GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
115 advisories
Filter by severity
Mattermost fails to fully validate role changes
Low
CVE-2024-4198
was published
for
github.com/mattermost/mattermost-server
(Go)
Apr 26, 2024
Mattermost allows team admins to promote guests to team admins
Low
CVE-2024-4195
was published
for
github.com/mattermost/mattermost-server
(Go)
Apr 26, 2024
A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230816. It...
Low
Unreviewed
CVE-2023-4546
was published
Aug 26, 2023
Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1...
Low
Unreviewed
CVE-2023-30640
was published
Jul 6, 2023
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker...
Low
Unreviewed
CVE-2023-30732
was published
Oct 4, 2023
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers...
Low
Unreviewed
CVE-2023-30715
was published
Sep 6, 2023
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...
Low
Unreviewed
CVE-2023-30682
was published
Aug 10, 2023
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers...
Low
Unreviewed
CVE-2023-30684
was published
Aug 10, 2023
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local...
Low
Unreviewed
CVE-2023-30685
was published
Aug 10, 2023
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...
Low
Unreviewed
CVE-2023-30683
was published
Aug 10, 2023
Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker...
Low
Unreviewed
CVE-2023-30667
was published
Jul 6, 2023
cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).
Low
Unreviewed
CVE-2017-18421
was published
May 24, 2022
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC...
Low
Unreviewed
CVE-2017-18384
was published
May 24, 2022
Broken access control in Silverpeas
Low
CVE-2023-47320
was published
for
org.silverpeas.core:silverpeas-core-war
(Maven)
Dec 13, 2023
An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and...
Low
Unreviewed
CVE-2023-47536
was published
Dec 13, 2023
Mattermost fails to validate team membership when a user attempts to access a playbook, allowing...
Low
Unreviewed
CVE-2023-6547
was published
Dec 12, 2023
Improper access control in the Intel Smart Campus android application before version 9.4 may...
Low
Unreviewed
CVE-2023-38411
was published
Nov 14, 2023
Improper access control for some Intel Unison software may allow a privileged user to potentially...
Low
Unreviewed
CVE-2022-41659
was published
Nov 14, 2023
Froxlor vulnerable to business logic errors
Low
CVE-2023-4304
was published
for
froxlor/froxlor
(Composer)
Aug 11, 2023
Admidio Improper Access Control vulnerability
Low
CVE-2023-3303
was published
for
admidio/admidio
(Composer)
Jun 23, 2023
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of...
Low
Unreviewed
CVE-2023-5543
was published
Nov 10, 2023
Mattermost fails to correctly delete attachments
Low
CVE-2023-4105
was published
for
github.com/mattermost/mattermost-server/v6
(Go)
Aug 11, 2023
Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical...
Low
Unreviewed
CVE-2022-33720
was published
Aug 6, 2022
Improper access control vulnerability in updateLastConnectedClientInfo function of...
Low
Unreviewed
CVE-2022-30750
was published
Jul 13, 2022
Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1...
Low
Unreviewed
CVE-2022-36856
was published
Sep 10, 2022
ProTip!
Advisories are also available from the
GraphQL API