Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,467
Erlang
33
GitHub Actions
23
Go
2,172
Maven
5,000+
npm
3,832
NuGet
696
pip
3,508
Pub
12
RubyGems
910
Rust
907
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

179 advisories

Loading
Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE)... Moderate Unreviewed
CVE-2025-1984 was published Mar 12, 2025
Unquoted Search Path or Element vulnerability in OpenText™ Service Manager.  The vulnerability... High Unreviewed
CVE-2025-0884 was published Mar 12, 2025
A vulnerability has been found in the CPython `venv` module and CLI where path names provided... Moderate Unreviewed
CVE-2024-9287 was published Oct 22, 2024
Local privilege escalation due to unquoted search path vulnerability. The following products are... Moderate Unreviewed
CVE-2025-24831 was published Jan 31, 2025
In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service... High Unreviewed
CVE-2024-57276 was published Jan 27, 2025
Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s)... High Unreviewed
CVE-2025-21107 was published Jan 30, 2025
A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This... High Unreviewed
CVE-2024-9325 was published Sep 29, 2024
A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This... High Unreviewed
CVE-2024-6080 was published Jun 18, 2024
Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before... Moderate Unreviewed
CVE-2023-24542 was published Oct 10, 2024
Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious... Critical Unreviewed
CVE-2020-14521 was published Feb 12, 2022
Windows Setup and Deployment Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-43457 was published Sep 10, 2024
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If... Moderate Unreviewed
CVE-2022-27592 was published Sep 6, 2024
Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager... Moderate Unreviewed
CVE-2024-5963 was published Aug 6, 2024
Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who... Moderate Unreviewed
CVE-2024-5402 was published Jul 15, 2024
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such... Moderate Unreviewed
CVE-2024-31201 was published Jul 31, 2024
An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local... Low Unreviewed
CVE-2024-31804 was published Apr 23, 2024
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could... High Unreviewed
CVE-2024-2747 was published Jun 12, 2024
Unquoted search path or element in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows... Moderate Unreviewed
CVE-2023-29165 was published Nov 14, 2023
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™... Unknown Unreviewed
CVE-2024-3640 was published May 16, 2024
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This... High Unreviewed
CVE-2024-4461 was published May 3, 2024
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code... High Unreviewed
CVE-2023-39464 was published May 3, 2024
Local privilege escalation due to unquoted search path vulnerability. The following products are... High Unreviewed
CVE-2024-34010 was published Apr 29, 2024
Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local... Moderate Unreviewed
CVE-2024-4031 was published Apr 23, 2024
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... Critical Unreviewed
CVE-2023-38408 was published Jul 20, 2023
A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software... High Unreviewed
CVE-2024-22437 was published Apr 15, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database