Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
73
GitHub Actions
53
Go
4,004
Maven
5,000+
npm
5,000+
NuGet
974
pip
5,000+
Pub
13
RubyGems
1,069
Rust
1,395
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

116,720 advisories

Loading
An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to... High Unreviewed
CVE-2025-41750 was published Dec 9, 2025
An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to... High Unreviewed
CVE-2025-41748 was published Dec 9, 2025
An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to... High Unreviewed
CVE-2025-41745 was published Dec 9, 2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The... High Unreviewed
CVE-2025-40830 was published Dec 9, 2025
An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to... High Unreviewed
CVE-2025-41746 was published Dec 9, 2025
An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to... High Unreviewed
CVE-2025-41752 was published Dec 9, 2025
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected... High Unreviewed
CVE-2025-40937 was published Dec 9, 2025
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The... High Unreviewed
CVE-2025-40831 was published Dec 9, 2025
Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence... High Unreviewed
CVE-2025-14332 was published Dec 9, 2025
The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to... High Unreviewed
CVE-2025-13604 was published Dec 9, 2025
Improper verification of cryptographic signatures in the patch management component of Ivanti... High Unreviewed
CVE-2025-13662 was published Dec 9, 2025
NULL Pointer Dereference vulnerability in ravynsoft ravynos.This issue affects ravynos: through 0... High Unreviewed
CVE-2025-14309 was published Dec 9, 2025
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to... High Unreviewed
CVE-2025-13659 was published Dec 9, 2025
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by... High Unreviewed
CVE-2025-2296 was published Dec 9, 2025
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote... High Unreviewed
CVE-2025-13661 was published Dec 9, 2025
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This... High Unreviewed
CVE-2025-14322 was published Dec 9, 2025
Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox <... High Unreviewed
CVE-2025-14323 was published Dec 9, 2025
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox <... High Unreviewed
CVE-2025-14325 was published Dec 9, 2025
Spoofing issue in the Downloads Panel component. This vulnerability affects Firefox < 146. High Unreviewed
CVE-2025-14327 was published Dec 9, 2025
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 146 and... High Unreviewed
CVE-2025-14328 was published Dec 9, 2025
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 146 and... High Unreviewed
CVE-2025-14329 was published Dec 9, 2025
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and... High Unreviewed
CVE-2025-14333 was published Dec 9, 2025
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to... High Unreviewed
CVE-2025-12807 was published Dec 9, 2025
The Custom Admin Menu WordPress plugin through 1.0.0 does not sanitise and escape a parameter... High Unreviewed
CVE-2025-13071 was published Dec 9, 2025
A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an... High Unreviewed
CVE-2025-13428 was published Dec 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database
⚡