Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

35 advisories

Loading
Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0. Moderate Unreviewed
CVE-2022-1236 was published Apr 6, 2022
Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify... Moderate Unreviewed
CVE-2020-27585 was published May 24, 2022
Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access... Moderate Unreviewed
CVE-2020-27587 was published May 24, 2022
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external... Moderate Unreviewed
CVE-2020-8296 was published May 24, 2022
A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could... Moderate Unreviewed
CVE-2021-1522 was published May 24, 2022
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because... Moderate Unreviewed
CVE-2021-28914 was published May 24, 2022
IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong... Moderate Unreviewed
CVE-2019-4565 was published May 24, 2022
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7... Moderate Unreviewed
CVE-2021-41696 was published Dec 10, 2021
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant... Moderate Unreviewed
CVE-2017-1386 was published May 13, 2022
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is... Moderate Unreviewed
CVE-2017-7150 was published May 13, 2022
** DISPUTED ** Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it... Moderate Unreviewed
CVE-2017-7305 was published May 13, 2022
** DISPUTED ** Riverbed RiOS through 9.6.0 has a weak default password for the secure vault,... Moderate Unreviewed
CVE-2017-7306 was published May 13, 2022
An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0... Moderate Unreviewed
CVE-2021-36689 was published Mar 4, 2023
eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in... Moderate Unreviewed
CVE-2019-19093 was published May 24, 2022
A flaw was found in Samba, all versions starting samba 4.5.0 until samba 4.9.15, samba 4.10.10,... Moderate Unreviewed
CVE-2019-14833 was published May 24, 2022
Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1... Moderate Unreviewed
CVE-2023-3423 was published Jun 27, 2023
Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1... Moderate Unreviewed
CVE-2024-0676 was published Jan 30, 2024
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker... Moderate Unreviewed
CVE-2023-38369 was published Feb 7, 2024
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by... Moderate Unreviewed
CVE-2020-4574 was published May 24, 2022
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability... Moderate Unreviewed
CVE-2024-1346 was published Feb 19, 2024
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability... Moderate Unreviewed
CVE-2024-1345 was published Feb 19, 2024
IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have... Moderate Unreviewed
CVE-2023-50305 was published Mar 1, 2024
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0... Moderate Unreviewed
CVE-2024-22355 was published Mar 3, 2024
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password... Moderate Unreviewed
CVE-2023-3470 was published Aug 2, 2023
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks... Moderate Unreviewed
CVE-2018-5389 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database