Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,423 advisories

Loading
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication... Critical Unreviewed
CVE-2023-33553 was published Jun 7, 2023
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request... High Unreviewed
CVE-2022-40536 was published Jun 6, 2023
Transient DOS due to improper authorization in Modem High Unreviewed
CVE-2022-40521 was published Jun 6, 2023
Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows... Critical Unreviewed
CVE-2023-3065 was published Jun 5, 2023
The online authentication provided by the hwKitAssistant lacks strict identity verification of... Moderate Unreviewed
CVE-2023-0117 was published May 26, 2023
A vulnerability was found in libssh, where the authentication check of the connecting client can... Moderate Unreviewed
CVE-2023-2283 was published May 26, 2023
Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier... High Unreviewed
CVE-2023-25946 was published May 23, 2023
Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products... Critical Unreviewed
CVE-2023-27388 was published May 23, 2023
Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75... High Unreviewed
CVE-2023-2024 was published May 18, 2023
Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox ... High Unreviewed
CVE-2023-0863 was published May 17, 2023
The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication... High Unreviewed
CVE-2023-2706 was published May 17, 2023
The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up... Critical Unreviewed
CVE-2023-2499 was published May 16, 2023
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with... Critical Unreviewed
CVE-2023-23450 was published May 15, 2023
An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration... Critical Unreviewed
CVE-2023-27823 was published May 12, 2023
An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to... Moderate Unreviewed
CVE-2023-28325 was published May 12, 2023
Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser... Moderate Unreviewed
CVE-2023-0858 was published May 11, 2023
An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer... High Unreviewed
CVE-2023-31152 was published May 10, 2023
An authentication bypass vulnerability exists in the Authentication functionality of Weston... High Unreviewed
CVE-2022-41985 was published May 10, 2023
Improper authentication in the Intel(R) DCM software before version 5.1 may allow an... High Unreviewed
CVE-2022-44610 was published May 10, 2023
Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)... Moderate Unreviewed
CVE-2023-27919 was published May 10, 2023
An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below... Moderate Unreviewed
CVE-2023-28125 was published May 10, 2023
The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3,... Moderate Unreviewed
CVE-2023-28182 was published May 8, 2023
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers... Critical Unreviewed
CVE-2023-30328 was published May 4, 2023
Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1... Low Unreviewed
CVE-2023-21487 was published May 4, 2023
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local... High Unreviewed
CVE-2023-21484 was published May 4, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database