GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
803 advisories
Filter by severity
A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX...
High
Unreviewed
CVE-2022-23862
was published
Oct 22, 2024
A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab...
High
Unreviewed
CVE-2024-47912
was published
Oct 21, 2024
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of...
Critical
Unreviewed
CVE-2024-40087
was published
Oct 21, 2024
Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows...
Moderate
Unreviewed
CVE-2024-40091
was published
Oct 21, 2024
The affected product is vulnerable to an attacker being able to use commands without providing a...
High
Unreviewed
CVE-2024-49399
was published
Oct 17, 2024
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to...
High
Unreviewed
CVE-2024-45276
was published
Oct 15, 2024
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1...
High
Unreviewed
CVE-2024-23783
was published
Oct 17, 2024
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). ...
High
Unreviewed
CVE-2024-21272
was published
Oct 15, 2024
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions,...
High
Unreviewed
CVE-2024-45844
was published
Oct 16, 2024
An issue in almando GmbH Almando Play APP (com.almando.play) 1.8.2 allows a remote attacker to...
High
Unreviewed
CVE-2024-48771
was published
Oct 11, 2024
An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to...
High
Unreviewed
CVE-2024-48768
was published
Oct 11, 2024
An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information...
High
Unreviewed
CVE-2024-48776
was published
Oct 11, 2024
LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive...
High
Unreviewed
CVE-2024-48777
was published
Oct 11, 2024
An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the...
High
Unreviewed
CVE-2024-48773
was published
Oct 11, 2024
An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain...
High
Unreviewed
CVE-2024-48775
was published
Oct 11, 2024
Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP...
High
Unreviewed
CVE-2024-5749
was published
Oct 15, 2024
The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions...
High
Unreviewed
CVE-2024-9522
was published
Oct 10, 2024
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing...
Critical
Unreviewed
CVE-2024-45274
was published
Oct 15, 2024
Enterprise Cloud Database from Ragic does not authenticate access to specific functionality,...
Critical
Unreviewed
CVE-2024-9984
was published
Oct 15, 2024
The affected product lacks an authentication check when sending commands to the server via the...
High
Unreviewed
CVE-2024-9137
was published
Oct 14, 2024
aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values...
Moderate
Unreviewed
CVE-2024-3774
was published
Apr 15, 2024
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated...
Critical
Unreviewed
CVE-2024-3777
was published
Apr 15, 2024
EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing...
Moderate
Unreviewed
CVE-2024-26263
was published
Feb 15, 2024
ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to...
Critical
Unreviewed
CVE-2023-5716
was published
Jan 19, 2024
An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9,...
Critical
Unreviewed
CVE-2024-9164
was published
Oct 11, 2024
ProTip!
Advisories are also available from the
GraphQL API