Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,618
NuGet
638
pip
3,231
Pub
10
RubyGems
854
Rust
817
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,062 advisories

Loading
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8... High Unreviewed
CVE-2024-3325 was published Jul 10, 2024
In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code... Moderate Unreviewed
CVE-2024-31334 was published Jul 9, 2024
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due... High Unreviewed
CVE-2024-34725 was published Jul 9, 2024
In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution... High Unreviewed
CVE-2024-23711 was published Jul 9, 2024
In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion... High Unreviewed
CVE-2024-31320 was published Jul 9, 2024
In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a... Moderate Unreviewed
CVE-2024-31311 was published Jul 9, 2024
In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app... Moderate Unreviewed
CVE-2024-31322 was published Jul 9, 2024
In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without... High Unreviewed
CVE-2024-31318 was published Jul 9, 2024
In onCreate of multiple files, there is a possible way to trick the user into granting health... High Unreviewed
CVE-2024-31323 was published Jul 9, 2024
In multiple locations, there is a possible permission bypass due to a confused deputy. This could... High Unreviewed
CVE-2023-21114 was published Jul 9, 2024
In multiple locations, there is a possible way to reveal images across users data due to a logic... High Unreviewed
CVE-2024-31325 was published Jul 9, 2024
In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an... High Unreviewed
CVE-2024-31313 was published Jul 9, 2024
Microsoft Defender for IoT Elevation of Privilege Vulnerability Critical Unreviewed
CVE-2024-38089 was published Jul 9, 2024
Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege... High Unreviewed
CVE-2024-37952 was published Jul 9, 2024
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows... High Unreviewed
CVE-2024-37484 was published Jul 9, 2024
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor... High Unreviewed
CVE-2024-37455 was published Jul 9, 2024
Improper Privilege Management vulnerability in Ekstrem Bir Bilgisayar Danismanlik Ic Ve Dis... High Unreviewed
CVE-2024-4341 was published Jul 8, 2024
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote... Critical Unreviewed
CVE-2024-27710 was published Jul 5, 2024
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote... High Unreviewed
CVE-2024-27711 was published Jul 5, 2024
Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0... Moderate Unreviewed
CVE-2024-37726 was published Jul 3, 2024
An issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain... High Unreviewed
CVE-2024-39206 was published Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate... High Unreviewed
CVE-2024-25086 was published Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate... High Unreviewed
CVE-2024-25088 was published Jul 2, 2024
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate... High Unreviewed
CVE-2024-22106 was published Jul 2, 2024
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management... Moderate Unreviewed
CVE-2024-37126 was published Jul 2, 2024
ProTip! Advisories are also available from the GraphQL API