GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,233
Erlang
31
GitHub Actions
20
Go
1,992
Maven
5,000+
npm
3,709
NuGet
661
pip
3,346
Pub
11
RubyGems
884
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
257 advisories
Filter by severity
Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure...
Moderate
Unreviewed
CVE-2023-32447
was published
Jul 20, 2023
Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure...
Moderate
Unreviewed
CVE-2023-32455
was published
Jul 20, 2023
Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure...
Moderate
Unreviewed
CVE-2023-32483
was published
Jul 20, 2023
A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This...
Moderate
Unreviewed
CVE-2023-3762
was published
Jul 19, 2023
A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an...
Moderate
Unreviewed
CVE-2023-20207
was published
Jul 12, 2023
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with...
Moderate
Unreviewed
CVE-2023-35699
was published
Jul 10, 2023
A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack)...
Moderate
Unreviewed
CVE-2022-2513
was published
Jul 6, 2023
?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in...
Moderate
Unreviewed
CVE-2023-3395
was published
Jul 3, 2023
IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 stores user credentials in plain clear...
Moderate
Unreviewed
CVE-2022-33159
was published
Jun 15, 2023
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console...
Moderate
Unreviewed
CVE-2023-28345
was published
May 31, 2023
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext...
Moderate
Unreviewed
CVE-2023-32448
was published
May 30, 2023
IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be...
Moderate
Unreviewed
CVE-2023-22878
was published
May 19, 2023
In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there...
Moderate
Unreviewed
CVE-2023-20914
was published
May 16, 2023
Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0...
Moderate
Unreviewed
CVE-2023-24586
was published
May 10, 2023
An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is logging of user...
Moderate
Unreviewed
CVE-2023-22949
was published
Apr 14, 2023
A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to...
Moderate
Unreviewed
CVE-2023-0005
was published
Apr 12, 2023
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...
Moderate
Unreviewed
CVE-2023-0614
was published
Apr 4, 2023
In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the...
Moderate
Unreviewed
CVE-2023-25263
was published
Mar 27, 2023
A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA...
Moderate
Unreviewed
CVE-2023-20059
was published
Mar 23, 2023
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with...
Moderate
Unreviewed
CVE-2023-25596
was published
Mar 22, 2023
An information disclosure vulnerability allows sensitive key material to be included in technical...
Moderate
Unreviewed
CVE-2022-48310
was published
Mar 1, 2023
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a...
Moderate
Unreviewed
CVE-2022-34910
was published
Feb 27, 2023
MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext.
Moderate
Unreviewed
CVE-2022-31405
was published
Feb 27, 2023
IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information...
Moderate
Unreviewed
CVE-2023-24964
was published
Feb 17, 2023
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux...
Moderate
Unreviewed
CVE-2022-45154
was published
Feb 15, 2023
ProTip!
Advisories are also available from the
GraphQL API