Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

243 advisories

Loading
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric... Moderate Unreviewed
CVE-2022-29832 was published Nov 25, 2022
"IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version information... Moderate Unreviewed
CVE-2022-38710 was published Nov 4, 2022
"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20... Moderate Unreviewed
CVE-2022-35279 was published Nov 4, 2022
"IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in... Moderate Unreviewed
CVE-2021-39077 was published Nov 4, 2022
"IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which... Moderate Unreviewed
CVE-2022-34339 was published Nov 4, 2022
A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... Moderate Unreviewed
CVE-2022-2805 was published Oct 19, 2022
An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of... Moderate Unreviewed
CVE-2022-3540 was published Oct 17, 2022
Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An... Moderate Unreviewed
CVE-2022-33918 was published Oct 13, 2022
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before... Moderate Unreviewed
CVE-2015-1931 was published Sep 30, 2022
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication. Moderate Unreviewed
CVE-2020-15325 was published Sep 30, 2022
The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only... Moderate Unreviewed
CVE-2022-26390 was published Sep 10, 2022
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which... Moderate Unreviewed
CVE-2021-39009 was published Sep 2, 2022
A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs... Moderate Unreviewed
CVE-2021-3585 was published Aug 27, 2022
The affected device stores sensitive information in cleartext, which may allow an authenticated... Moderate Unreviewed
CVE-2022-2569 was published Aug 25, 2022
Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A... Moderate Unreviewed
CVE-2022-29090 was published Aug 11, 2022
HCL Launch may store certain data for recurring activities in a plain text format. Moderate Unreviewed
CVE-2022-27549 was published Jul 7, 2022
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in... Moderate Unreviewed
CVE-2022-22366 was published Jul 2, 2022
IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive... Moderate Unreviewed
CVE-2022-22367 was published Jul 2, 2022
IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text... Moderate Unreviewed
CVE-2022-22478 was published Jul 1, 2022
MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file. Moderate Unreviewed
CVE-2021-41639 was published Jun 25, 2022
A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as... Moderate Unreviewed
CVE-2017-20040 was published Jun 12, 2022
** DISPUTED ** FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH... Moderate Unreviewed
CVE-2022-29620 was published Jun 8, 2022
E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND... Moderate Unreviewed
CVE-2022-23236 was published Jun 3, 2022
UltraLog Express device management software stores user’s information in cleartext. Any user can... Moderate Unreviewed
CVE-2020-3921 was published May 24, 2022
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor... Moderate Unreviewed
CVE-2020-9045 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API