GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
413 advisories
Filter by severity
A potential security vulnerability has been identified in the HP ThinUpdate utility (also known...
High
Unreviewed
CVE-2023-4499
was published
Oct 13, 2023
MiniTool Movie Maker 6.1.0 contains an insecure installation process that allows attackers to...
High
Unreviewed
CVE-2023-38355
was published
Sep 19, 2023
MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers...
High
Unreviewed
CVE-2023-38351
was published
Sep 19, 2023
MiniTool Movie Maker 4.1 contains an insecure installation process that allows attackers to...
High
Unreviewed
CVE-2023-38354
was published
Sep 19, 2023
MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to...
High
Unreviewed
CVE-2023-38352
was published
Sep 19, 2023
An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent...
High
Unreviewed
CVE-2023-4801
was published
Sep 13, 2023
In multiple locations, there are root CA certificates which need to be disabled. This could lead...
High
Unreviewed
CVE-2023-21265
was published
Aug 14, 2023
Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on...
High
Unreviewed
CVE-2023-34143
was published
Jul 18, 2023
If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension)...
High
Unreviewed
CVE-2023-3724
was published
Jul 18, 2023
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS...
High
Unreviewed
CVE-2023-3615
was published
Jul 17, 2023
Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual...
High
Unreviewed
CVE-2021-21548
was published
Jul 6, 2023
A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software...
High
Unreviewed
CVE-2022-32748
was published
Jul 6, 2023
A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32...
High
Unreviewed
CVE-2023-23546
was published
Jul 6, 2023
A certificate validation vulnerability exists in the Baiying Android application which could lead...
High
Unreviewed
CVE-2022-48186
was published
May 1, 2023
An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2...
High
Unreviewed
CVE-2023-22642
was published
Apr 11, 2023
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not...
High
Unreviewed
CVE-2018-5408
was published
May 24, 2022
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler...
High
Unreviewed
CVE-2020-1113
was published
May 24, 2022
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...
High
Unreviewed
CVE-2015-0294
was published
May 24, 2022
The NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which...
High
Unreviewed
CVE-2019-6032
was published
May 24, 2022
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could...
High
Unreviewed
CVE-2019-16209
was published
May 24, 2022
An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id)...
High
Unreviewed
CVE-2019-0054
was published
May 24, 2022
The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com...
High
Unreviewed
CVE-2019-16263
was published
May 24, 2022
An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for...
High
Unreviewed
CVE-2019-15042
was published
May 24, 2022
An issue was discovered in Couchbase Server 5.0.0. When creating a new remote cluster reference...
High
Unreviewed
CVE-2019-11497
was published
May 24, 2022
Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a...
High
Unreviewed
CVE-2019-3751
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API