Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

531 advisories

Loading
In affected versions of Octopus Server under certain circumstances it is possible for sensitive... Moderate Unreviewed
CVE-2024-6972 was published Jul 25, 2024
NASA AIT-Core vulnerable to remote code execution Critical
CVE-2024-35058 was published for ait-core (pip) May 21, 2024
NASA AIT-Core vulnerable to remote code execution Critical
CVE-2024-35057 was published for ait-core (pip) May 21, 2024
Improper data protection on the ventilator's serial interface could allow an attacker to send and... Critical Unreviewed
CVE-2024-9834 was published Nov 14, 2024
Cleartext transmission of sensitive information for some BigDL software maintained by Intel(R)... Moderate Unreviewed
CVE-2024-28169 was published Nov 13, 2024
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform... High Unreviewed
CVE-2024-50634 was published Nov 8, 2024
Moodle authorization headers preserved between "emulated redirects" Low
CVE-2024-43432 was published for moodle/moodle (Composer) Nov 11, 2024
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may... Moderate Unreviewed
CVE-2024-0066 was published Jun 18, 2024
An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge... High Unreviewed
CVE-2022-32510 was published May 14, 2024
It is possible for an API key to be logged in clear text in the audit log file after an invalid... Moderate Unreviewed
CVE-2023-4509 was published Apr 18, 2024
Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin Moderate
CVE-2024-39459 was published for org.jenkins-ci.plugins:plain-credentials (Maven) Jun 26, 2024
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of... Moderate Unreviewed
CVE-2024-50624 was published Oct 28, 2024
An Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0... Moderate Unreviewed
CVE-2024-35495 was published Sep 30, 2024
A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive... Moderate Unreviewed
CVE-2024-32946 was published Oct 30, 2024
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can... Critical Unreviewed
CVE-2024-25735 was published Mar 27, 2024
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in... Low Unreviewed
CVE-2024-8013 was published Oct 28, 2024
An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged... Moderate Unreviewed
CVE-2024-40595 was published Oct 24, 2024
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak... Moderate Unreviewed
CVE-2024-40090 was published Oct 21, 2024
Setuptools vulnerable to Man-in-the-middle attacks High
CVE-2013-1633 was published for setuptools (pip) May 17, 2022
Taipy has a Session Cookie without Secure and HTTPOnly flags Moderate
CVE-2024-47833 was published for taipy (pip) Aug 27, 2024
mbiesiad
An issue in YESCAM (com.yescom.YesCam.zwave) 1.0.2 allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2024-48788 was published Oct 11, 2024
Cleartext transmission of sensitive information in acep-collector service. The following products... Moderate Unreviewed
CVE-2024-49387 was published Oct 15, 2024
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An... High Unreviewed
CVE-2023-30602 was published Jul 6, 2023
A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which... Moderate Unreviewed
CVE-2024-9620 was published Oct 8, 2024
The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal... Low Unreviewed
CVE-2024-47124 was published Sep 26, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database