Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,081
Erlang
29
GitHub Actions
19
Go
1,909
Maven
5,000+
npm
3,642
NuGet
638
pip
3,258
Pub
10
RubyGems
869
Rust
820
Swift
35
Unreviewed advisories
All unreviewed
5,000+

947 advisories

Loading
ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control... High Unreviewed
CVE-2024-34112 was published Jun 13, 2024
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control... High Unreviewed
CVE-2024-26029 was published Jun 13, 2024
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos... High Unreviewed
CVE-2024-2698 was published Jun 12, 2024
Keycloak's admin API allows low privilege users to use administrative functions High
CVE-2024-3656 was published for org.keycloak:keycloak-services (Maven) Jun 11, 2024
An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to... High Unreviewed
CVE-2024-37289 was published Jun 11, 2024
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS... High Unreviewed
CVE-2022-48683 was published Jun 10, 2024
Authlib has algorithm confusion with asymmetric public keys High
CVE-2024-37568 was published for authlib (pip) Jun 9, 2024
An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically... High Unreviewed
CVE-2024-5126 was published Jun 6, 2024
An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting... High Unreviewed
CVE-2024-5131 was published Jun 6, 2024
An improper access control vulnerability exists in lunary-ai/lunary versions up to and including... High Unreviewed
CVE-2024-3504 was published Jun 6, 2024
An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application,... High Unreviewed
CVE-2024-4520 was published Jun 4, 2024
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers. High Unreviewed
CVE-2024-23360 was published Jun 3, 2024
The mobile application (com.transsion.videocallenhancer) interface has improper permission... High Unreviewed
CVE-2024-4988 was published May 21, 2024
An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users... High Unreviewed
CVE-2024-4151 was published May 20, 2024
Improper access control in some Intel(R) GPA Framework software installers before version 2023.3... High Unreviewed
CVE-2023-43748 was published May 16, 2024
Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an... High Unreviewed
CVE-2023-45217 was published May 16, 2024
Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow... High Unreviewed
CVE-2023-40070 was published May 16, 2024
Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow... High Unreviewed
CVE-2023-40071 was published May 16, 2024
Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225... High Unreviewed
CVE-2022-37341 was published May 16, 2024
Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow... High Unreviewed
CVE-2022-37410 was published May 16, 2024
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access... High Unreviewed
CVE-2024-34099 was published May 15, 2024
Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions... High Unreviewed
CVE-2024-34221 was published May 14, 2024
An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should... High Unreviewed
CVE-2022-32507 was published May 14, 2024
Claris International has resolved an issue of potentially allowing unauthorized access to records... High Unreviewed
CVE-2024-27790 was published May 14, 2024
In sendIntentSender of ActivityManagerService.java, there is a possible background activity... High Unreviewed
CVE-2024-0025 was published May 7, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database