GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,122
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,020
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
838 advisories
Filter by severity
The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the...
High
Unreviewed
CVE-2020-36710
was published
Jun 7, 2023
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM...
High
Unreviewed
CVE-2023-33651
was published
Jun 6, 2023
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
High
Unreviewed
CVE-2023-21670
was published
Jun 6, 2023
Memory corruption due to improper access control in kernel while processing a mapping request...
High
Unreviewed
CVE-2022-40529
was published
Jun 6, 2023
The grc-policy-propagator allows security escalation within the cluster. The propagator allows...
High
Unreviewed
CVE-2023-3027
was published
Jun 6, 2023
Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low...
High
Unreviewed
CVE-2023-3066
was published
Jun 5, 2023
Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code...
High
Unreviewed
CVE-2023-25729
was published
Jun 2, 2023
Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation,...
High
Unreviewed
CVE-2023-3033
was published
Jun 2, 2023
An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP...
High
Unreviewed
CVE-2023-28352
was published
May 31, 2023
The SDK for the MediaPlaybackController module has improper permission verification. Successful...
High
Unreviewed
CVE-2023-31226
was published
May 26, 2023
AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to...
High
Unreviewed
CVE-2023-31726
was published
May 24, 2023
The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1...
High
Unreviewed
CVE-2023-23299
was published
May 23, 2023
Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier...
High
Unreviewed
CVE-2023-25946
was published
May 23, 2023
In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for...
High
Unreviewed
CVE-2023-21117
was published
May 16, 2023
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216,...
High
Unreviewed
CVE-2023-23446
was published
May 15, 2023
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216,...
High
Unreviewed
CVE-2023-23445
was published
May 15, 2023
VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious...
High
Unreviewed
CVE-2023-20877
was published
May 12, 2023
Insecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker...
High
Unreviewed
CVE-2020-23362
was published
May 9, 2023
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified...
High
Unreviewed
CVE-2023-24505
was published
May 8, 2023
Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen...
High
Unreviewed
CVE-2023-31435
was published
May 2, 2023
Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through...
High
Unreviewed
CVE-2022-37326
was published
Apr 27, 2023
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...
High
Unreviewed
CVE-2023-26244
was published
Apr 27, 2023
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...
High
Unreviewed
CVE-2023-26246
was published
Apr 27, 2023
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...
High
Unreviewed
CVE-2023-26245
was published
Apr 27, 2023
Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch...
High
Unreviewed
CVE-2023-27107
was published
Apr 27, 2023
ProTip!
Advisories are also available from the
GraphQL API