GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,891
Erlang
37
GitHub Actions
38
Go
2,550
Maven
5,000+
npm
4,221
NuGet
745
pip
3,998
Pub
12
RubyGems
953
Rust
1,039
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
293 advisories
Filter by severity
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an...
Moderate
Unreviewed
CVE-2025-11371
was published
Oct 9, 2025
An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space...
High
Unreviewed
CVE-2025-59976
was published
Oct 9, 2025
A files or directories accessible to external parties vulnerability has been reported to affect...
Moderate
Unreviewed
CVE-2024-48864
was published
Mar 7, 2025
File replacement vulnerability on some devices
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2024-54099
was published
Dec 12, 2024
A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated...
Moderate
Unreviewed
CVE-2025-37130
was published
Sep 17, 2025
Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on...
High
Unreviewed
CVE-2025-3025
was published
Sep 15, 2025
Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit,...
High
Unreviewed
CVE-2023-3712
was published
Sep 12, 2023
CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability...
Moderate
Unreviewed
CVE-2025-9273
was published
Sep 2, 2025
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier...
Moderate
Unreviewed
CVE-2025-52460
was published
Aug 28, 2025
MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an...
Moderate
Unreviewed
CVE-2025-51818
was published
Aug 21, 2025
An unauthenticated remote attacker can read out sensitive device information through a...
High
Unreviewed
CVE-2024-6421
was published
Jul 10, 2024
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose...
High
Unreviewed
CVE-2009-10005
was published
Aug 20, 2025
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If...
High
Unreviewed
CVE-2025-49797
was published
Jun 26, 2025
NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate...
High
Unreviewed
CVE-2025-23276
was published
Aug 3, 2025
Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories...
Moderate
Unreviewed
CVE-2025-30103
was published
Jul 30, 2025
A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience...
High
Unreviewed
CVE-2025-34139
was published
Jul 25, 2025
OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui...
High
Unreviewed
CVE-2023-41566
was published
Jul 17, 2025
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap...
Moderate
Unreviewed
CVE-2025-48928
was published
May 28, 2025
Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation...
Moderate
Unreviewed
CVE-2023-52112
was published
Jan 16, 2024
A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a...
High
Unreviewed
CVE-2023-47202
was published
Jan 23, 2024
The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which...
Moderate
Unreviewed
CVE-2024-8031
was published
May 15, 2025
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when...
Moderate
Unreviewed
CVE-2025-0620
was published
Jun 6, 2025
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
Critical
Unreviewed
CVE-2025-40908
was published
Jun 1, 2025
The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with...
Moderate
Unreviewed
CVE-2025-4634
was published
May 30, 2025
Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux...
High
Unreviewed
CVE-2025-4134
was published
May 28, 2025
ProTip!
Advisories are also available from the
GraphQL API