Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,030
Maven
5,000+
npm
3,732
NuGet
662
pip
3,409
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+

746 advisories

Loading
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup &... Low Unreviewed
CVE-2024-31254 was published Apr 10, 2024
Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects... Moderate Unreviewed
CVE-2024-31245 was published Apr 10, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially... Moderate Unreviewed
CVE-2024-25030 was published Apr 3, 2024
System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for... Moderate Unreviewed
CVE-2024-3165 was published Apr 2, 2024
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid... Moderate Unreviewed
CVE-2024-30523 was published Mar 31, 2024
Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG PrestaShop... Moderate Unreviewed
CVE-2024-30511 was published Mar 29, 2024
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid... Moderate Unreviewed
CVE-2024-30514 was published Mar 29, 2024
Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive... High Unreviewed
CVE-2024-25959 was published Mar 28, 2024
Insertion of Sensitive Information into Log File vulnerability in PeepSo Community by PeepSo.This... Moderate Unreviewed
CVE-2024-25923 was published Mar 28, 2024
Insertion of Sensitive Information into Log File vulnerability in Seraphinite Solutions... Moderate Unreviewed
CVE-2024-22138 was published Mar 28, 2024
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes... High Unreviewed
CVE-2024-29945 was published Mar 27, 2024
Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google... High Unreviewed
CVE-2023-44989 was published Mar 26, 2024
Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive... Moderate Unreviewed
CVE-2024-25957 was published Mar 26, 2024
Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage... Critical Unreviewed
CVE-2022-36407 was published Mar 25, 2024
IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that... Moderate Unreviewed
CVE-2024-22352 was published Mar 21, 2024
Insecure Variable Substitution in Vela High
CVE-2024-28236 was published for github.com/go-vela/worker (Go) Mar 14, 2024
gdiepen
Insertion of sensitive information into log file for some Intel(R) Local Manageability Service... Low Unreviewed
CVE-2023-27502 was published Mar 14, 2024
Potential log injection in reset user endpoint in CKAN Moderate
CVE-2024-27097 was published for ckan (pip) Mar 13, 2024
ZuhairORZaki
IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive... Moderate Unreviewed
CVE-2023-43043 was published Mar 13, 2024
Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component... Moderate Unreviewed
CVE-2023-6814 was published Mar 12, 2024
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in... Low Unreviewed
CVE-2024-23242 was published Mar 8, 2024
IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an... Moderate Unreviewed
CVE-2023-46171 was published Mar 7, 2024
Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged Moderate
CVE-2023-50740 was published for org.apache.linkis:linkis (Maven) Mar 6, 2024
oscerd
An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information... High Unreviewed
CVE-2024-23758 was published Feb 21, 2024
IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10... Moderate Unreviewed
CVE-2024-22335 was published Feb 17, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database