Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,359
Erlang
33
GitHub Actions
22
Go
2,126
Maven
5,000+
npm
3,787
NuGet
683
pip
3,467
Pub
12
RubyGems
894
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,052 advisories

Loading
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers... Moderate Unreviewed
CVE-2023-47256 was published Feb 2, 2024
When adding attachments to ticket comments, another user can add attachments as well... Moderate Unreviewed
CVE-2024-23792 was published Jan 29, 2024
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4.... Moderate Unreviewed
CVE-2024-0988 was published Jan 29, 2024
Authentication bypass in vector-admin allows a user to register to a vector-admin server while ... Moderate Unreviewed
CVE-2024-0879 was published Jan 25, 2024
The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS... Moderate Unreviewed
CVE-2024-23219 was published Jan 23, 2024
Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent... Moderate Unreviewed
CVE-2023-50127 was published Jan 11, 2024
A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This... Moderate Unreviewed
CVE-2023-7211 was published Jan 7, 2024
Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release... Moderate Unreviewed
CVE-2024-20803 was published Jan 4, 2024
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows... Moderate Unreviewed
CVE-2023-31292 was published Dec 29, 2023
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password... Moderate Unreviewed
CVE-2023-4641 was published Dec 27, 2023
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the ... Moderate Unreviewed
CVE-2023-6155 was published Dec 26, 2023
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated... Moderate Unreviewed
CVE-2023-49646 was published Dec 14, 2023
The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the... Moderate Unreviewed
CVE-2023-50430 was published Dec 10, 2023
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical... Moderate Unreviewed
CVE-2023-42576 was published Dec 5, 2023
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to... Moderate Unreviewed
CVE-2023-6343 was published Nov 30, 2023
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any... Moderate Unreviewed
CVE-2023-6342 was published Nov 30, 2023
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote... Moderate Unreviewed
CVE-2023-6353 was published Nov 30, 2023
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote... Moderate Unreviewed
CVE-2023-6354 was published Nov 30, 2023
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to... Moderate Unreviewed
CVE-2023-6344 was published Nov 30, 2023
Tyler Technologies Court Case Management Plus may store backups in a location that can be... Moderate Unreviewed
CVE-2023-6375 was published Nov 30, 2023
An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could... Moderate Unreviewed
CVE-2023-34388 was published Nov 30, 2023
An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior... Moderate Unreviewed
CVE-2023-48121 was published Nov 28, 2023
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical... Moderate Unreviewed
CVE-2023-42554 was published Nov 15, 2023
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation... Moderate Unreviewed
CVE-2023-43582 was published Nov 15, 2023
Improper authentication in some Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Reader... Moderate Unreviewed
CVE-2023-32661 was published Nov 14, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database