GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,249
Erlang
31
GitHub Actions
21
Go
2,018
Maven
5,000+
npm
3,723
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
857
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
529 advisories
Filter by severity
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation...
High
Unreviewed
CVE-2024-9245
was published
Nov 23, 2024
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation...
High
Unreviewed
CVE-2024-9244
was published
Nov 23, 2024
Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-7245
was published
Nov 23, 2024
G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-6871
was published
Nov 23, 2024
An incorrect permission assignment for critical resource vulnerability has been reported to...
High
Unreviewed
CVE-2024-38646
was published
Nov 22, 2024
A low privileged remote attacker may modify the BACNet service properties due to incorrect...
High
Unreviewed
CVE-2024-41974
was published
Nov 18, 2024
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...
High
Unreviewed
CVE-2024-39709
was published
Nov 13, 2024
A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application...
High
Unreviewed
CVE-2024-47783
was published
Nov 12, 2024
A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected...
High
Unreviewed
CVE-2024-47808
was published
Nov 12, 2024
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization...
High
Unreviewed
CVE-2024-45164
was published
Nov 4, 2024
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of...
High
Unreviewed
CVE-2024-0128
was published
Oct 26, 2024
Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may...
High
Unreviewed
CVE-2023-33870
was published
Oct 25, 2024
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users...
High
Unreviewed
CVE-2023-6729
was published
Oct 17, 2024
Insecure permissions in the packaging of tomcat allow local users that win a race during package...
High
Unreviewed
CVE-2024-22029
was published
Oct 16, 2024
Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226...
High
Unreviewed
CVE-2024-44729
was published
Oct 11, 2024
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...
High
Unreviewed
CVE-2024-7612
was published
Oct 8, 2024
An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain...
High
Unreviewed
CVE-2024-8900
was published
Sep 17, 2024
HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain...
High
Unreviewed
CVE-2024-38456
was published
Sep 3, 2024
VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-5930
was published
Aug 21, 2024
CVE-2024-7513 IMPACT
A code execution vulnerability exists in the affected product. The...
High
Unreviewed
CVE-2024-7513
was published
Aug 14, 2024
In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local...
High
Unreviewed
CVE-2024-6619
was published
Aug 13, 2024
Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain...
High
Unreviewed
CVE-2024-43199
was published
Aug 7, 2024
Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware...
High
Unreviewed
CVE-2024-41720
was published
Aug 5, 2024
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP...
High
Unreviewed
CVE-2024-31202
was published
Jul 31, 2024
A privilege escalation vulnerability exists in the affected products which could allow a...
High
Unreviewed
CVE-2024-6435
was published
Jul 16, 2024
ProTip!
Advisories are also available from the
GraphQL API