GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+
4,867 advisories
Filter by severity
A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical....
Moderate
Unreviewed
CVE-2024-12994
was published
Dec 28, 2024
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1
could allow a non-privileged local user to exploit a...
Moderate
Unreviewed
CVE-2024-47102
was published
Dec 25, 2024
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on...
Moderate
Unreviewed
CVE-2024-41887
was published
Dec 24, 2024
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on...
Moderate
Unreviewed
CVE-2024-41886
was published
Dec 24, 2024
Read/Write vulnerability in the image decoding module
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2024-54108
was published
Dec 12, 2024
Read/Write vulnerability in the image decoding module
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2024-54109
was published
Dec 12, 2024
Denial of service (DoS) vulnerability in the installation module
Impact: Successful exploitation...
Moderate
Unreviewed
CVE-2024-54101
was published
Dec 12, 2024
Vulnerability of improper access control in the secure input module
Impact: Successful...
Moderate
Unreviewed
CVE-2024-54100
was published
Dec 12, 2024
Duplicate Advisory: cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs
Moderate
CVE-2024-12401
was published
for
github.com/cert-manager/cert-manager
(Go)
Dec 12, 2024
•
withdrawn
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-49073
was published
Dec 12, 2024
Windows Mobile Broadband Driver Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2024-49087
was published
Dec 12, 2024
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input...
Moderate
Unreviewed
CVE-2024-45761
was published
Dec 9, 2024
A vulnerability, which was classified as problematic, has been found in SourceCodester Phone...
Moderate
Unreviewed
CVE-2024-12353
was published
Dec 9, 2024
A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified...
Moderate
Unreviewed
CVE-2024-12355
was published
Dec 9, 2024
A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability...
Moderate
Unreviewed
CVE-2024-12138
was published
Dec 4, 2024
Improper Input Validation vulnerability in RestApp Inc. Online Ordering System allows Integer...
Moderate
Unreviewed
CVE-2024-7488
was published
Dec 4, 2024
An improper input validation vulnerability leads to device crashes in certain ASUS router models....
Moderate
Unreviewed
CVE-2024-11985
was published
Dec 4, 2024
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API...
Moderate
Unreviewed
CVE-2024-52337
was published
Nov 26, 2024
A vulnerability was found in welliamcao OpsManage 3.0.1/3.0.2/3.0.3/3.0.4/3.0.5. It has been...
Moderate
Unreviewed
CVE-2024-11662
was published
Nov 25, 2024
Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion...
Moderate
Unreviewed
CVE-2024-9257
was published
Nov 22, 2024
Possible out of bound access in audio module due to lack of validation of user provided input.
Moderate
Unreviewed
CVE-2021-30299
was published
Nov 22, 2024
django Filer Unrestricted Upload of File with Dangerous Type
Moderate
CVE-2024-11404
was published
for
django-filer
(pip)
Nov 20, 2024
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated...
Moderate
Unreviewed
CVE-2024-45422
was published
Nov 19, 2024
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated,...
Moderate
Unreviewed
CVE-2021-1462
was published
Nov 18, 2024
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could...
Moderate
Unreviewed
CVE-2021-1465
was published
Nov 18, 2024
ProTip!
Advisories are also available from the
GraphQL API