GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
1,047 advisories
Filter by severity
VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability. This vulnerability...
High
Unreviewed
CVE-2023-32175
was published
May 3, 2024
VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This...
High
Unreviewed
CVE-2023-32179
was published
May 3, 2024
VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability....
High
Unreviewed
CVE-2023-32178
was published
May 3, 2024
NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability...
Moderate
Unreviewed
CVE-2023-34283
was published
May 3, 2024
G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability...
High
Unreviewed
CVE-2023-27347
was published
May 3, 2024
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client...
High
Unreviewed
CVE-2024-23459
was published
May 2, 2024
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client...
Moderate
Unreviewed
CVE-2023-41971
was published
May 2, 2024
Azure Monitor Agent Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-29989
was published
Apr 9, 2024
Microsoft Brokering File System Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-28907
was published
Apr 9, 2024
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-26216
was published
Apr 9, 2024
Windows Authentication Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-21447
was published
Apr 9, 2024
Microsoft Install Service Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-26158
was published
Apr 9, 2024
Podman affected by CVE-2024-1753 container escape at build time
Moderate
CVE-2024-1753
was published
for
github.com/containers/podman/v4
(Go)
Mar 28, 2024
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp...
High
Unreviewed
CVE-2023-41969
was published
Mar 26, 2024
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
High
CVE-2024-29188
was published
for
WixToolset.Util.wixext
(NuGet)
Mar 25, 2024
Xbox Gaming Services Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-28916
was published
Mar 21, 2024
Microsoft Office Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-26199
was published
Mar 12, 2024
Windows Update Stack Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-21432
was published
Mar 12, 2024
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma...
High
Unreviewed
CVE-2024-23285
was published
Mar 8, 2024
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce...
Moderate
Unreviewed
CVE-2024-0068
was published
Feb 29, 2024
This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1,...
High
Unreviewed
CVE-2023-42942
was published
Feb 21, 2024
Microsoft Azure File Sync Elevation of Privilege Vulnerability
Moderate
Unreviewed
CVE-2024-21397
was published
Feb 13, 2024
Azure Connected Machine Agent Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-21329
was published
Feb 13, 2024
HashiCorp Nomad vulnerable to symlink attacks
High
CVE-2024-1329
was published
for
github.com/hashicorp/nomad
(Go)
Feb 8, 2024
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount...
Moderate
Unreviewed
CVE-2023-32454
was published
Feb 6, 2024
ProTip!
Advisories are also available from the
GraphQL API