GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,821
Erlang
36
GitHub Actions
32
Go
2,413
Maven
5,000+
npm
4,052
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,004
Swift
38
Unreviewed advisories
All unreviewed
5,000+
82 advisories
Filter by severity
Software installed and run as a non-privileged user may conduct ptrace system calls to issue...
High
Unreviewed
CVE-2025-8109
was published
Aug 4, 2025
Yggdrasil Vulnerable to Local Privilege Escalation
High
CVE-2025-3931
was published
for
github.com/redhatinsights/yggdrasil
(Go)
May 14, 2025
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an...
Low
Unreviewed
CVE-2025-49731
was published
Jul 8, 2025
The target device exposes a service on a specific TCP port with a configured
endpoint. The...
High
Unreviewed
CVE-2025-27025
was published
Jul 2, 2025
Unrestricted access to OS file system in SFTP service in Infinera G42
version R6.1.3 allows...
Moderate
Unreviewed
CVE-2025-27024
was published
Jul 2, 2025
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent...
Moderate
Unreviewed
CVE-2025-46708
was published
Jun 27, 2025
A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through...
Moderate
Unreviewed
CVE-2025-22256
was published
Jun 10, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-25179
was published
Jun 2, 2025
An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow...
Moderate
Unreviewed
CVE-2025-2503
was published
May 30, 2025
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an...
High
Unreviewed
CVE-2025-29826
was published
May 13, 2025
The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia...
High
Unreviewed
CVE-2025-30453
was published
May 13, 2025
An authenticated user without user administrative permissions could change the administrator...
High
Unreviewed
CVE-2025-46740
was published
May 12, 2025
Vulnerability of improper authentication logic implementation in the file system module
Impact:...
High
Unreviewed
CVE-2025-46584
was published
May 6, 2025
Missing permissions check in Liferay Portal
Moderate
CVE-2022-42126
was published
for
com.liferay.portal:release.portal.bom
(Maven)
Nov 15, 2022
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-0468
was published
Apr 4, 2025
Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful...
High
Unreviewed
CVE-2025-31172
was published
Apr 7, 2025
Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful...
High
Unreviewed
CVE-2025-31173
was published
Apr 7, 2025
An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop...
High
Unreviewed
CVE-2024-25844
was published
Mar 3, 2024
An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B...
Moderate
Unreviewed
CVE-2024-8315
was published
Mar 25, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
High
Unreviewed
CVE-2025-0478
was published
Mar 24, 2025
IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands...
High
Unreviewed
CVE-2024-51459
was published
Mar 19, 2025
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary...
High
Unreviewed
CVE-2024-0015
was published
Feb 16, 2024
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission...
Moderate
Unreviewed
CVE-2025-20649
was published
Mar 3, 2025
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
High
CVE-2023-27087
was published
for
com.xuxueli:xxl-job
(Maven)
Mar 21, 2023
The product does not handle or incorrectly handles when it has insufficient privileges to access...
Moderate
Unreviewed
CVE-2024-6697
was published
Feb 20, 2025
ProTip!
Advisories are also available from the
GraphQL API