Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,941
Erlang
29
GitHub Actions
16
Go
1,722
Maven
4,952
npm
3,481
NuGet
605
pip
3,049
Pub
10
RubyGems
832
Rust
778
Swift
34
Unreviewed advisories
All unreviewed
5,000+

3,060 advisories

Privilege escalation via form generator High
CVE-2021-37627 was published for contao/contao (Composer) Aug 23, 2021
ausi
A flaw was found in the way samba handled file and directory permissions. An authenticated user... Moderate Unreviewed
CVE-2020-14318 was published May 24, 2022
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit ... High Unreviewed
CVE-2024-4017 was published Apr 19, 2024
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit ... High Unreviewed
CVE-2024-4018 was published Apr 19, 2024
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that... Moderate Unreviewed
CVE-2024-3470 was published Apr 19, 2024
ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are... High Unreviewed
CVE-2024-21989 was published Apr 17, 2024
AWS Amplify CLI has incorrect trust policy management High
CVE-2024-28056 was published for @aws-amplify/cli (npm) Apr 15, 2024
Dusk plugin may allow unfettered user authentication in misconfigured installs High
CVE-2024-32003 was published for winter/wn-dusk-plugin (Composer) Apr 12, 2024
bennothommo
Windows Error Reporting Service Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-26169 was published Mar 12, 2024
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor... Moderate Unreviewed
CVE-2023-34043 was published Sep 27, 2023
A valid LDAP user, under specific conditions, will default to read-only permissions when... Moderate Unreviewed
CVE-2023-29056 was published Apr 29, 2023
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules... High Unreviewed
CVE-2023-24509 was published Apr 13, 2023
An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager... Critical Unreviewed
CVE-2021-28411 was published Aug 11, 2023
gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation High Unreviewed
CVE-2012-5617 was published Apr 23, 2022
Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows... Low Unreviewed
CVE-2023-30717 was published Sep 6, 2023
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep... Moderate Unreviewed
CVE-2023-30713 was published Sep 6, 2023
Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows... Moderate Unreviewed
CVE-2023-30716 was published Sep 6, 2023
Permission control vulnerability in the audio module. Successful exploitation of this... Moderate Unreviewed
CVE-2023-41312 was published Sep 27, 2023
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN... High Unreviewed
CVE-2023-41715 was published Oct 18, 2023
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an... Moderate Unreviewed
CVE-2024-3388 was published Apr 10, 2024
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5... Moderate Unreviewed
CVE-2024-27247 was published Apr 9, 2024
Windows Storage Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-29052 was published Apr 9, 2024
Microsoft Brokering File System Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-28904 was published Apr 9, 2024
Improper privilege management in the installer for Zoom Desktop Client for Windows before version... Moderate Unreviewed
CVE-2024-24694 was published Apr 9, 2024
Microsoft Brokering File System Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-28905 was published Apr 9, 2024
ProTip! Advisories are also available from the GraphQL API