GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,233
Erlang
31
GitHub Actions
20
Go
1,992
Maven
5,000+
npm
3,709
NuGet
661
pip
3,346
Pub
11
RubyGems
884
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
35 advisories
Filter by severity
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7...
Moderate
Unreviewed
CVE-2021-41696
was published
Dec 10, 2021
Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.
Moderate
Unreviewed
CVE-2022-1236
was published
Apr 6, 2022
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks...
Moderate
Unreviewed
CVE-2018-5389
was published
May 13, 2022
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant...
Moderate
Unreviewed
CVE-2017-1386
was published
May 13, 2022
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is...
Moderate
Unreviewed
CVE-2017-7150
was published
May 13, 2022
** DISPUTED ** Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it...
Moderate
Unreviewed
CVE-2017-7305
was published
May 13, 2022
** DISPUTED ** Riverbed RiOS through 9.6.0 has a weak default password for the secure vault,...
Moderate
Unreviewed
CVE-2017-7306
was published
May 13, 2022
eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in...
Moderate
Unreviewed
CVE-2019-19093
was published
May 24, 2022
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by...
Moderate
Unreviewed
CVE-2020-4574
was published
May 24, 2022
Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify...
Moderate
Unreviewed
CVE-2020-27585
was published
May 24, 2022
Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access...
Moderate
Unreviewed
CVE-2020-27587
was published
May 24, 2022
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external...
Moderate
Unreviewed
CVE-2020-8296
was published
May 24, 2022
A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could...
Moderate
Unreviewed
CVE-2021-1522
was published
May 24, 2022
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because...
Moderate
Unreviewed
CVE-2021-28914
was published
May 24, 2022
IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong...
Moderate
Unreviewed
CVE-2019-4565
was published
May 24, 2022
A flaw was found in Samba, all versions starting samba 4.5.0 until samba 4.9.15, samba 4.10.10,...
Moderate
Unreviewed
CVE-2019-14833
was published
May 24, 2022
An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0...
Moderate
Unreviewed
CVE-2021-36689
was published
Mar 4, 2023
Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1...
Moderate
Unreviewed
CVE-2023-3423
was published
Jun 27, 2023
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password...
Moderate
Unreviewed
CVE-2023-3470
was published
Aug 2, 2023
Weak password requirement vulnerability
in Lamassu Bitcoin ATM Douro machines, in its 7.1...
Moderate
Unreviewed
CVE-2024-0676
was published
Jan 30, 2024
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker...
Moderate
Unreviewed
CVE-2023-38369
was published
Feb 7, 2024
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability...
Moderate
Unreviewed
CVE-2024-1345
was published
Feb 19, 2024
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability...
Moderate
Unreviewed
CVE-2024-1346
was published
Feb 19, 2024
IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have...
Moderate
Unreviewed
CVE-2023-50305
was published
Mar 1, 2024
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0...
Moderate
Unreviewed
CVE-2024-22355
was published
Mar 3, 2024
ProTip!
Advisories are also available from the
GraphQL API