GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,170
Erlang
30
GitHub Actions
19
Go
1,981
Maven
5,000+
npm
3,700
NuGet
656
pip
3,319
Pub
11
RubyGems
882
Rust
834
Swift
35
Unreviewed advisories
All unreviewed
5,000+
423 advisories
Filter by severity
The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk...
High
Unreviewed
CVE-2023-26219
was published
Oct 25, 2023
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify...
High
Unreviewed
CVE-2023-41372
was published
Oct 25, 2023
The Android Client application, when enrolled to the AppHub server, connects to an MQTT
broker to...
High
Unreviewed
CVE-2023-46102
was published
Oct 25, 2023
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
High
CVE-2023-31579
was published
for
top.tangyh.basic:lamp-core
(Maven)
Nov 3, 2023
Symmetric encryption used to protect messages between the AppsAnywhere server and client can be...
High
Unreviewed
CVE-2023-41137
was published
Nov 9, 2023
Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local...
High
Unreviewed
CVE-2023-44296
was published
Nov 16, 2023
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES...
High
Unreviewed
CVE-2023-48053
was published
Nov 16, 2023
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This...
High
Unreviewed
CVE-2023-48055
was published
Nov 16, 2023
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT...
High
Unreviewed
CVE-2023-47315
was published
Nov 22, 2023
When configured in
debugging mode by an authenticated user with
administrative...
High
Unreviewed
CVE-2023-40463
was published
Dec 5, 2023
Several versions of
ALEOS, including ALEOS 4.16.0, use a hardcoded
SSL certificate...
High
Unreviewed
CVE-2023-40464
was published
Dec 5, 2023
The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard...
High
Unreviewed
CVE-2023-33413
was published
Dec 7, 2023
Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login...
High
Unreviewed
CVE-2023-36651
was published
Dec 12, 2023
A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion...
High
Unreviewed
CVE-2023-36647
was published
Dec 12, 2023
When installing the Net2 software a root certificate is installed into the trusted store. A...
High
Unreviewed
CVE-2023-43870
was published
Dec 19, 2023
An issue in Automatic Systems SOC FL9600 FastLine v.lego_T04E00 allows a remote attacker to...
High
Unreviewed
CVE-2023-37608
was published
Jan 3, 2024
The vulnerability allows a remote attacker to authenticate to the web application with high...
High
Unreviewed
CVE-2023-48250
was published
Jan 10, 2024
The vulnerability allows a remote attacker to authenticate to the SSH service with root...
High
Unreviewed
CVE-2023-48251
was published
Jan 10, 2024
It is possible to download the configuration backup without authorization and decrypt included...
High
Unreviewed
CVE-2023-49256
was published
Jan 12, 2024
EverShop at risk to unauthorized access via weak HMAC secret
High
CVE-2023-46943
was published
for
@evershop/evershop
(npm)
Jan 13, 2024
Ubee DDW365 XCNDDW365 and DDW366 XCNDXW3WB devices have predictable default WPA2 PSKs that could...
High
Unreviewed
CVE-2024-23726
was published
Jan 21, 2024
Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause...
High
Unreviewed
CVE-2024-22769
was published
Jan 23, 2024
Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause...
High
Unreviewed
CVE-2024-22770
was published
Jan 23, 2024
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause...
High
Unreviewed
CVE-2024-22772
was published
Jan 23, 2024
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause...
High
Unreviewed
CVE-2024-22771
was published
Jan 23, 2024
ProTip!
Advisories are also available from the
GraphQL API