Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,850
Erlang
36
GitHub Actions
34
Go
2,480
Maven
5,000+
npm
4,097
NuGet
734
pip
3,910
Pub
12
RubyGems
945
Rust
1,014
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,146 advisories

Loading
Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows... High Unreviewed
CVE-2025-8450 was published Aug 19, 2025
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same... High Unreviewed
CVE-2020-24363 was published May 24, 2022
TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated... Critical Unreviewed
CVE-2025-8861 was published Aug 29, 2025
Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were... Critical Unreviewed
CVE-2025-25736 was published Aug 26, 2025
The vulnerability allows unauthenticated users to download a file containing session ID data by... Critical Unreviewed
CVE-2025-30040 was published Aug 27, 2025
Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows... Critical Unreviewed
CVE-2025-30039 was published Aug 27, 2025
The "serverConfig" endpoint, which returns the module configuration including credentials, is... Moderate Unreviewed
CVE-2025-30048 was published Aug 27, 2025
The system exposes several endpoints, typically including "/int/" in their path, that should be... High Unreviewed
CVE-2025-30037 was published Aug 27, 2025
The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat... Critical Unreviewed
CVE-2025-30041 was published Aug 27, 2025
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause... High Unreviewed
CVE-2025-8627 was published Aug 26, 2025
An authentication bypass vulnerability exists which allows an unauthenticated attacker to control... Critical Unreviewed
CVE-2025-53118 was published Aug 26, 2025
An unauthenticated remote attacker can access information about running processes via the SNMP... High Unreviewed
CVE-2025-41654 was published May 26, 2025
WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated... Critical Unreviewed
CVE-2025-9254 was published Aug 22, 2025
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator... Critical Unreviewed
CVE-2025-8995 was published Aug 15, 2025
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro... Critical Unreviewed
CVE-2025-27214 was published Aug 21, 2025
An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's... Moderate Unreviewed
CVE-2025-51543 was published Aug 19, 2025
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution... Critical Unreviewed
CVE-2025-8611 was published Aug 20, 2025
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution... Critical Unreviewed
CVE-2025-8610 was published Aug 20, 2025
An unauthenticated remote attacker can grant access without password protection to the affected... Moderate Unreviewed
CVE-2025-41689 was published Aug 19, 2025
KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control... Critical Unreviewed
CVE-2025-43983 was published Aug 14, 2025
A security issue exists within the 5032 16pt Digital Configurable module’s web server.... High Unreviewed
CVE-2025-7774 was published Aug 14, 2025
Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue... High Unreviewed
CVE-2025-8754 was published Aug 13, 2025
Missing authentication for critical function in Windows StateRepository API allows an authorized... High Unreviewed
CVE-2025-53789 was published Aug 12, 2025
A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their... High Unreviewed
CVE-2025-41686 was published Aug 12, 2025
Missing Authentication for Critical Function vulnerability in ABB Aspect.This issue affects... High Unreviewed
CVE-2025-7679 was published Aug 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database