GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,520
Erlang
33
GitHub Actions
25
Go
2,215
Maven
5,000+
npm
3,885
NuGet
697
pip
3,654
Pub
12
RubyGems
913
Rust
932
Swift
38
Unreviewed advisories
All unreviewed
5,000+
131 advisories
Filter by severity
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers...
Critical
Unreviewed
CVE-2025-3364
was published
Apr 8, 2025
A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability...
Moderate
Unreviewed
CVE-2024-11821
was published
Mar 20, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...
High
Unreviewed
CVE-2024-48013
was published
Mar 17, 2025
Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability...
High
Unreviewed
CVE-2024-2240
was published
Feb 14, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0...
Moderate
Unreviewed
CVE-2024-8266
was published
Feb 13, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0...
Critical
Unreviewed
CVE-2024-7102
was published
Feb 13, 2025
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo...
High
Unreviewed
CVE-2024-12673
was published
Feb 12, 2025
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...
High
Unreviewed
CVE-2024-21924
was published
Feb 11, 2025
Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x...
Moderate
Unreviewed
CVE-2025-22890
was published
Feb 6, 2025
IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated...
High
Unreviewed
CVE-2024-49814
was published
Feb 6, 2025
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS...
Low
Unreviewed
CVE-2025-20185
was published
Feb 5, 2025
IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes...
Moderate
Unreviewed
CVE-2023-37412
was published
Jan 29, 2025
Apache Solr vulnerable to Execution with Unnecessary Privileges
High
CVE-2025-24814
was published
for
org.apache.solr:solr-core
(Maven)
Jan 27, 2025
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges...
High
Unreviewed
CVE-2024-47978
was published
Dec 25, 2024
IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate...
High
Unreviewed
CVE-2024-35141
was published
Dec 19, 2024
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1
contains a local...
High
Unreviewed
CVE-2024-31891
was published
Dec 14, 2024
The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a...
Moderate
Unreviewed
CVE-2024-28140
was published
Dec 11, 2024
The www-data user can elevate its privileges because sudo is configured to allow the execution of...
High
Unreviewed
CVE-2024-28139
was published
Dec 11, 2024
IBM Security Verify Access Appliance 10.0.0 through 10.0.8
could allow a locally authenticated...
High
Unreviewed
CVE-2024-49804
was published
Nov 29, 2024
Possible improper input validation Vulnerability
in iManager has been discovered in
OpenText™...
Moderate
Unreviewed
CVE-2021-38118
was published
Nov 22, 2024
A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the...
High
Unreviewed
CVE-2024-11075
was published
Nov 19, 2024
A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could...
High
Unreviewed
CVE-2020-26074
was published
Nov 18, 2024
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in...
High
Unreviewed
CVE-2024-8781
was published
Nov 18, 2024
A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of...
Moderate
Unreviewed
CVE-2024-51722
was published
Nov 12, 2024
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an...
High
Unreviewed
CVE-2024-48837
was published
Nov 12, 2024
ProTip!
Advisories are also available from the
GraphQL API