GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
993 advisories
Filter by severity
Dell BSAFE SSL-J contains an Improper certificate verification vulnerability. A remote attacker...
Moderate
Unreviewed
CVE-2024-29171
was published
Feb 12, 2025
MicroDicom DICOM Viewer version 2024.03
fails to adequately verify the update server's...
Moderate
Unreviewed
CVE-2025-1002
was published
Feb 10, 2025
Improper host validation in the certificate validation component in Devolutions Remote Desktop...
High
Unreviewed
CVE-2025-1193
was published
Feb 10, 2025
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android,...
High
Unreviewed
CVE-2024-11621
was published
Feb 10, 2025
Certificate length was not properly checked when added to a certificate store. In practice only...
High
Unreviewed
CVE-2025-1014
was published
Feb 4, 2025
This vulnerability allows network-adjacent attackers to compromise transport security on affected...
Moderate
Unreviewed
CVE-2024-23970
was published
Jan 31, 2025
IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the...
Moderate
Unreviewed
CVE-2023-38009
was published
Jan 26, 2025
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated...
Critical
Unreviewed
CVE-2024-52330
was published
Jan 23, 2025
ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An...
Critical
Unreviewed
CVE-2024-52329
was published
Jan 23, 2025
BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can...
Low
Unreviewed
CVE-2024-42186
was published
Jan 23, 2025
An issue in the native clients for Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV...
High
Unreviewed
CVE-2025-0500
was published
Jan 15, 2025
An issue in the native clients for Amazon WorkSpaces Clients when running PCoIP protocol may...
High
Unreviewed
CVE-2025-0501
was published
Jan 15, 2025
An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH)...
Moderate
Unreviewed
CVE-2024-54847
was published
Jan 10, 2025
Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow...
High
Unreviewed
CVE-2024-54848
was published
Jan 10, 2025
An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and...
Moderate
Unreviewed
CVE-2024-54846
was published
Jan 10, 2025
An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private...
Moderate
Unreviewed
CVE-2024-54849
was published
Jan 10, 2025
A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for...
Moderate
Unreviewed
CVE-2025-20126
was published
Jan 8, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized...
High
Unreviewed
CVE-2024-40702
was published
Jan 7, 2025
When using Alt-Svc, ALPN did not properly validate certificates when the original server is...
Moderate
Unreviewed
CVE-2025-0239
was published
Jan 7, 2025
TCPDF missing certificate validation
High
CVE-2024-56521
was published
for
tecnickcom/tcpdf
(Composer)
Dec 27, 2024
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a...
Moderate
Unreviewed
CVE-2024-47119
was published
Dec 18, 2024
An improper certificate validation vulnerability was reported in LADM that could allow a network...
High
Unreviewed
CVE-2024-6001
was published
Dec 16, 2024
An improper validation vulnerability was reported in the firmware update mechanism of LADM and...
High
Unreviewed
CVE-2024-4762
was published
Dec 16, 2024
An Improper Certificate Validation vulnerability exists in Tenable Security Center where an...
Low
Unreviewed
CVE-2024-12174
was published
Dec 10, 2024
ProTip!
Advisories are also available from the
GraphQL API