Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+

193 advisories

Loading
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel Critical Unreviewed
CVE-2024-38437 was published Jul 21, 2024
The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication... High Unreviewed
CVE-2024-41173 was published Aug 27, 2024
Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects... High Unreviewed
CVE-2024-7125 was published Aug 27, 2024
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management... Critical Unreviewed
CVE-2024-2055 was published Mar 5, 2024
Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass... High Unreviewed
CVE-2024-7007 was published Jul 25, 2024
IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive... Moderate Unreviewed
CVE-2024-35151 was published Aug 22, 2024
A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00... High Unreviewed
CVE-2024-35124 was published Aug 13, 2024
The N-central server is vulnerable to an authentication bypass of the user interface. This... Critical Unreviewed
CVE-2024-28200 was published Jul 1, 2024
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for... High Unreviewed
CVE-2024-35214 was published Aug 20, 2024
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway... Critical Unreviewed
CVE-2024-2013 was published Jun 11, 2024
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable... High Unreviewed
CVE-2024-7628 was published Aug 15, 2024
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in... Critical Unreviewed
CVE-2024-7503 was published Aug 12, 2024
Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom... Critical Unreviewed
CVE-2024-6684 was published Aug 12, 2024
The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for... Critical Unreviewed
CVE-2024-7350 was published Aug 8, 2024
Keycloak secondary factor bypass in step-up authentication Moderate
CVE-2023-3597 was published for org.keycloak:keycloak-services (Maven) Apr 17, 2024
sschu jbman
IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive... High Unreviewed
CVE-2024-31916 was published Jun 27, 2024
An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the... High Unreviewed
CVE-2024-26566 was published Mar 7, 2024
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote... Critical Unreviewed
CVE-2020-10148 was published May 24, 2022
TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login... High Unreviewed
CVE-2024-31814 was published Apr 8, 2024
An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus... High Unreviewed
CVE-2022-47578 was published Dec 20, 2022
The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in... High Unreviewed
CVE-2024-7027 was published Jul 24, 2024
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in... High Unreviewed
CVE-2024-6635 was published Jul 20, 2024
Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics... Moderate Unreviewed
CVE-2024-5620 was published Jul 18, 2024
** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-895 FW102b07... Critical Unreviewed
CVE-2023-36091 was published Jul 31, 2023
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise... Critical Unreviewed
CVE-2024-29849 was published May 23, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database