GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,153
Maven
5,000+
npm
3,818
NuGet
693
pip
3,492
Pub
12
RubyGems
902
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+
109 advisories
Filter by severity
The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state...
High
Unreviewed
CVE-2023-50123
was published
Jan 11, 2024
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
High
CVE-2023-49810
was published
for
wwbn/avideo
(Composer)
Jan 10, 2024
Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an...
High
Unreviewed
CVE-2023-6912
was published
Dec 20, 2023
By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI...
High
Unreviewed
CVE-2023-50444
was published
Dec 13, 2023
Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple...
High
Unreviewed
CVE-2023-41350
was published
Nov 3, 2023
A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user...
High
Unreviewed
CVE-2023-37832
was published
Oct 31, 2023
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character
High
CVE-2015-20110
was published
for
generator-jhipster
(npm)
Oct 31, 2023
The TETRA TEA1 keystream generator implements a key register initialization function that...
High
Unreviewed
CVE-2022-24402
was published
Oct 19, 2023
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation...
High
Unreviewed
CVE-2023-44111
was published
Oct 11, 2023
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation...
High
Unreviewed
CVE-2023-44096
was published
Oct 11, 2023
Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU
allows an...
High
Unreviewed
CVE-2023-43699
was published
Oct 9, 2023
IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an...
High
Unreviewed
CVE-2023-26271
was published
Aug 28, 2023
IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to...
High
Unreviewed
CVE-2022-43904
was published
Aug 28, 2023
Weintek Weincloud v0.13.6
could allow an attacker to efficiently develop a brute force...
High
Unreviewed
CVE-2023-32657
was published
Jul 20, 2023
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and...
High
Unreviewed
CVE-2023-29301
was published
Jul 12, 2023
SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized...
High
Unreviewed
CVE-2023-36917
was published
Jul 11, 2023
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4
could allow a...
High
Unreviewed
CVE-2023-35697
was published
Jul 10, 2023
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists...
High
Unreviewed
CVE-2022-43377
was published
Jul 6, 2023
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...
High
Unreviewed
CVE-2022-43947
was published
Jul 6, 2023
IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting...
High
Unreviewed
CVE-2022-32757
was published
Jun 15, 2023
An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0...
High
Unreviewed
CVE-2022-42478
was published
Jun 13, 2023
An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute...
High
Unreviewed
CVE-2023-23755
was published
May 30, 2023
The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks.
High
Unreviewed
CVE-2023-26756
was published
Apr 14, 2023
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
High
CVE-2023-29005
was published
for
Flask-AppBuilder
(pip)
Apr 10, 2023
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
High
CVE-2023-26476
was published
for
org.xwiki.platform:xwiki-platform-livetable-ui
(Maven)
Mar 3, 2023
ProTip!
Advisories are also available from the
GraphQL API