GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
94 advisories
Filter by severity
Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This...
Low
Unreviewed
CVE-2024-3487
was published
May 15, 2024
Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows...
Low
Unreviewed
CVE-2023-30724
was published
Sep 6, 2023
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to...
Low
Unreviewed
CVE-2023-30711
was published
Sep 6, 2023
Dell BIOS contains an improper authentication vulnerability. A malicious user with physical...
Low
Unreviewed
CVE-2023-32453
was published
Aug 16, 2023
PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023...
Low
Unreviewed
CVE-2023-30700
was published
Aug 10, 2023
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest...
Low
Unreviewed
CVE-2023-20867
was published
Jun 13, 2023
Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1...
Low
Unreviewed
CVE-2023-21487
was published
May 4, 2023
The Operating System hosting the FACSChorus application is configured to allow transmission of...
Low
Unreviewed
CVE-2023-29062
was published
Nov 28, 2023
Denial of service due to unauthenticated API endpoint. The following products are affected:...
Low
Unreviewed
CVE-2022-45456
was published
Apr 26, 2023
Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical...
Low
Unreviewed
CVE-2022-33720
was published
Aug 6, 2022
There is an improper authentication vulnerability in Pandora FMS v764. The application verifies...
Low
Unreviewed
CVE-2022-43978
was published
Jan 28, 2023
Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows...
Low
Unreviewed
CVE-2022-33689
was published
Jul 13, 2022
Puppet supports use of IP addresses in certnames without warning of potential risks
Low
CVE-2012-3408
was published
for
puppet
(RubyGems)
Oct 24, 2017
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...
Low
Unreviewed
CVE-2023-23493
was published
Feb 27, 2023
The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services...
Low
Unreviewed
CVE-2011-1758
was published
May 17, 2022
The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages...
Low
Unreviewed
CVE-2012-3520
was published
May 17, 2022
Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions...
Low
Unreviewed
CVE-2020-1878
was published
May 24, 2022
Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to...
Low
Unreviewed
CVE-2022-25817
was published
Mar 11, 2022
The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly...
Low
Unreviewed
CVE-2012-3741
was published
May 17, 2022
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...
Low
Unreviewed
CVE-2012-2377
was published
May 17, 2022
The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before...
Low
Unreviewed
CVE-2013-0578
was published
May 17, 2022
The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly...
Low
Unreviewed
CVE-2013-3659
was published
May 17, 2022
The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before...
Low
Unreviewed
CVE-2013-5429
was published
May 17, 2022
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0...
Low
Unreviewed
CVE-2014-6148
was published
May 17, 2022
** DISPUTED ** An issue was discovered in the com.dropbox.android application 98.2.2 for Android....
Low
Unreviewed
CVE-2018-12445
was published
May 14, 2022
ProTip!
Advisories are also available from the
GraphQL API