Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

87 advisories

Loading
Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal... Low Unreviewed
CVE-2026-60847 was published Jul 22, 2026
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally... Low Unreviewed
CVE-2026-0275 was published Jul 9, 2026
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a... Low Unreviewed
CVE-2026-0276 was published Jul 9, 2026
In multiple functions of AppOpsService.java, there is a possible missing permission check due to... Low Unreviewed
CVE-2026-28586 was published Jun 2, 2026
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information... Low Unreviewed
CVE-2026-0050 was published Jun 2, 2026
In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to... Low Unreviewed
CVE-2026-0016 was published Jun 2, 2026
Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control. Low Unreviewed
CVE-2026-33552 was published May 27, 2026
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may... Low Unreviewed
CVE-2026-31369 was published Apr 21, 2026
ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this... Low Unreviewed
CVE-2025-57840 was published Dec 24, 2025
An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,... Low Unreviewed
CVE-2025-54821 was published Nov 18, 2025
Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001... Low Unreviewed
CVE-2025-24307 was published Nov 11, 2025
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4... Low Unreviewed
CVE-2025-5496 was published Oct 21, 2025
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in... Low Unreviewed
CVE-2025-5494 was published Sep 25, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ... Low Unreviewed
CVE-2025-53029 was published Jul 15, 2025
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). ... Low Unreviewed
CVE-2025-50065 was published Jul 15, 2025
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. ... Low Unreviewed
CVE-2025-50066 was published Jul 15, 2025
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that... Low Unreviewed
CVE-2025-6943 was published Jul 2, 2025
The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0.... Low Unreviewed
CVE-2025-22829 was published Jun 11, 2025
An authenticated administrator could modify the Created By username for a user account Low Unreviewed
CVE-2025-46744 was published May 12, 2025
A broken access control vulnerability previously discovered in the Trend Vision One Role Name... Low Unreviewed
CVE-2025-31285 was published Apr 2, 2025
An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a... Low Unreviewed
CVE-2025-31286 was published Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One Status... Low Unreviewed
CVE-2025-31284 was published Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One User Roles... Low Unreviewed
CVE-2025-31283 was published Apr 2, 2025
A broken access control vulnerability previously discovered in the Trend Vision One User Account... Low Unreviewed
CVE-2025-31282 was published Apr 2, 2025
An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate... Low Unreviewed
CVE-2024-51324 was published Feb 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database