Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,270
Erlang
31
GitHub Actions
21
Go
2,046
Maven
5,000+
npm
3,737
NuGet
663
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+

541 advisories

Loading
A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this... Low Unreviewed
CVE-2023-3761 was published Jul 19, 2023
Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on... High Unreviewed
CVE-2023-34142 was published Jul 18, 2023
An insecure connection between Systems Manager and CQI Reporter application could expose infusion... Low Unreviewed
CVE-2023-30565 was published Jul 13, 2023
An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP... Moderate Unreviewed
CVE-2023-35833 was published Jul 13, 2023
An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to... High Unreviewed
CVE-2023-31823 was published Jul 13, 2023
Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote... High Unreviewed
CVE-2023-3272 was published Jul 10, 2023
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An... High Unreviewed
CVE-2023-30602 was published Jul 6, 2023
Mattermost fails to redact from audit logs the user password during user creation and the user... High Unreviewed
CVE-2023-1831 was published Jul 6, 2023
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac... High Unreviewed
CVE-2023-0053 was published Jul 6, 2023
The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal... High Unreviewed
CVE-2022-41627 was published Jul 6, 2023
there is a possible use of unencrypted transport over cellular networks due to an insecure... High Unreviewed
CVE-2023-21219 was published Jun 28, 2023
there is a possible use of unencrypted transport over cellular networks due to an insecure... High Unreviewed
CVE-2023-21220 was published Jun 28, 2023
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to... High Unreviewed
CVE-2023-31410 was published Jun 19, 2023
SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File... High Unreviewed
CVE-2023-23841 was published Jun 16, 2023
ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without... Moderate Unreviewed
CVE-2023-31195 was published Jun 13, 2023
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS... Moderate Unreviewed
CVE-2022-41327 was published Jun 13, 2023
Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow... High Unreviewed
CVE-2023-1899 was published Jun 12, 2023
IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information... Moderate Unreviewed
CVE-2023-27861 was published Jun 5, 2023
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan... Critical Unreviewed
CVE-2023-33730 was published May 31, 2023
An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker... High Unreviewed
CVE-2023-28348 was published May 31, 2023
html inputs of type password recorded in plaintext when converted to text inputs Moderate
CVE-2023-33187 was published for highlight.run (npm) May 26, 2023
Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a... High Unreviewed
CVE-2023-31193 was published May 22, 2023
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause... Critical Unreviewed
CVE-2022-46680 was published May 22, 2023
Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A),... Moderate Unreviewed
CVE-2023-0864 was published May 17, 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory... High Unreviewed
CVE-2023-32784 was published May 15, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database