Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,900
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
863
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

981 advisories

Loading
Windows Authentication Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-21447 was published Apr 9, 2024
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp... High Unreviewed
CVE-2023-41969 was published Mar 26, 2024
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files High
CVE-2024-29188 was published for WixToolset.Util.wixext (NuGet) Mar 25, 2024
Xbox Gaming Services Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-28916 was published Mar 21, 2024
Microsoft Office Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-26199 was published Mar 12, 2024
Windows Update Stack Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-21432 was published Mar 12, 2024
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce... Moderate Unreviewed
CVE-2024-0068 was published Feb 29, 2024
Microsoft Azure File Sync Elevation of Privilege Vulnerability Moderate Unreviewed
CVE-2024-21397 was published Feb 13, 2024
Azure Connected Machine Agent Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-21329 was published Feb 13, 2024
Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on... Moderate Unreviewed
CVE-2023-32474 was published Feb 6, 2024
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount... Moderate Unreviewed
CVE-2023-32454 was published Feb 6, 2024
A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote... High Unreviewed
CVE-2023-7216 was published Feb 5, 2024
A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One -... High Unreviewed
CVE-2023-52338 was published Jan 23, 2024
A security agent link following vulnerability in Trend Micro Apex One could allow a local... High Unreviewed
CVE-2023-52090 was published Jan 23, 2024
An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local... High Unreviewed
CVE-2023-52091 was published Jan 23, 2024
A security agent link following vulnerability in Trend Micro Apex One could allow a local... High Unreviewed
CVE-2023-52092 was published Jan 23, 2024
An updater link following vulnerability in the Trend Micro Apex One agent could allow a local... High Unreviewed
CVE-2023-52094 was published Jan 23, 2024
An agent link vulnerability in the Trend Micro Apex One security agent could allow a local... High Unreviewed
CVE-2023-47192 was published Jan 23, 2024
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce... Moderate Unreviewed
CVE-2023-6335 was published Jan 16, 2024
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce... High Unreviewed
CVE-2023-6336 was published Jan 16, 2024
PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can... High Unreviewed
CVE-2023-42137 was published Jan 15, 2024
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0... High Unreviewed
CVE-2023-31003 was published Jan 11, 2024
Visual Studio Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-20656 was published Jan 9, 2024
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January... High Unreviewed
CVE-2024-0206 was published Jan 9, 2024
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan... Moderate Unreviewed
CVE-2023-51654 was published Dec 26, 2023
ProTip! Advisories are also available from the GraphQL API