GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
446 advisories
Filter by severity
Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses...
High
Unreviewed
CVE-2017-13101
was published
May 13, 2022
A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an...
High
Unreviewed
CVE-2017-12350
was published
May 13, 2022
Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key...
High
Unreviewed
CVE-2017-13107
was published
May 13, 2022
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH...
High
Unreviewed
CVE-2017-7927
was published
May 13, 2022
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018,...
High
Unreviewed
CVE-2018-14801
was published
May 13, 2022
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of...
High
Unreviewed
CVE-2018-5560
was published
May 13, 2022
EasyLobby Solo contains default administrative credentials. An attacker could exploit this...
High
Unreviewed
CVE-2018-17492
was published
May 13, 2022
The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded...
High
Unreviewed
CVE-2018-15781
was published
May 13, 2022
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The...
High
Unreviewed
CVE-2018-17896
was published
May 13, 2022
A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an...
High
Unreviewed
CVE-2019-1675
was published
May 13, 2022
A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could...
High
Unreviewed
CVE-2019-1688
was published
May 13, 2022
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains...
High
Unreviewed
CVE-2018-1887
was published
May 13, 2022
Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4...
High
Unreviewed
CVE-2018-8857
was published
May 13, 2022
Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor, all versions, and 24952...
High
Unreviewed
CVE-2018-8870
was published
May 13, 2022
A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS...
High
Unreviewed
CVE-2021-41028
was published
Dec 17, 2021
A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may...
High
Unreviewed
CVE-2021-26108
was published
Dec 9, 2021
An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets...
High
Unreviewed
CVE-2021-43284
was published
Dec 1, 2021
IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a...
High
Unreviewed
CVE-2018-1959
was published
May 13, 2022
A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation...
High
Unreviewed
CVE-2017-12239
was published
May 13, 2022
An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
High
Unreviewed
CVE-2016-10179
was published
May 13, 2022
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...
High
Unreviewed
CVE-2019-7161
was published
May 13, 2022
A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When...
High
Unreviewed
CVE-2018-10898
was published
May 13, 2022
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough...
High
Unreviewed
CVE-2017-14115
was published
May 13, 2022
An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping...
High
Unreviewed
CVE-2019-3497
was published
May 13, 2022
An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller...
High
Unreviewed
CVE-2019-3496
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API