GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,963
Erlang
39
GitHub Actions
38
Go
2,615
Maven
5,000+
npm
4,255
NuGet
760
pip
4,036
Pub
12
RubyGems
953
Rust
1,049
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,250 advisories
Filter by severity
A malicious actor with access to the management network could exploit a misconfiguration in UniFi...
Critical
Unreviewed
CVE-2025-52665
was published
Oct 31, 2025
Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode...
Critical
Unreviewed
CVE-2021-4461
was published
Oct 31, 2025
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a...
Critical
Unreviewed
CVE-2023-7325
was published
Oct 31, 2025
Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This...
High
Unreviewed
CVE-2025-41110
was published
Oct 22, 2025
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Critical
Unreviewed
CVE-2025-12476
was published
Oct 29, 2025
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Critical
Unreviewed
CVE-2025-12477
was published
Oct 29, 2025
Multiple Broken Authentication security issues exist in the affected product. The security issues...
Critical
Unreviewed
CVE-2025-7328
was published
Oct 14, 2025
microCLAUDIA in v3.2.0 and prior has an improper access control vulnerability.
This flaw allows...
High
Unreviewed
CVE-2025-41090
was published
Oct 28, 2025
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing...
High
Unreviewed
CVE-2025-43994
was published
Oct 24, 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
High
Unreviewed
CVE-2025-61752
was published
Oct 21, 2025
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...
High
Unreviewed
CVE-2025-61756
was published
Oct 22, 2025
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing...
Critical
Unreviewed
CVE-2025-53072
was published
Oct 21, 2025
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST...
Critical
Unreviewed
CVE-2025-61757
was published
Oct 21, 2025
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...
Critical
Unreviewed
CVE-2025-53037
was published
Oct 21, 2025
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...
Moderate
Unreviewed
CVE-2025-53034
was published
Oct 21, 2025
An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated...
High
Unreviewed
CVE-2025-0108
was published
Feb 12, 2025
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...
High
Unreviewed
CVE-2025-24472
was published
Feb 11, 2025
PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication...
Critical
Unreviewed
CVE-2024-8956
was published
Sep 17, 2024
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with...
Critical
Unreviewed
CVE-2023-46747
was published
Oct 26, 2023
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX...
Moderate
Unreviewed
CVE-2023-36851
was published
Sep 27, 2023
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server...
Critical
Unreviewed
CVE-2023-42793
was published
Sep 19, 2023
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the...
High
Unreviewed
CVE-2023-27532
was published
Mar 11, 2023
Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An...
Critical
Unreviewed
CVE-2023-28461
was published
Mar 16, 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
High
Unreviewed
CVE-2023-21839
was published
Jan 18, 2023
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...
Critical
Unreviewed
CVE-2021-44077
was published
Nov 30, 2021
ProTip!
Advisories are also available from the
GraphQL API