Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,746
Erlang
35
GitHub Actions
29
Go
2,319
Maven
5,000+
npm
3,955
NuGet
712
pip
3,736
Pub
12
RubyGems
920
Rust
972
Swift
38
Unreviewed advisories
All unreviewed
5,000+

1,281 advisories

Loading
Local privilege escalation due to insecure file permissions. The following products are affected:... Moderate Unreviewed
CVE-2025-48959 was published Jun 4, 2025
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code... High Unreviewed
CVE-2025-46355 was published Jun 3, 2025
An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free... High Unreviewed
CVE-2025-23105 was published Jun 2, 2025
An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow... High Unreviewed
CVE-2025-2502 was published May 30, 2025
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in... Moderate Unreviewed
CVE-2025-31261 was published May 30, 2025
Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and... Moderate Unreviewed
CVE-2025-4081 was published May 29, 2025
In some cases, Kea log files or lease files may be world-readable. This issue affects Kea... Moderate Unreviewed
CVE-2025-32803 was published May 28, 2025
On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the... Moderate Unreviewed
CVE-2025-4412 was published May 27, 2025
The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622,... Moderate Unreviewed
CVE-2025-46803 was published May 26, 2025
Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of... Moderate Unreviewed
CVE-2024-13948 was published May 22, 2025
An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged... High Unreviewed
CVE-2025-43596 was published May 22, 2025
Incorrect default permissions in some Intel(R) Gaudi(R) software installers before version 1.18... Moderate Unreviewed
CVE-2024-45067 was published May 15, 2025
Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may... Moderate Unreviewed
CVE-2025-20095 was published May 13, 2025
Incorrect default permissions for some Endurance Gaming Mode software installers may allow an... Moderate Unreviewed
CVE-2024-47550 was published May 13, 2025
Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an... Moderate Unreviewed
CVE-2024-28954 was published May 13, 2025
A remote code execution vulnerability exists in the Windows agent component of SecureConnector... High Unreviewed
CVE-2025-4660 was published May 13, 2025
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve... High Unreviewed
CVE-2023-31358 was published May 13, 2025
Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve... High Unreviewed
CVE-2023-31359 was published May 13, 2025
A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to... High Unreviewed
CVE-2024-36339 was published May 13, 2025
Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory... High Unreviewed
CVE-2024-21960 was published May 13, 2025
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror... High Unreviewed
CVE-2025-3528 was published May 9, 2025
Permission control vulnerability in the media library module Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-46587 was published May 6, 2025
Permission control vulnerability in the contacts module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-46586 was published May 6, 2025
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower... High Unreviewed
CVE-2025-43595 was published May 2, 2025
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access... High Unreviewed
CVE-2025-42598 was published Apr 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database