Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

6,768 advisories

Loading
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive... Moderate Unreviewed
CVE-2022-22277 was published Apr 28, 2022
The myCred WordPress plugin before 2.4.3.1 does not have any authorisation in place in its mycred... Moderate Unreviewed
CVE-2022-0287 was published Apr 26, 2022
BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser... Moderate Unreviewed
CVE-2012-5828 was published Apr 23, 2022
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7... Moderate Unreviewed
CVE-2012-2724 was published Apr 23, 2022
Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum... Moderate Unreviewed
CVE-2012-5476 was published Apr 23, 2022
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in... Moderate Unreviewed
CVE-2012-1105 was published Apr 23, 2022
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to... Moderate Unreviewed
CVE-2012-6078 was published Apr 23, 2022
W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote... Moderate Unreviewed
CVE-2012-6079 was published Apr 23, 2022
W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due... Moderate Unreviewed
CVE-2012-6077 was published Apr 23, 2022
Moodle included private user files in course backups Moderate
CVE-2012-1159 was published for moodle/moodle (Composer) Apr 23, 2022
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp Moderate
CVE-2022-24849 was published for DisCatSharp (NuGet) Apr 22, 2022
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled. Moderate Unreviewed
CVE-2011-5282 was published Apr 22, 2022
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor Moderate
CVE-2011-4076 was published for nova (pip) Apr 22, 2022
lilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1. Moderate Unreviewed
CVE-2011-1934 was published Apr 22, 2022
Typo3 Information Disclosure Moderate
CVE-2011-4900 was published for typo3/cms (Composer) Apr 22, 2022
Typo3 Arbitrary Information Disclosure Moderate
CVE-2011-4901 was published for typo3/cms (Composer) Apr 22, 2022
Typo3 Information Disclosure Moderate
CVE-2011-4627 was published for typo3/cms (Composer) Apr 22, 2022
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API Moderate
CVE-2010-3673 was published for typo3/cms-core (Composer) Apr 21, 2022
TYPO3 is vulnerable to Information Disclosure on the backend Moderate
CVE-2010-3664 was published for typo3/cms-backend (Composer) Apr 21, 2022
The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users... Moderate Unreviewed
CVE-2022-1186 was published Apr 20, 2022
Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5... Moderate Unreviewed
CVE-2022-27863 was published Apr 20, 2022
Metrics exposure in Wildfly Moderate
CVE-2021-3503 was published for org.wildfly:wildfly-metrics (Maven) Apr 19, 2022
An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in... Moderate Unreviewed
CVE-2022-25166 was published Apr 15, 2022
IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain... Moderate Unreviewed
CVE-2022-22391 was published Apr 15, 2022
Improper Privilege Management in Mattermost Moderate
CVE-2022-1332 was published for github.com/mattermost/mattermost-server/v5 (Go) Apr 14, 2022
kurt-r2c
Credited to kurt-r2c
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database