Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,356
Erlang
33
GitHub Actions
22
Go
2,121
Maven
5,000+
npm
3,783
NuGet
683
pip
3,465
Pub
12
RubyGems
893
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

244,304 advisories

Loading
The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and... High Unreviewed
CVE-2025-23093 was published Feb 6, 2025
An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W... High Unreviewed
CVE-2025-22936 was published Feb 6, 2025
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path... Moderate Unreviewed
CVE-2024-54909 was published Feb 7, 2025
The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11... High Unreviewed
CVE-2025-23094 was published Feb 6, 2025
SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was... Moderate Unreviewed
CVE-2024-52612 was published Feb 11, 2025
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the... High Unreviewed
CVE-2023-6322 was published May 15, 2024
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an... High Unreviewed
CVE-2023-6324 was published May 15, 2024
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for... Moderate Unreviewed
CVE-2024-0957 was published Mar 22, 2024
A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially... High Unreviewed
CVE-2023-6321 was published May 15, 2024
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac... Moderate Unreviewed
CVE-2020-3432 was published Feb 12, 2025
NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker... High Unreviewed
CVE-2024-0112 was published Feb 12, 2025
A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory,... Moderate Unreviewed
CVE-2023-31352 was published Feb 12, 2025
An issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to... Unknown Unreviewed
CVE-2024-33469 was published Feb 12, 2025
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds... Moderate Unreviewed
CVE-2023-20508 was published Feb 12, 2025
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,... High Unreviewed
CVE-2023-31343 was published Feb 12, 2025
An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute... Unknown Unreviewed
CVE-2024-57000 was published Feb 12, 2025
An issue was discovered in the Winbox service of MikroTik RouterOS v6.43 through v7.16.1. A... Unknown Unreviewed
CVE-2024-54772 was published Feb 12, 2025
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows®... Moderate Unreviewed
CVE-2024-21971 was published Feb 12, 2025
NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds... Moderate Unreviewed
CVE-2024-0142 was published Feb 12, 2025
An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate... Unknown Unreviewed
CVE-2024-54916 was published Feb 12, 2025
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,... High Unreviewed
CVE-2023-31345 was published Feb 12, 2025
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,... High Unreviewed
CVE-2023-31342 was published Feb 12, 2025
The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and... Unknown Unreviewed
CVE-2022-3180 was published Feb 12, 2025
Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error... Unknown Unreviewed
CVE-2024-57241 was published Feb 12, 2025
An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate... Unknown Unreviewed
CVE-2024-51324 was published Feb 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database