Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,342
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+

264 advisories

Loading
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX... Moderate Unreviewed
CVE-2023-36847 was published Aug 17, 2023
cross-site inclusion (XSSI) of files in jupyter-server Moderate
CVE-2023-40170 was published for jupyter-server (pip) Aug 29, 2023
Due to missing authentication check in webdynpro application, an unauthorized user in SAP... Moderate Unreviewed
CVE-2023-41367 was published Sep 13, 2023
Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy Moderate
CVE-2023-41333 was published for github.com/cilium/cilium (Go) Sep 27, 2023
odinuge
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX... Moderate Unreviewed
CVE-2023-36851 was published Sep 27, 2023
Sensitive information disclosure and manipulation due to improper authentication. The following... Moderate Unreviewed
CVE-2023-44152 was published Sep 27, 2023
The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP... Moderate Unreviewed
CVE-2023-4506 was published Sep 27, 2023
The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2023-4505 was published Sep 27, 2023
Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows... Moderate Unreviewed
CVE-2023-26579 was published Oct 25, 2023
Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3... Moderate Unreviewed
CVE-2023-27261 was published Oct 25, 2023
Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and... Moderate Unreviewed
CVE-2023-27256 was published Oct 25, 2023
PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring... Moderate Unreviewed
CVE-2023-39231 was published Oct 25, 2023
An authentication issue was addressed with improved state management. This issue is fixed in... Moderate Unreviewed
CVE-2023-42845 was published Oct 25, 2023
Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin.... Moderate Unreviewed
CVE-2023-46819 was published Nov 10, 2023
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of... Moderate Unreviewed
CVE-2023-46096 was published Nov 14, 2023
Lack of authentication vulnerability. An unauthenticated local user is able to see through the... Moderate Unreviewed
CVE-2023-3104 was published Nov 22, 2023
The FACSChorus workstation operating system does not restrict what devices can interact with its... Moderate Unreviewed
CVE-2023-29060 was published Nov 28, 2023
There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to... Moderate Unreviewed
CVE-2023-29061 was published Nov 28, 2023
In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an... Moderate Unreviewed
CVE-2023-6368 was published Dec 14, 2023
Microsoft Bluetooth Driver Spoofing Vulnerability Moderate Unreviewed
CVE-2024-21306 was published Jan 9, 2024
NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication... Moderate Unreviewed
CVE-2023-31033 was published Jan 12, 2024
An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions... Moderate Unreviewed
CVE-2023-51062 was published Jan 13, 2024
A missing authentication check in the WebSocket channel used for the Check Point IoT integration... Moderate Unreviewed
CVE-2023-5253 was published Jan 15, 2024
Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV records Moderate
CVE-2020-15136 was published for go.etcd.io/etcd (Go) Jan 31, 2024
Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for... Moderate Unreviewed
CVE-2024-22449 was published Feb 1, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database