Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+

308 advisories

Loading
Duplicate Advisory: Keycloak vulnerable to Cleartext Transmission of Sensitive Information Moderate
GHSA-6mpx-pmgp-ww49 was published for org.keycloak:keycloak-quarkus-server (Maven) Dec 18, 2024 • withdrawn
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote... Moderate Unreviewed
CVE-2024-49819 was published Dec 17, 2024
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions... Moderate Unreviewed
CVE-2024-53246 was published Dec 10, 2024
IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2021-29892 was published Dec 3, 2024
Cleartext transmission of sensitive information for some BigDL software maintained by Intel(R)... Moderate Unreviewed
CVE-2024-28169 was published Nov 13, 2024
A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive... Moderate Unreviewed
CVE-2024-32946 was published Oct 30, 2024
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of... Moderate Unreviewed
CVE-2024-50624 was published Oct 28, 2024
An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged... Moderate Unreviewed
CVE-2024-40595 was published Oct 24, 2024
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak... Moderate Unreviewed
CVE-2024-40090 was published Oct 21, 2024
Cleartext transmission of sensitive information in acep-collector service. The following products... Moderate Unreviewed
CVE-2024-49387 was published Oct 15, 2024
A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which... Moderate Unreviewed
CVE-2024-9620 was published Oct 8, 2024
An Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0... Moderate Unreviewed
CVE-2024-35495 was published Sep 30, 2024
IPMI credentials may be captured in XCC audit log entries when the account username length is 16... Moderate Unreviewed
CVE-2024-8059 was published Sep 13, 2024
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that... Moderate Unreviewed
CVE-2024-45101 was published Sep 13, 2024
IBM Concert 1.0 does not set the secure attribute on authorization tokens or session cookies.... Moderate Unreviewed
CVE-2024-43180 was published Sep 13, 2024
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an... Moderate Unreviewed
CVE-2024-41927 was published Sep 4, 2024
Taipy has a Session Cookie without Secure and HTTPOnly flags Moderate
CVE-2024-47833 was published for taipy (pip) Aug 27, 2024
mbiesiad
Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with... Moderate Unreviewed
CVE-2024-31799 was published Aug 15, 2024
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability Moderate
CVE-2024-38167 was published for Microsoft.NetCore.App.Runtime.linux-arm (NuGet) Aug 13, 2024
Under certain circumstances exacqVision Web Services will not enforce secure web communications ... Moderate Unreviewed
CVE-2024-32864 was published Aug 1, 2024
In affected versions of Octopus Server under certain circumstances it is possible for sensitive... Moderate Unreviewed
CVE-2024-6972 was published Jul 25, 2024
Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,... Moderate Unreviewed
CVE-2024-5631 was published Jul 9, 2024
Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin Moderate
CVE-2024-39459 was published for org.jenkins-ci.plugins:plain-credentials (Maven) Jun 26, 2024
Plain text credentials and session ID can be captured with a network sniffer. Moderate Unreviewed
CVE-2024-37183 was published Jun 21, 2024
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may... Moderate Unreviewed
CVE-2024-0066 was published Jun 18, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database