Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,076
Erlang
29
GitHub Actions
19
Go
1,895
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
862
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

302 advisories

Loading
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple... High Unreviewed
CVE-2023-41350 was published Nov 3, 2023
A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user... High Unreviewed
CVE-2023-37832 was published Oct 31, 2023
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character High
CVE-2015-20110 was published for generator-jhipster (npm) Oct 31, 2023
Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily... Critical Unreviewed
CVE-2023-5754 was published Oct 26, 2023
The cookie session ID is of insufficient length and can be exploited by brute force, which may... Critical Unreviewed
CVE-2023-42769 was published Oct 26, 2023
UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks... Unknown Unreviewed
CVE-2023-37635 was published Oct 23, 2023
DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to... Critical Unreviewed
CVE-2023-27152 was published Oct 23, 2023
The TETRA TEA1 keystream generator implements a key register initialization function that... High Unreviewed
CVE-2022-24402 was published Oct 19, 2023
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation... High Unreviewed
CVE-2023-44096 was published Oct 11, 2023
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation... High Unreviewed
CVE-2023-44111 was published Oct 11, 2023
Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an... High Unreviewed
CVE-2023-43699 was published Oct 9, 2023
OpenCart v4.0.2.2 is vulnerable to Brute Force Attack. Critical Unreviewed
CVE-2023-40834 was published Sep 12, 2023
IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an... High Unreviewed
CVE-2023-26271 was published Aug 28, 2023
IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to... High Unreviewed
CVE-2022-43904 was published Aug 28, 2023
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware... Critical Unreviewed
CVE-2023-40706 was published Aug 24, 2023
Microsoft Exchange Server Elevation of Privilege Vulnerability Critical Unreviewed
CVE-2023-21709 was published Aug 8, 2023
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local... Low Unreviewed
CVE-2023-3669 was published Aug 3, 2023
An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting... Critical Unreviewed
CVE-2023-3548 was published Jul 25, 2023
Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force... High Unreviewed
CVE-2023-32657 was published Jul 20, 2023
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and... High Unreviewed
CVE-2023-29301 was published Jul 12, 2023
SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized... High Unreviewed
CVE-2023-36917 was published Jul 11, 2023
A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as... Moderate Unreviewed
CVE-2023-3605 was published Jul 10, 2023
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a... High Unreviewed
CVE-2023-35697 was published Jul 10, 2023
The number of login attempts is not limited. This could allow an attacker to perform a brute... Critical Unreviewed
CVE-2023-33868 was published Jul 7, 2023
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists... High Unreviewed
CVE-2022-43377 was published Jul 6, 2023
ProTip! Advisories are also available from the GraphQL API