GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,476
Erlang
33
GitHub Actions
24
Go
2,207
Maven
5,000+
npm
3,858
NuGet
696
pip
3,639
Pub
12
RubyGems
913
Rust
918
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
551 advisories
Filter by severity
When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions...
High
Unreviewed
CVE-2025-24915
was published
Mar 21, 2025
Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows)...
High
Unreviewed
CVE-2025-24864
was published
Mar 6, 2025
Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows)...
High
Unreviewed
CVE-2025-22447
was published
Mar 6, 2025
An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the...
High
Unreviewed
CVE-2024-51440
was published
Feb 13, 2025
Incorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability...
High
Unreviewed
CVE-2023-31360
was published
Feb 11, 2025
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to...
High
Unreviewed
CVE-2024-11468
was published
Feb 5, 2025
Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies....
High
Unreviewed
CVE-2025-22918
was published
Feb 3, 2025
A vulnerability in the NetExtender Windows client log export function allows unauthorized access...
High
Unreviewed
CVE-2025-23007
was published
Jan 30, 2025
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura...
High
Unreviewed
CVE-2025-24176
was published
Jan 28, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2025-24107
was published
Jan 28, 2025
A use after free issue was addressed with improved memory management. This issue is fixed in...
High
Unreviewed
CVE-2025-24085
was published
Jan 28, 2025
Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to...
High
Unreviewed
CVE-2025-0543
was published
Jan 25, 2025
In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control...
High
Unreviewed
CVE-2024-55957
was published
Jan 22, 2025
In multiple locations, there is a possible failure to persist permissions settings due to...
High
Unreviewed
CVE-2024-49735
was published
Jan 22, 2025
In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to...
High
Unreviewed
CVE-2024-49737
was published
Jan 22, 2025
In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an...
High
Unreviewed
CVE-2024-49742
was published
Jan 22, 2025
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit...
High
Unreviewed
CVE-2024-49736
was published
Jan 22, 2025
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to...
High
Unreviewed
CVE-2024-49744
was published
Jan 22, 2025
In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant...
High
Unreviewed
CVE-2024-49732
was published
Jan 22, 2025
In multiple functions of AccountManagerService.java, there is a possible way to bypass...
High
Unreviewed
CVE-2024-49724
was published
Jan 22, 2025
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content...
High
Unreviewed
CVE-2023-40132
was published
Jan 22, 2025
In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs...
High
Unreviewed
CVE-2024-34730
was published
Jan 22, 2025
In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking...
High
Unreviewed
CVE-2024-43765
was published
Jan 22, 2025
Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). ...
High
Unreviewed
CVE-2025-21532
was published
Jan 21, 2025
In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout...
High
Unreviewed
CVE-2018-9434
was published
Jan 18, 2025
ProTip!
Advisories are also available from the
GraphQL API