GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,411
Erlang
33
GitHub Actions
22
Go
2,146
Maven
5,000+
npm
3,808
NuGet
687
pip
3,481
Pub
12
RubyGems
897
Rust
899
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,545 advisories
Filter by severity
Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.
Critical
Unreviewed
CVE-2024-37567
was published
Feb 28, 2025
An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon...
Moderate
Unreviewed
CVE-2025-25730
was published
Feb 28, 2025
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.
Critical
Unreviewed
CVE-2024-37566
was published
Feb 28, 2025
In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which...
High
Unreviewed
CVE-2024-38291
was published
Feb 28, 2025
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login
High
CVE-2025-23389
was published
for
github.com/rancher/rancher
(Go)
Feb 27, 2025
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows...
High
Unreviewed
CVE-2024-36259
was published
Feb 25, 2025
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0...
High
Unreviewed
CVE-2024-12368
was published
Feb 25, 2025
The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing...
Moderate
Unreviewed
CVE-2024-13693
was published
Feb 25, 2025
A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by...
Moderate
Unreviewed
CVE-2025-1646
was published
Feb 25, 2025
Incorrect access control in the component /iclock/Settings?restartNCS=1 of NovaCHRON Zeitsysteme...
Moderate
Unreviewed
CVE-2024-53542
was published
Feb 25, 2025
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been...
Moderate
Unreviewed
CVE-2025-1598
was published
Feb 24, 2025
A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as...
Moderate
Unreviewed
CVE-2025-1590
was published
Feb 23, 2025
A vulnerability classified as critical has been found in SourceCodester Best Employee Management...
Moderate
Unreviewed
CVE-2025-1593
was published
Feb 23, 2025
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1....
Moderate
Unreviewed
CVE-2025-1555
was published
Feb 21, 2025
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability....
Moderate
Unreviewed
CVE-2025-25968
was published
Feb 20, 2025
Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547,...
High
Unreviewed
CVE-2023-27517
was published
Feb 20, 2025
Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before...
High
Unreviewed
CVE-2023-22311
was published
Feb 20, 2025
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low...
Moderate
Unreviewed
CVE-2025-21105
was published
Feb 20, 2025
The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object...
Moderate
Unreviewed
CVE-2024-13855
was published
Feb 20, 2025
An improper access control vulnerability in Power Pages allows an unauthorized attacker to...
High
Unreviewed
CVE-2025-24989
was published
Feb 20, 2025
Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access...
Critical
Unreviewed
CVE-2020-35546
was published
Feb 19, 2025
A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an...
Moderate
Unreviewed
CVE-2025-20153
was published
Feb 19, 2025
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information...
Moderate
Unreviewed
CVE-2025-0968
was published
Feb 19, 2025
The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object...
Moderate
Unreviewed
CVE-2024-13854
was published
Feb 19, 2025
Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based...
High
Unreviewed
CVE-2024-56883
was published
Feb 18, 2025
ProTip!
Advisories are also available from the
GraphQL API