Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,297
Maven
5,000+
npm
3,942
NuGet
708
pip
3,711
Pub
12
RubyGems
920
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+

1,265 advisories

Loading
Incorrect default permissions in some Intel(R) Gaudi(R) software installers before version 1.18... Moderate Unreviewed
CVE-2024-45067 was published May 15, 2025
Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may... Moderate Unreviewed
CVE-2025-20095 was published May 13, 2025
Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an... Moderate Unreviewed
CVE-2024-28954 was published May 13, 2025
Incorrect default permissions for some Endurance Gaming Mode software installers may allow an... Moderate Unreviewed
CVE-2024-47550 was published May 13, 2025
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve... High Unreviewed
CVE-2023-31358 was published May 13, 2025
Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve... High Unreviewed
CVE-2023-31359 was published May 13, 2025
A remote code execution vulnerability exists in the Windows agent component of SecureConnector... High Unreviewed
CVE-2025-4660 was published May 13, 2025
Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory... High Unreviewed
CVE-2024-21960 was published May 13, 2025
A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to... High Unreviewed
CVE-2024-36339 was published May 13, 2025
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror... High Unreviewed
CVE-2025-3528 was published May 9, 2025
Permission control vulnerability in the media library module Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-46587 was published May 6, 2025
Permission control vulnerability in the contacts module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-46586 was published May 6, 2025
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower... High Unreviewed
CVE-2025-43595 was published May 2, 2025
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access... High Unreviewed
CVE-2025-42598 was published Apr 28, 2025
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for... High Unreviewed
CVE-2025-32981 was published Apr 25, 2025
When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8... High Unreviewed
CVE-2025-24914 was published Apr 18, 2025
Vulnerability in the RAS Security component of Oracle Database Server. Supported versions that... High Unreviewed
CVE-2025-30701 was published Apr 15, 2025
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). ... High Unreviewed
CVE-2025-30706 was published Apr 15, 2025
A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the... High Unreviewed
CVE-2025-3617 was published Apr 15, 2025
A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows... High Unreviewed
CVE-2025-23386 was published Apr 10, 2025
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to... High Unreviewed
CVE-2025-29801 was published Apr 8, 2025
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2024-11088 was published Apr 5, 2025
Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate... High Unreviewed
CVE-2025-29504 was published Apr 3, 2025
An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to... High Unreviewed
CVE-2025-29570 was published Apr 3, 2025
Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker... High Unreviewed
CVE-2025-0014 was published Apr 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database