GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,298
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
99 advisories
Filter by severity
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which...
Critical
Unreviewed
CVE-2021-3437
was published
Dec 12, 2022
A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that...
Critical
Unreviewed
CVE-2022-27773
was published
Dec 6, 2022
An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to...
Critical
Unreviewed
CVE-2022-44929
was published
Dec 2, 2022
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330...
Critical
Unreviewed
CVE-2025-27682
was published
Mar 5, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
Critical
Unreviewed
CVE-2025-27677
was published
Mar 5, 2025
A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by...
Critical
Unreviewed
CVE-2023-23566
was published
Jan 13, 2023
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura...
Critical
Unreviewed
CVE-2025-30465
was published
Apr 1, 2025
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...
Critical
Unreviewed
CVE-2025-24172
was published
Apr 1, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-24207
was published
Apr 1, 2025
An integer overflow was addressed with improved input validation. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-24195
was published
Apr 1, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5,...
Critical
Unreviewed
CVE-2025-24238
was published
Apr 1, 2025
HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate...
Critical
Unreviewed
CVE-2025-25535
was published
Mar 26, 2025
An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via...
Critical
Unreviewed
CVE-2024-55215
was published
Feb 8, 2025
WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application...
Critical
Unreviewed
CVE-2024-57032
was published
Jan 17, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS...
Critical
Unreviewed
CVE-2025-24174
was published
Jan 28, 2025
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.
Critical
Unreviewed
CVE-2024-55959
was published
Jan 21, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Critical
Unreviewed
CVE-2025-24093
was published
Jan 28, 2025
Local file inclusion in Automatic Systems Maintenance SlimLane...
Critical
Unreviewed
CVE-2024-48823
was published
Oct 14, 2024
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before...
Critical
Unreviewed
CVE-2022-25899
was published
Aug 19, 2022
In Public Knowledge Project (PKP) OJS, OMP, and OPS before 3.3.0.21 and 3.4.x before 3.4.0.8, an...
Critical
Unreviewed
CVE-2024-56525
was published
Feb 25, 2025
CMSimple 5.16 allows the user to edit log.php file via print page.
Critical
Unreviewed
CVE-2024-57548
was published
Jan 28, 2025
This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia...
Critical
Unreviewed
CVE-2025-24135
was published
Jan 28, 2025
Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...
Critical
Unreviewed
CVE-2024-46505
was published
Jan 9, 2025
A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated...
Critical
Unreviewed
CVE-2025-20156
was published
Jan 22, 2025
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...
Critical
Unreviewed
CVE-2024-57684
was published
Jan 16, 2025
ProTip!
Advisories are also available from the
GraphQL API