Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
663
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+

275 advisories

Loading
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS... Moderate Unreviewed
CVE-2022-41327 was published Jun 13, 2023
ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without... Moderate Unreviewed
CVE-2023-31195 was published Jun 13, 2023
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client... Moderate Unreviewed
CVE-2023-36671 was published Aug 10, 2023
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client... Moderate Unreviewed
CVE-2023-36672 was published Aug 10, 2023
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP... Moderate Unreviewed
CVE-2023-34972 was published Aug 24, 2023
ArcGIS Enterprise Server versions 11.0 and below have an information disclosure... Moderate Unreviewed
CVE-2023-25848 was published Aug 25, 2023
IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by... Moderate Unreviewed
CVE-2023-22870 was published Sep 5, 2023
A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN... Moderate Unreviewed
CVE-2023-23371 was published Oct 6, 2023
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged... Moderate Unreviewed
CVE-2023-5100 was published Oct 9, 2023
The affected product is vulnerable to a cleartext transmission of sensitive... Moderate Unreviewed
CVE-2023-41088 was published Oct 19, 2023
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... Moderate Unreviewed
CVE-2022-30115 was published Jun 3, 2022
Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to... Moderate Unreviewed
CVE-2020-14171 was published May 24, 2022
TYPO3 Information Disclosure Vulnerability Moderate
CVE-2017-6370 was published for typo3/cms (Composer) May 13, 2022
Cleartext Transmission issue in ROS2 (Robot Operating System 2) Foxy Fitzroy, with ROS_VERSION=2... Moderate Unreviewed
CVE-2023-51201 was published Jan 24, 2024
NVIDIA ChatRTX for Windows contains a vulnerability in the ChatRTX UI and backend, where a user... Moderate Unreviewed
CVE-2024-0098 was published May 14, 2024
Plain text credentials and session ID can be captured with a network sniffer. Moderate Unreviewed
CVE-2024-37183 was published Jun 21, 2024
Toshiba printers will display the password of the admin user in clear-text and additional... Moderate Unreviewed
CVE-2024-27163 was published Jun 14, 2024
Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive... Moderate Unreviewed
CVE-2024-28275 was published Apr 3, 2024
Under certain circumstances exacqVision Web Services will not enforce secure web communications ... Moderate Unreviewed
CVE-2024-32864 was published Aug 1, 2024
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ... Moderate Unreviewed
CVE-2024-35210 was published Jun 11, 2024
Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,... Moderate Unreviewed
CVE-2024-5631 was published Jul 9, 2024
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability Moderate
CVE-2024-38167 was published for Microsoft.NetCore.App.Runtime.linux-arm (NuGet) Aug 13, 2024
Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with... Moderate Unreviewed
CVE-2024-31799 was published Aug 15, 2024
IPMI credentials may be captured in XCC audit log entries when the account username length is 16... Moderate Unreviewed
CVE-2024-8059 was published Sep 13, 2024
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that... Moderate Unreviewed
CVE-2024-45101 was published Sep 13, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database