Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,986
Maven
5,000+
npm
3,703
NuGet
661
pip
3,329
Pub
11
RubyGems
884
Rust
843
Swift
36
Unreviewed advisories
All unreviewed
5,000+

251 advisories

Loading
Improper privilege validation in Command Centre Server allows authenticated operators to modify... Moderate Unreviewed
CVE-2023-22428 was published Jul 25, 2023
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An... Moderate Unreviewed
CVE-2023-32482 was published Jul 20, 2023
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller Moderate
CVE-2023-3574 was published for pimcore/customer-management-framework-bundle (Composer) Jul 10, 2023
aqngoc
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of... Moderate Unreviewed
CVE-2023-1910 was published Jul 6, 2023
In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions... Moderate Unreviewed
CVE-2023-32709 was published Jul 6, 2023
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command... Moderate Unreviewed
CVE-2023-22931 was published Jul 6, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint... Moderate Unreviewed
CVE-2023-22938 was published Jul 6, 2023
The affected TBox RTUs allow low privilege users to access software security tokens of higher... Moderate Unreviewed
CVE-2023-36611 was published Jul 3, 2023
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles Moderate
CVE-2023-34460 was published for tauri (Rust) Jun 21, 2023
tillmann-crabnebula chip-crabnebula
An improper authorization check of local device settings in TeamViewer Remote between version 15... Moderate Unreviewed
CVE-2023-0837 was published Jun 14, 2023
The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions... Moderate Unreviewed
CVE-2021-4344 was published Jun 7, 2023
The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing... Moderate Unreviewed
CVE-2020-36729 was published Jun 7, 2023
The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in... Moderate Unreviewed
CVE-2019-25149 was published Jun 7, 2023
A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to... Moderate Unreviewed
CVE-2023-30948 was published Jun 6, 2023
Kyverno resource with a deletionTimestamp may allow policy circumvention Moderate
CVE-2023-34091 was published for github.com/kyverno/kyverno (Go) Jun 5, 2023
bburky
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST ... Moderate Unreviewed
CVE-2023-0583 was published Jun 3, 2023
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST ... Moderate Unreviewed
CVE-2023-0584 was published Jun 3, 2023
On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform... Moderate Unreviewed
CVE-2023-32717 was published Jun 1, 2023
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate... Moderate Unreviewed
CVE-2023-34219 was published May 31, 2023
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1. Moderate Unreviewed
CVE-2023-2950 was published May 28, 2023
Sensitive information disclosure due to improper authorization. The following products are... Moderate Unreviewed
CVE-2023-2782 was published May 18, 2023
Sensitive information disclosure and manipulation due to improper authorization. The following... Moderate Unreviewed
CVE-2022-45450 was published May 18, 2023
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated,... Moderate Unreviewed
CVE-2023-20183 was published May 18, 2023
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated,... Moderate Unreviewed
CVE-2023-20184 was published May 18, 2023
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated,... Moderate Unreviewed
CVE-2023-20182 was published May 18, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database