Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,057
Maven
5,000+
npm
3,742
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+

140 advisories

Loading
A flaw was found in how Quay's database is stored in plain-text in mirror-registry on the jinja's... High Unreviewed
CVE-2024-3624 was published Apr 25, 2024
A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is... High Unreviewed
CVE-2024-3622 was published Apr 25, 2024
A flaw was found when using mirror-registry to install Quay. It uses a default database secret... High Unreviewed
CVE-2024-3623 was published Apr 25, 2024
A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on... High Unreviewed
CVE-2024-3625 was published Apr 25, 2024
Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to... Moderate Unreviewed
CVE-2024-28325 was published Apr 26, 2024
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure... Moderate Unreviewed
CVE-2024-28961 was published Apr 29, 2024
Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage... Low Unreviewed
CVE-2024-28971 was published May 8, 2024
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version ... Moderate Unreviewed
CVE-2024-4232 was published May 14, 2024
The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain... Moderate Unreviewed
CVE-2024-4425 was published May 14, 2024
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a... Critical Unreviewed
CVE-2024-36081 was published May 19, 2024
TYPO3 Information Disclosure in User Authentication Moderate
GHSA-wj85-rg5g-v8jm was published for typo3/cms-core (Composer) May 30, 2024
An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary... High Unreviewed
CVE-2024-28736 was published May 31, 2024
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions High Unreviewed
CVE-2022-0555 was published Jun 3, 2024
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by... Moderate Unreviewed
CVE-2024-25052 was published Jun 13, 2024
Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal... High Unreviewed
CVE-2024-27166 was published Jun 14, 2024
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's... Critical Unreviewed
CVE-2024-33375 was published Jun 14, 2024
Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec High
CVE-2024-22032 was published for github.com/rancher/rancher (Go) Jun 17, 2024
BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR... Moderate Unreviewed
CVE-2024-39220 was published Jul 3, 2024
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain... Moderate Unreviewed
CVE-2024-39733 was published Jul 14, 2024
Zowe CLI allows storage of previously entered secure credentials in a plaintext file Moderate
CVE-2024-6833 was published for @zowe/cli (npm) Jul 17, 2024
An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store... Unknown Unreviewed
CVE-2024-40116 was published Jul 26, 2024
DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high... Low Unreviewed
CVE-2024-37135 was published Jul 31, 2024
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an... Moderate Unreviewed
CVE-2024-3082 was published Jul 31, 2024
A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub... Critical Unreviewed
CVE-2024-6118 was published Aug 5, 2024
The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords... High Unreviewed
CVE-2024-36460 was published Aug 12, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database