GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
631 advisories
Filter by severity
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to...
Low
Unreviewed
CVE-2019-18248
was published
May 24, 2022
pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use...
Moderate
Unreviewed
CVE-2005-2069
was published
May 1, 2022
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive...
Moderate
Unreviewed
CVE-2019-4382
was published
May 24, 2022
Jenkins SourceGear Vault plugin transmits credentials in plain text
High
CVE-2019-10435
was published
for
org.jenkins-ci.plugins:vault-scm-plugin
(Maven)
May 24, 2022
In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be...
High
Unreviewed
CVE-2022-36200
was published
Aug 29, 2022
Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20...
High
Unreviewed
CVE-2022-41636
was published
Oct 28, 2022
A flaw was found in Foreman project. A credential leak was identified which will expose Azure...
High
Unreviewed
CVE-2021-3590
was published
Aug 23, 2022
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software...
Critical
Unreviewed
CVE-2022-43724
was published
Dec 13, 2022
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...
Moderate
Unreviewed
CVE-2023-22597
was published
Jan 13, 2023
Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in...
Moderate
Unreviewed
CVE-2022-2338
was published
Aug 18, 2022
SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 430, 430, allows an...
High
Unreviewed
CVE-2022-32245
was published
Aug 11, 2022
In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...
Moderate
Unreviewed
CVE-2019-10740
was published
May 4, 2022
tiny-csrf has openly visible CSRF tokens
High
CVE-2022-39287
was published
for
tiny-csrf
(npm)
Oct 7, 2022
Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1...
Low
Unreviewed
CVE-2022-33724
was published
Aug 6, 2022
Missing Encryption of Sensitive Data in yarn
High
CVE-2019-5448
was published
for
yarn
(npm)
Jul 31, 2019
In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as...
Moderate
Unreviewed
CVE-2019-10732
was published
May 13, 2022
When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials...
Critical
Unreviewed
CVE-2018-11749
was published
May 13, 2022
The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and...
Moderate
Unreviewed
CVE-2019-6540
was published
May 13, 2022
Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A...
Critical
Unreviewed
CVE-2019-6526
was published
May 13, 2022
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper...
High
Unreviewed
CVE-2017-9035
was published
May 13, 2022
Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka
High
CVE-2019-12399
was published
for
org.apache.kafka:kafka
(Maven)
May 12, 2020
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows...
Moderate
Unreviewed
CVE-2019-8345
was published
May 13, 2022
In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them...
Moderate
Unreviewed
CVE-2019-10735
was published
May 13, 2022
UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which...
Moderate
Unreviewed
CVE-2019-10250
was published
May 13, 2022
The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain...
Moderate
Unreviewed
CVE-2019-10251
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API