GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,815
Erlang
36
GitHub Actions
32
Go
2,401
Maven
5,000+
npm
4,045
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
121 advisories
Filter by severity
Broken access control in Silverpeas
Low
CVE-2023-47320
was published
for
org.silverpeas.core:silverpeas-core-war
(Maven)
Dec 13, 2023
An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and...
Low
Unreviewed
CVE-2023-47536
was published
Dec 13, 2023
Mattermost fails to validate team membership when a user attempts to access a playbook, allowing...
Low
Unreviewed
CVE-2023-6547
was published
Dec 12, 2023
An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3...
Low
Unreviewed
CVE-2023-4658
was published
Dec 1, 2023
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3,...
Low
Unreviewed
CVE-2023-3443
was published
Dec 1, 2023
Improper access control in the Intel Smart Campus android application before version 9.4 may...
Low
Unreviewed
CVE-2023-38411
was published
Nov 14, 2023
Improper access control for some Intel Unison software may allow a privileged user to potentially...
Low
Unreviewed
CVE-2022-41659
was published
Nov 14, 2023
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local...
Low
Unreviewed
CVE-2023-42542
was published
Nov 14, 2023
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of...
Low
Unreviewed
CVE-2023-5543
was published
Nov 10, 2023
An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4...
Low
Unreviewed
CVE-2023-4700
was published
Nov 6, 2023
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker...
Low
Unreviewed
CVE-2023-30732
was published
Oct 4, 2023
A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an...
Low
Unreviewed
CVE-2023-28372
was published
Oct 3, 2023
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers...
Low
Unreviewed
CVE-2023-30715
was published
Sep 6, 2023
A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230816. It...
Low
Unreviewed
CVE-2023-4546
was published
Aug 26, 2023
Mattermost fails to correctly delete attachments
Low
CVE-2023-4105
was published
for
github.com/mattermost/mattermost-server/v6
(Go)
Aug 11, 2023
Froxlor vulnerable to business logic errors
Low
CVE-2023-4304
was published
for
froxlor/froxlor
(Composer)
Aug 11, 2023
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local...
Low
Unreviewed
CVE-2023-30685
was published
Aug 10, 2023
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers...
Low
Unreviewed
CVE-2023-30684
was published
Aug 10, 2023
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...
Low
Unreviewed
CVE-2023-30683
was published
Aug 10, 2023
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call...
Low
Unreviewed
CVE-2023-30682
was published
Aug 10, 2023
Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker...
Low
Unreviewed
CVE-2023-30667
was published
Jul 6, 2023
Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1...
Low
Unreviewed
CVE-2023-30640
was published
Jul 6, 2023
Admidio Improper Access Control vulnerability
Low
CVE-2023-3303
was published
for
admidio/admidio
(Composer)
Jun 23, 2023
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD...
Low
Unreviewed
CVE-2022-45430
was published
Dec 27, 2022
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022...
Low
Unreviewed
CVE-2022-39887
was published
Nov 10, 2022
ProTip!
Advisories are also available from the
GraphQL API