GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,051
Erlang
29
GitHub Actions
19
Go
1,887
Maven
5,000+
npm
3,602
NuGet
638
pip
3,205
Pub
10
RubyGems
852
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
978 advisories
Filter by severity
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink)...
Moderate
Unreviewed
CVE-2024-39578
was published
Aug 31, 2024
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability...
Moderate
Unreviewed
CVE-2023-43078
was published
Aug 28, 2024
VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2024-5928
was published
Aug 21, 2024
Microsoft OfficePlus Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-38084
was published
Aug 13, 2024
Azure Connected Machine Agent Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-38098
was published
Aug 13, 2024
Comodo Firewall Link Following Local Privilege Escalation Vulnerability. This vulnerability...
High
Unreviewed
CVE-2024-7249
was published
Jul 30, 2024
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-7252
was published
Jul 30, 2024
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-7251
was published
Jul 30, 2024
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-7250
was published
Jul 30, 2024
snapd failed to properly check the destination of symbolic links when extracting a snap
Moderate
CVE-2024-29069
was published
for
github.com/snapcore/snapd
(Go)
Jul 25, 2024
Microsoft Security Advisory CVE-2024-38081 | .NET Denial of Service Vulnerability
High
CVE-2024-38081
was published
for
Microsoft.IO.Redist
(NuGet)
Jul 9, 2024
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-38013
was published
Jul 9, 2024
Windows Image Acquisition Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-38022
was published
Jul 9, 2024
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-35261
was published
Jul 9, 2024
Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability...
High
Unreviewed
CVE-2024-6147
was published
Jun 20, 2024
Azure Monitor Agent Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-35254
was published
Jun 11, 2024
Microsoft Azure File Sync Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-35253
was published
Jun 11, 2024
Windows Storage Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-30093
was published
Jun 11, 2024
Microsoft Office Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-30104
was published
Jun 11, 2024
Windows Container Manager Service Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-30076
was published
Jun 11, 2024
Windows Themes Denial of Service Vulnerability
Moderate
Unreviewed
CVE-2024-30065
was published
Jun 11, 2024
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2024-27885
was published
Jun 10, 2024
A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow...
High
Unreviewed
CVE-2024-5102
was published
Jun 10, 2024
WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2024-4454
was published
May 22, 2024
Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows...
High
Unreviewed
CVE-2023-51636
was published
May 22, 2024
ProTip!
Advisories are also available from the
GraphQL API