Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

537 advisories

Loading
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability... High Unreviewed
CVE-2023-26760 was published Feb 27, 2023
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a... Moderate Unreviewed
CVE-2022-34910 was published Feb 27, 2023
MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext. Moderate Unreviewed
CVE-2022-31405 was published Feb 27, 2023
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with... High Unreviewed
CVE-2022-34351 was published Feb 17, 2023
IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information... Moderate Unreviewed
CVE-2023-24964 was published Feb 17, 2023
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive... High Unreviewed
CVE-2022-41734 was published Feb 17, 2023
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux... Moderate Unreviewed
CVE-2022-45154 was published Feb 15, 2023
Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could... Critical Unreviewed
CVE-2022-3089 was published Feb 13, 2023
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs ... High Unreviewed
CVE-2022-34388 was published Feb 11, 2023
Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with... Moderate Unreviewed
CVE-2022-24410 was published Feb 10, 2023
Dell PowerScale OneFS, 9.0.0.x-9.4.0.x, contain a cleartext storage of sensitive information... Moderate Unreviewed
CVE-2022-45098 was published Feb 1, 2023
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server... Moderate Unreviewed
CVE-2022-45897 was published Jan 31, 2023
Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4... Moderate Unreviewed
CVE-2023-22332 was published Jan 30, 2023
Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. High Unreviewed
CVE-2022-48071 was published Jan 27, 2023
Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. High Unreviewed
CVE-2022-48073 was published Jan 27, 2023
** DISPUTED ** KeePass through 2.53 (in a default installation) allows an attacker, who has write... Moderate Unreviewed
CVE-2023-24055 was published Jan 22, 2023
In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in... High Unreviewed
CVE-2022-38112 was published Jan 20, 2023
A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0... Moderate Unreviewed
CVE-2022-45439 was published Jan 17, 2023
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This... Moderate Unreviewed
CVE-2022-42284 was published Jan 13, 2023
IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read... Moderate Unreviewed
CVE-2022-22470 was published Jan 9, 2023
IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access... Moderate Unreviewed
CVE-2022-41740 was published Jan 5, 2023
An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the... High Unreviewed
CVE-2022-37785 was published Jan 1, 2023
Certain General Electric Renewable Energy products store cleartext credentials in flash memory.... Moderate Unreviewed
CVE-2022-24120 was published Dec 26, 2022
IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including... Moderate Unreviewed
CVE-2022-22457 was published Dec 23, 2022
Logins saved by Firefox should be managed by the Password Manager component which uses encryption... Low Unreviewed
CVE-2022-42931 was published Dec 22, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database