GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,016
Maven
5,000+
npm
3,721
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
852
Swift
36
Unreviewed advisories
All unreviewed
5,000+
73 advisories
Filter by severity
WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass...
High
Unreviewed
CVE-2024-8811
was published
Nov 22, 2024
Protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated...
High
Unreviewed
CVE-2024-36242
was published
Nov 13, 2024
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...
High
Unreviewed
CVE-2023-5553
was published
Nov 21, 2023
Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an...
High
Unreviewed
CVE-2023-25945
was published
Oct 29, 2024
Windows Scripting Engine Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-43584
was published
Oct 8, 2024
Jinja2 sandbox escape via string formatting
High
CVE-2019-10906
was published
for
Jinja2
(pip)
Apr 10, 2019
Microsoft Publisher Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-38226
was published
Sep 10, 2024
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for...
High
Unreviewed
CVE-2022-48611
was published
Apr 26, 2024
Windows Remote Desktop Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2023-35352
was published
Jul 11, 2023
Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and...
High
Unreviewed
CVE-2024-24983
was published
Aug 14, 2024
Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network...
High
Unreviewed
CVE-2024-23499
was published
Aug 14, 2024
Windows SmartScreen Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-38180
was published
Aug 13, 2024
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter,...
High
Unreviewed
CVE-2024-0101
was published
Aug 8, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
High
Unreviewed
CVE-2023-42918
was published
Jul 29, 2024
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote...
High
Unreviewed
CVE-2024-27713
was published
Jul 5, 2024
Azure CycleCloud Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-38092
was published
Jul 9, 2024
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-38070
was published
Jul 9, 2024
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
High
CVE-2024-34144
was published
for
org.jenkins-ci.plugins:script-security
(Maven)
May 2, 2024
Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This...
High
Unreviewed
CVE-2024-6153
was published
Jun 20, 2024
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows...
High
Unreviewed
CVE-2024-5924
was published
Jun 13, 2024
Internet Shortcut Files Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-21412
was published
Feb 13, 2024
Microsoft Office Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-20673
was published
Feb 13, 2024
Secure Boot Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-28920
was published
Apr 9, 2024
SmartScreen Prompt Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2024-29988
was published
Apr 9, 2024
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4...
High
Unreviewed
CVE-2023-34984
was published
Sep 13, 2023
ProTip!
Advisories are also available from the
GraphQL API