Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,298
Erlang
31
GitHub Actions
21
Go
2,063
Maven
5,000+
npm
3,744
NuGet
668
pip
3,424
Pub
12
RubyGems
892
Rust
876
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

94,123 advisories

Loading
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-21330 was published Mar 12, 2024
The software does not neutralize or incorrectly neutralizes certain characters before the data is... High Unreviewed
CVE-2024-1226 was published Mar 12, 2024
A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which... High Unreviewed
CVE-2024-1618 was published Mar 12, 2024
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7... High Unreviewed
CVE-2024-23112 was published Mar 12, 2024
A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0... High Unreviewed
CVE-2023-42790 was published Mar 12, 2024
An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions... High Unreviewed
CVE-2023-46717 was published Mar 12, 2024
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3,... High Unreviewed
CVE-2023-36554 was published Mar 12, 2024
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus... High Unreviewed
CVE-2024-22041 was published Mar 12, 2024
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus... High Unreviewed
CVE-2024-22040 was published Mar 12, 2024
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected... High Unreviewed
CVE-2024-27907 was published Mar 12, 2024
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)... High Unreviewed
CVE-2024-22044 was published Mar 12, 2024
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1).... High Unreviewed
CVE-2024-22045 was published Mar 12, 2024
An unauthenticated local attacker can perform a privilege escalation due to improper input... High Unreviewed
CVE-2024-25999 was published Mar 12, 2024
An unauthenticated remote attacker can influence the communication due to the lack of encryption... High Unreviewed
CVE-2024-26288 was published Mar 12, 2024
An unauthenticated remote attacker can write memory out of bounds due to improper input... High Unreviewed
CVE-2024-26001 was published Mar 12, 2024
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized... High Unreviewed
CVE-2024-26004 was published Mar 12, 2024
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which... High Unreviewed
CVE-2024-26003 was published Mar 12, 2024
An improper input validation in the Qualcom plctool allows a local attacker with low privileges... High Unreviewed
CVE-2024-26002 was published Mar 12, 2024
An unauthenticated remote attacker can perform a command injection in the OCPP Service with... High Unreviewed
CVE-2024-25998 was published Mar 12, 2024
SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain... High Unreviewed
CVE-2024-25325 was published Mar 12, 2024
Improper access control vulnerability exists in the specific folder of SKYSEA Client View... High Unreviewed
CVE-2024-21805 was published Mar 12, 2024
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine... High Unreviewed
CVE-2024-27121 was published Mar 12, 2024
GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path. High Unreviewed
CVE-2022-46070 was published Mar 12, 2024
In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This... High Unreviewed
CVE-2024-27236 was published Mar 11, 2024
In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized... High Unreviewed
CVE-2024-27233 was published Mar 11, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database