GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
307 advisories
Filter by severity
An unauthenticated attacker with access to the local network of the
medical office can query an...
High
Unreviewed
CVE-2024-50589
was published
Nov 8, 2024
An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting...
High
Unreviewed
CVE-2024-48953
was published
Nov 7, 2024
An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup...
High
Unreviewed
CVE-2024-48950
was published
Nov 7, 2024
Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access...
High
Unreviewed
CVE-2024-37767
was published
Jul 5, 2024
Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token...
High
Unreviewed
CVE-2024-50488
was published
Oct 28, 2024
The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows...
High
Unreviewed
CVE-2023-38379
was published
Jul 16, 2023
An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access...
High
Unreviewed
CVE-2022-32503
was published
May 14, 2024
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions...
High
Unreviewed
CVE-2023-39981
was published
Sep 2, 2023
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and...
High
Unreviewed
CVE-2024-10002
was published
Oct 22, 2024
A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX...
High
Unreviewed
CVE-2022-23862
was published
Oct 22, 2024
A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab...
High
Unreviewed
CVE-2024-47912
was published
Oct 21, 2024
The affected product is vulnerable to an attacker being able to use commands without providing a...
High
Unreviewed
CVE-2024-49399
was published
Oct 17, 2024
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to...
High
Unreviewed
CVE-2024-45276
was published
Oct 15, 2024
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1...
High
Unreviewed
CVE-2024-23783
was published
Oct 17, 2024
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions,...
High
Unreviewed
CVE-2024-45844
was published
Oct 16, 2024
An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to...
High
Unreviewed
CVE-2024-48768
was published
Oct 11, 2024
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to...
High
Unreviewed
CVE-2024-48771
was published
Oct 11, 2024
LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive...
High
Unreviewed
CVE-2024-48777
was published
Oct 11, 2024
An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information...
High
Unreviewed
CVE-2024-48776
was published
Oct 11, 2024
An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain...
High
Unreviewed
CVE-2024-48775
was published
Oct 11, 2024
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the...
High
Unreviewed
CVE-2024-48773
was published
Oct 11, 2024
Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP...
High
Unreviewed
CVE-2024-5749
was published
Oct 15, 2024
The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions...
High
Unreviewed
CVE-2024-9522
was published
Oct 10, 2024
The affected product lacks an authentication check when sending commands to the server via the...
High
Unreviewed
CVE-2024-9137
was published
Oct 14, 2024
Permission control vulnerability in the audio module. Successful exploitation of this...
High
Unreviewed
CVE-2023-39380
was published
Aug 13, 2023
ProTip!
Advisories are also available from the
GraphQL API