Unreviewed
CVE-2023-4814
was published
Sep 14, 2023
An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering...
Critical
Unreviewed
CVE-2023-31175
was published
Aug 31, 2023
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation...
Moderate
Unreviewed
CVE-2023-20217
was published
Aug 17, 2023
Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low...
High
Unreviewed
CVE-2023-32486
was published
Aug 16, 2023
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected...
High
Unreviewed
CVE-2023-38641
was published
Aug 8, 2023
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
High
Unreviewed
CVE-2023-39261
was published
Jul 26, 2023
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate...
Moderate
Unreviewed
CVE-2023-20210
was published
Jul 12, 2023
Improper privilege management in Zoom Rooms before version 5.14.5 may allow an authenticated user...
High
Unreviewed
CVE-2023-34118
was published
Jul 11, 2023
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo...
High
Unreviewed
CVE-2022-40182
was published
Jul 6, 2023
NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution...
High
Unreviewed
CVE-2023-25521
was published
Jul 4, 2023
A vulnerability was found in the HCI sockets implementation due to a missing capability check in...
Moderate
Unreviewed
CVE-2023-2002
was published
May 26, 2023
Wings vulnerable to escape to host from installation container
Critical
CVE-2023-32080
was published
for
github.com/pterodactyl/wings
(Go)
May 11, 2023
Instruments with Illumina Universal Copy Service v1.x and
v2.x contain an unnecessary privileges...
Critical
Unreviewed
CVE-2023-1966
was published
Apr 28, 2023
A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be...
High
Unreviewed
CVE-2023-0664
was published
Mar 29, 2023
An issue in Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable...
Moderate
Unreviewed
CVE-2023-27247
was published
Mar 28, 2023
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12,...
High
Unreviewed
CVE-2022-3088
was published
Nov 29, 2022
Execution with Unnecessary Privileges in JupyterApp
High
CVE-2022-39286
was published
for
jupyter-core
(pip)
Oct 26, 2022
An attacker may be able to execute malicious actions due to the lack of device access protections...
Critical
Unreviewed
CVE-2022-2634
was published
Aug 11, 2022
ProTip!
Advisories are also available from the
GraphQL API