GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,819
Erlang
36
GitHub Actions
32
Go
2,410
Maven
5,000+
npm
4,046
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
81 advisories
Filter by severity
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an...
Low
Unreviewed
CVE-2025-49731
was published
Jul 8, 2025
Unrestricted access to OS file system in SFTP service in Infinera G42
version R6.1.3 allows...
Moderate
Unreviewed
CVE-2025-27024
was published
Jul 2, 2025
The target device exposes a service on a specific TCP port with a configured
endpoint. The...
High
Unreviewed
CVE-2025-27025
was published
Jul 2, 2025
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent...
Moderate
Unreviewed
CVE-2025-46708
was published
Jun 27, 2025
A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through...
Moderate
Unreviewed
CVE-2025-22256
was published
Jun 10, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-25179
was published
Jun 2, 2025
An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow...
Moderate
Unreviewed
CVE-2025-2503
was published
May 30, 2025
Yggdrasil Vulnerable to Local Privilege Escalation
High
CVE-2025-3931
was published
for
github.com/redhatinsights/yggdrasil
(Go)
May 14, 2025
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an...
High
Unreviewed
CVE-2025-29826
was published
May 13, 2025
The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia...
High
Unreviewed
CVE-2025-30453
was published
May 13, 2025
An authenticated user without user administrative permissions could change the administrator...
High
Unreviewed
CVE-2025-46740
was published
May 12, 2025
Vulnerability of improper authentication logic implementation in the file system module
Impact:...
High
Unreviewed
CVE-2025-46584
was published
May 6, 2025
Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful...
High
Unreviewed
CVE-2025-31172
was published
Apr 7, 2025
Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful...
High
Unreviewed
CVE-2025-31173
was published
Apr 7, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-0468
was published
Apr 4, 2025
An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B...
Moderate
Unreviewed
CVE-2024-8315
was published
Mar 25, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-0478
was published
Mar 24, 2025
IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands...
High
Unreviewed
CVE-2024-51459
was published
Mar 19, 2025
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission...
Moderate
Unreviewed
CVE-2025-20649
was published
Mar 3, 2025
The product does not handle or incorrectly handles when it has insufficient privileges to access...
Moderate
Unreviewed
CVE-2024-6697
was published
Feb 20, 2025
An attacker who successfully exploited these vulnerabilities could cause enable command execution...
High
Unreviewed
CVE-2024-12430
was published
Jan 7, 2025
Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege...
High
Unreviewed
CVE-2025-22395
was published
Jan 7, 2025
Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to...
High
Unreviewed
CVE-2024-43705
was published
Dec 28, 2024
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An...
Low
Unreviewed
CVE-2024-42194
was published
Dec 17, 2024
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients...
Critical
Unreviewed
CVE-2024-46874
was published
Dec 6, 2024
ProTip!
Advisories are also available from the
GraphQL API