GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,332
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
7,940 advisories
Filter by severity
In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability...
Critical
Unreviewed
CVE-2024-3502
was published
Nov 14, 2024
In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability...
Critical
Unreviewed
CVE-2024-3501
was published
Nov 14, 2024
VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
High
Unreviewed
CVE-2024-47915
was published
Nov 14, 2024
Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier...
Unknown
Unreviewed
CVE-2024-10971
was published
Nov 12, 2024
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...
Moderate
Unreviewed
CVE-2024-46894
was published
Nov 12, 2024
Mattermost versions 10.0.x <= 10.0.0 and 9.11.x <= 9.11.2 fail to properly query ElasticSearch...
Moderate
Unreviewed
CVE-2024-52032
was published
Nov 9, 2024
The Magical Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information...
Moderate
Unreviewed
CVE-2024-10352
was published
Nov 9, 2024
The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information...
Moderate
Unreviewed
CVE-2024-8756
was published
Nov 9, 2024
The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the...
Critical
Unreviewed
CVE-2024-10285
was published
Nov 9, 2024
Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information...
Low
Unreviewed
CVE-2024-48011
was published
Nov 8, 2024
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this...
Moderate
Unreviewed
CVE-2024-10965
was published
Nov 7, 2024
A vulnerability in the logging component of Cisco Unified Communications Manager IM &...
Moderate
Unreviewed
CVE-2024-20457
was published
Nov 6, 2024
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800...
Moderate
Unreviewed
CVE-2024-20445
was published
Nov 6, 2024
A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated...
Moderate
Unreviewed
CVE-2024-20507
was published
Nov 6, 2024
A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the...
High
Unreviewed
CVE-2024-6861
was published
Nov 6, 2024
A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325...
Moderate
Unreviewed
CVE-2024-10916
was published
Nov 6, 2024
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic...
Moderate
Unreviewed
CVE-2024-10084
was published
Nov 6, 2024
Under certain conditions, through a request directed to the Waybox Enel X web management...
Moderate
Unreviewed
CVE-2023-29116
was published
Nov 5, 2024
System logs could be accessed through web management application due to a lack of access control....
Moderate
Unreviewed
CVE-2023-29114
was published
Nov 5, 2024
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive...
Moderate
Unreviewed
CVE-2024-10329
was published
Nov 5, 2024
The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-10319
was published
Nov 5, 2024
A vulnerability was found in Foreman's loader macros introduced with report templates. These...
Moderate
Unreviewed
CVE-2024-8553
was published
Oct 31, 2024
The LevelOne WBR-6012 router contains a vulnerability within its web application that allows...
Moderate
Unreviewed
CVE-2024-33626
was published
Oct 30, 2024
The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application,...
Moderate
Unreviewed
CVE-2024-33603
was published
Oct 30, 2024
mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack...
High
Unreviewed
CVE-2024-7010
was published
Oct 29, 2024
ProTip!
Advisories are also available from the
GraphQL API