GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,543
Erlang
33
GitHub Actions
25
Go
2,219
Maven
5,000+
npm
3,889
NuGet
700
pip
3,657
Pub
12
RubyGems
913
Rust
937
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
318 advisories
Filter by severity
MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.
High
Unreviewed
CVE-2025-27812
was published
Apr 10, 2025
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA)...
High
Unreviewed
CVE-2025-21191
was published
Apr 8, 2025
Information disclosure may be there when a guest VM is connected.
Moderate
Unreviewed
CVE-2025-21431
was published
Apr 7, 2025
Memory corruption occurs during the copying of read data from the EEPROM because the IO...
High
Unreviewed
CVE-2024-43067
was published
Apr 7, 2025
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: uefisecapp:...
Moderate
Unreviewed
CVE-2025-21998
was published
Apr 3, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use ...
High
Unreviewed
CVE-2024-54084
was published
Mar 11, 2025
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect...
High
Unreviewed
CVE-2024-53694
was published
Mar 7, 2025
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that...
Critical
Unreviewed
CVE-2025-22224
was published
Mar 4, 2025
Memory corruption may occur while processing message from frontend during allocation.
High
Unreviewed
CVE-2024-53028
was published
Mar 3, 2025
Memory corruption may occur in keyboard virtual device due to guest VM interaction.
High
Unreviewed
CVE-2024-53032
was published
Mar 3, 2025
IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due...
Low
Unreviewed
CVE-2025-0759
was published
Feb 27, 2025
Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software...
Moderate
Unreviewed
CVE-2024-41917
was published
Feb 13, 2025
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability...
High
Unreviewed
CVE-2025-23359
was published
Feb 12, 2025
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2025-24036
was published
Feb 11, 2025
A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the...
High
Unreviewed
CVE-2024-48394
was published
Feb 6, 2025
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
High
Unreviewed
CVE-2024-45560
was published
Feb 3, 2025
Memory corruption while parsing the memory map info in IOCTL calls.
High
Unreviewed
CVE-2024-38418
was published
Feb 3, 2025
Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before...
Low
Unreviewed
CVE-2024-37181
was published
Jan 16, 2025
Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU)...
Moderate
Unreviewed
CVE-2025-22394
was published
Jan 15, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by...
High
Unreviewed
CVE-2024-42444
was published
Jan 14, 2025
IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker...
Critical
Unreviewed
CVE-2024-41787
was published
Jan 10, 2025
Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition...
High
Unreviewed
CVE-2024-53289
was published
Dec 11, 2024
IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote...
Critical
Unreviewed
CVE-2024-41779
was published
Nov 22, 2024
Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow...
High
Unreviewed
CVE-2024-22185
was published
Nov 13, 2024
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2024-49046
was published
Nov 12, 2024
ProTip!
Advisories are also available from the
GraphQL API