GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,033
Erlang
29
GitHub Actions
18
Go
1,843
Maven
5,000+
npm
3,580
NuGet
634
pip
3,162
Pub
10
RubyGems
849
Rust
801
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
800 advisories
Filter by severity
When the directory containing the installer does not have sufficiently restrictive file...
High
Unreviewed
CVE-2022-43702
was published
Jul 28, 2023
A vulnerability exists by allowing low-privileged users to read and update the data in various...
Moderate
Unreviewed
CVE-2023-3323
was published
Jul 24, 2023
Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager...
High
Unreviewed
CVE-2020-36695
was published
Jul 18, 2023
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device...
Critical
Unreviewed
CVE-2023-29131
was published
Jul 11, 2023
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users...
High
Unreviewed
CVE-2023-32183
was published
Jul 7, 2023
NGINX Management Suite default file permissions are set such that an authenticated attacker may...
High
Unreviewed
CVE-2023-28724
was published
Jul 6, 2023
A valid XCC user's local account permissions overrides their active directory permissions under...
High
Unreviewed
CVE-2023-29057
was published
Jul 6, 2023
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command...
Moderate
Unreviewed
CVE-2023-22931
was published
Jul 6, 2023
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1...
Low
Unreviewed
CVE-2023-21512
was published
Jun 28, 2023
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software...
High
Unreviewed
CVE-2023-20178
was published
Jun 28, 2023
A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged...
Moderate
Unreviewed
CVE-2023-23344
was published
Jun 23, 2023
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to...
High
Unreviewed
CVE-2023-25645
was published
Jun 16, 2023
An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0...
Moderate
Unreviewed
CVE-2022-33877
was published
Jun 13, 2023
Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote...
Critical
Unreviewed
CVE-2023-33282
was published
Jun 7, 2023
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An...
Critical
Unreviewed
CVE-2023-31116
was published
Jun 7, 2023
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware...
High
Unreviewed
CVE-2022-4569
was published
Jun 5, 2023
Download Center fails to properly validate the file path submitted by a user, An attacker can...
High
Unreviewed
CVE-2023-2749
was published
May 31, 2023
SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method...
Critical
Unreviewed
CVE-2023-29732
was published
May 30, 2023
SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify...
High
Unreviewed
CVE-2023-29731
was published
May 30, 2023
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions...
High
Unreviewed
CVE-2023-28079
was published
May 30, 2023
In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate...
High
Unreviewed
CVE-2023-33291
was published
May 29, 2023
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be...
Critical
Unreviewed
CVE-2023-29919
was published
May 23, 2023
Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a...
High
Unreviewed
CVE-2023-29838
was published
May 22, 2023
In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This...
High
Unreviewed
CVE-2023-21107
was published
May 16, 2023
In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local...
Moderate
Unreviewed
CVE-2023-21104
was published
May 16, 2023
ProTip!
Advisories are also available from the
GraphQL API