GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,040
Maven
5,000+
npm
3,732
NuGet
662
pip
3,413
Pub
12
RubyGems
891
Rust
866
Swift
36
Unreviewed advisories
All unreviewed
5,000+
321 advisories
Filter by severity
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of...
Moderate
Unreviewed
CVE-2024-38488
was published
Dec 13, 2024
An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication...
Critical
Unreviewed
CVE-2024-46442
was published
Dec 10, 2024
A vulnerability exists in NSD570 login panel that does not restrict excessive authentication...
Moderate
Unreviewed
CVE-2024-9928
was published
Nov 26, 2024
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of...
High
Unreviewed
CVE-2024-49597
was published
Nov 26, 2024
Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows...
High
Unreviewed
CVE-2024-5716
was published
Nov 22, 2024
phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block...
Moderate
Unreviewed
CVE-2024-0787
was published
Nov 15, 2024
There is no limit on the number of failed login attempts permitted with the Clinician Password or...
Critical
Unreviewed
CVE-2024-9832
was published
Nov 14, 2024
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server...
Moderate
Unreviewed
CVE-2024-51720
was published
Nov 12, 2024
A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic....
Low
Unreviewed
CVE-2024-11126
was published
Nov 12, 2024
SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality...
Moderate
Unreviewed
CVE-2024-47592
was published
Nov 12, 2024
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed...
Critical
Unreviewed
CVE-2024-51558
was published
Nov 4, 2024
A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS...
Critical
Unreviewed
CVE-2024-48143
was published
Oct 24, 2024
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential...
High
Unreviewed
CVE-2024-7292
was published
Oct 9, 2024
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect...
Critical
Unreviewed
CVE-2024-47656
was published
Oct 4, 2024
A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code...
Critical
Unreviewed
CVE-2024-41276
was published
Oct 1, 2024
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive...
Critical
Unreviewed
CVE-2024-47088
was published
Sep 19, 2024
An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x...
Critical
Unreviewed
CVE-2024-45523
was published
Sep 18, 2024
Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information...
Moderate
Unreviewed
CVE-2024-5682
was published
Sep 18, 2024
Keycloak Services has a potential bypass of brute force protection
Moderate
CVE-2024-4629
was published
for
org.keycloak:keycloak-services
(Maven)
Sep 17, 2024
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for...
Critical
Unreviewed
CVE-2024-45790
was published
Sep 11, 2024
An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0...
High
Unreviewed
CVE-2024-45327
was published
Sep 11, 2024
An improper restriction of excessive authentication attempts vulnerability has been reported to...
Low
Unreviewed
CVE-2024-32771
was published
Sep 6, 2024
RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive...
Moderate
Unreviewed
CVE-2024-45589
was published
Sep 5, 2024
Windmill HTTP Request users.rs excessive authentication in github.com/windmill-labs/windmill
Moderate
CVE-2024-8462
was published
for
github.com/windmill-labs/windmill
(Go)
Sep 5, 2024
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout...
High
Unreviewed
CVE-2021-22530
was published
Aug 28, 2024
ProTip!
Advisories are also available from the
GraphQL API