Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,166
Maven
5,000+
npm
3,830
NuGet
696
pip
3,507
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+

562 advisories

Loading
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local... Moderate Unreviewed
CVE-2023-22307 was published Apr 18, 2023
An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x... Moderate Unreviewed
CVE-2021-30153 was published Apr 15, 2023
KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier,... Moderate Unreviewed
CVE-2023-25954 was published Apr 13, 2023
Mattermost vulnerable to information disclosure Moderate
CVE-2023-1777 was published for github.com/mattermost/mattermost-server (Go) Mar 31, 2023
Mattermost vulnerable to information disclosure Moderate
CVE-2023-1775 was published for github.com/mattermost/mattermost-server (Go) Mar 31, 2023
Moodle may display roles to users who don't have access to them Moderate
CVE-2023-1402 was published for moodle/moodle (Composer) Mar 23, 2023
Moodle may allow teachers to access the names of users they could not otherwise access Moderate
CVE-2023-28336 was published for moodle/moodle (Composer) Mar 23, 2023
Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins... Moderate Unreviewed
CVE-2023-1562 was published Mar 22, 2023
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-24906 was published Mar 14, 2023
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-24863 was published Mar 14, 2023
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-24866 was published Mar 14, 2023
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-24870 was published Mar 14, 2023
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-23409 was published Mar 14, 2023
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-23394 was published Mar 14, 2023
An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed... Moderate Unreviewed
CVE-2022-46257 was published Mar 7, 2023
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated,... Moderate Unreviewed
CVE-2023-20061 was published Mar 3, 2023
Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor... Moderate Unreviewed
CVE-2023-25536 was published Mar 2, 2023
Dell NetWorker versions 19.5 and earlier contain 'RabbitMQ' version disclosure vulnerability. A... Moderate Unreviewed
CVE-2023-24567 was published Mar 1, 2023
Dell NetWorker versions 19.5 and earlier contain 'Apache Tomcat' version disclosure vulnerability... Moderate Unreviewed
CVE-2023-25544 was published Mar 1, 2023
A vulnerability exists which allows an authenticated attacker to access sensitive information on... Moderate Unreviewed
CVE-2023-22775 was published Mar 1, 2023
An authenticated information disclosure vulnerability exists in the ArubaOS web-based management... Moderate Unreviewed
CVE-2023-22777 was published Mar 1, 2023
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6... Moderate Unreviewed
CVE-2022-32896 was published Feb 27, 2023
The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2.... Moderate Unreviewed
CVE-2023-23501 was published Feb 27, 2023
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12... Moderate Unreviewed
CVE-2023-25192 was published Feb 15, 2023
HTTP.sys Information Disclosure Vulnerability Moderate Unreviewed
CVE-2023-21687 was published Feb 14, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database