Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

455 advisories

Loading
In bootloader there is fastboot command allowing user specified kernel command line arguments.... High Unreviewed
CVE-2018-9369 was published Nov 19, 2024
In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an... High Unreviewed
CVE-2023-21270 was published Nov 19, 2024
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there... High Unreviewed
CVE-2018-9432 was published Nov 20, 2024
In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to... High Unreviewed
CVE-2017-13312 was published Nov 16, 2024
An issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total... High Unreviewed
CVE-2024-48292 was published Nov 18, 2024
In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings... High Unreviewed
CVE-2017-13314 was published Nov 16, 2024
guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are... High Unreviewed
CVE-2024-52867 was published Nov 17, 2024
In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading... High Unreviewed
CVE-2017-13310 was published Nov 16, 2024
In the read() function of ProcessStats.java, there is a possible read/write serialization issue... High Unreviewed
CVE-2017-13311 was published Nov 16, 2024
Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent. High Unreviewed
CVE-2024-52926 was published Nov 18, 2024
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display... High Unreviewed
CVE-2024-40660 was published Nov 13, 2024
In updateInternal of MediaProvider.java , there is a possible access of another app's files due... High Unreviewed
CVE-2024-43089 was published Nov 13, 2024
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents... High Unreviewed
CVE-2024-43085 was published Nov 13, 2024
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier... High Unreviewed
CVE-2024-43081 was published Nov 13, 2024
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to... High Unreviewed
CVE-2024-40661 was published Nov 13, 2024
Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations... High Unreviewed
CVE-2024-21820 was published Nov 13, 2024
grub2 allowed attackers with access to the grub shell to access files on the encrypted disks. High Unreviewed
CVE-2024-49504 was published Nov 13, 2024
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation... High Unreviewed
CVE-2024-21939 was published Nov 12, 2024
Incorrect default permissions in the AMD Provisioning Console installation directory could allow... High Unreviewed
CVE-2024-21958 was published Nov 12, 2024
Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory... High Unreviewed
CVE-2024-21945 was published Nov 12, 2024
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker... High Unreviewed
CVE-2024-21937 was published Nov 12, 2024
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center... High Unreviewed
CVE-2024-21938 was published Nov 12, 2024
Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could... High Unreviewed
CVE-2024-21946 was published Nov 12, 2024
Incorrect default permissions in the AMD Management Console installation directory could allow an... High Unreviewed
CVE-2024-21957 was published Nov 12, 2024
The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any... High Unreviewed
CVE-2024-36063 was published Nov 8, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database