GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
83 advisories
Filter by severity
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK...
High
Unreviewed
CVE-2023-5981
was published
Nov 28, 2023
In InputMethod, there is a possible way to determine whether an app is installed, without query...
High
Unreviewed
CVE-2023-21337
was published
Oct 30, 2023
In Slice, there is a possible disclosure of installed applications due to side channel...
High
Unreviewed
CVE-2023-21298
was published
Oct 30, 2023
In Package Installer, there is a possible way to determine whether an app is installed, without...
High
Unreviewed
CVE-2023-21324
was published
Oct 30, 2023
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during...
High
Unreviewed
CVE-2023-36127
was published
Oct 11, 2023
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated...
High
Unreviewed
CVE-2023-25529
was published
Sep 20, 2023
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a...
High
Unreviewed
CVE-2023-33850
was published
Aug 22, 2023
The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login...
High
Unreviewed
CVE-2023-3604
was published
Aug 21, 2023
A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping...
High
Unreviewed
CVE-2023-3640
was published
Jul 24, 2023
TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem...
High
Unreviewed
CVE-2023-34669
was published
Jul 17, 2023
The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in...
High
Unreviewed
CVE-2023-28770
was published
Jul 6, 2023
An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the...
High
Unreviewed
CVE-2023-34878
was published
Jun 14, 2023
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to...
High
Unreviewed
CVE-2023-1707
was published
Jun 13, 2023
IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based...
High
Unreviewed
CVE-2023-32342
was published
May 31, 2023
Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.
High
Unreviewed
CVE-2023-33741
was published
May 31, 2023
The multimedia video module has a vulnerability in data processing.Successful exploitation of...
High
Unreviewed
CVE-2023-1696
was published
May 20, 2023
IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential...
High
Unreviewed
CVE-2023-27870
was published
May 11, 2023
IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic
High
CVE-2023-26557
was published
for
github.com/binance-chain/tss-lib
(Go)
Apr 21, 2023
SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded...
High
Unreviewed
CVE-2023-29850
was published
Apr 14, 2023
An issue was discovered in MCUBO ICT through 10.12.4 (aka 6.0.2). An Observable Response...
High
Unreviewed
CVE-2023-26071
was published
Mar 28, 2023
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....
High
Unreviewed
CVE-2023-0361
was published
Feb 15, 2023
Observable timing discrepancy in JOpenId
High
CVE-2010-10006
was published
for
org.expressme:JOpenId
(Maven)
Jan 18, 2023
Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator
High
CVE-2022-3143
was published
for
org.wildfly.security:wildfly-elytron
(Maven)
Jan 13, 2023
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for...
High
Unreviewed
CVE-2022-4499
was published
Jan 11, 2023
** DISPUTED ** The AES instructions on the ARMv8 platform do not have an algorithm that is ...
High
Unreviewed
CVE-2022-48251
was published
Jan 10, 2023
ProTip!
Advisories are also available from the
GraphQL API