GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,873
Erlang
37
GitHub Actions
36
Go
2,519
Maven
5,000+
npm
4,156
NuGet
736
pip
3,956
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
491 advisories
Filter by severity
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...
Moderate
Unreviewed
CVE-2025-20264
was published
Jun 26, 2025
When a link can be opened in an external application, Firefox for Android will, by default,...
Moderate
Unreviewed
CVE-2025-6431
was published
Jun 26, 2025
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated...
Moderate
Unreviewed
CVE-2025-6329
was published
Jun 20, 2025
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization...
High
Unreviewed
CVE-2025-46840
was published
Jun 11, 2025
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected...
High
Unreviewed
CVE-2025-43585
was published
Jun 10, 2025
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a...
High
Unreviewed
CVE-2024-43706
was published
Jun 10, 2025
The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing...
Critical
Unreviewed
CVE-2025-4631
was published
May 31, 2025
The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing...
High
Unreviewed
CVE-2025-4103
was published
May 31, 2025
The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to...
High
Unreviewed
CVE-2025-4672
was published
May 31, 2025
A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1...
Moderate
Unreviewed
CVE-2025-5182
was published
May 26, 2025
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a...
High
Unreviewed
CVE-2025-4474
was published
May 13, 2025
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a...
High
Unreviewed
CVE-2025-4473
was published
May 13, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5. An...
High
Unreviewed
CVE-2025-31249
was published
May 13, 2025
Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges...
Critical
Unreviewed
CVE-2025-29827
was published
May 9, 2025
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a...
Critical
Unreviewed
CVE-2025-4104
was published
May 7, 2025
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2025-3924
was published
May 7, 2025
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized...
High
Unreviewed
CVE-2025-3921
was published
May 7, 2025
The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper...
Critical
Unreviewed
CVE-2025-3918
was published
May 3, 2025
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate...
Critical
Unreviewed
CVE-2025-30392
was published
Apr 30, 2025
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.
Critical
Unreviewed
CVE-2025-30390
was published
Apr 30, 2025
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate...
High
Unreviewed
CVE-2025-30389
was published
Apr 30, 2025
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
High
Unreviewed
CVE-2025-32982
was published
Apr 25, 2025
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function...
Critical
Unreviewed
CVE-2025-29659
was published
Apr 21, 2025
Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and...
Moderate
Unreviewed
CVE-2023-42973
was published
Apr 11, 2025
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute...
High
Unreviewed
CVE-2025-29794
was published
Apr 8, 2025
ProTip!
Advisories are also available from the
GraphQL API