GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
191 advisories
Filter by severity
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by...
Moderate
Unreviewed
CVE-2024-22330
was published
Jun 6, 2025
A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A....
Moderate
Unreviewed
CVE-2025-4534
was published
May 11, 2025
IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1,...
Moderate
Unreviewed
CVE-2025-1993
was published
May 9, 2025
Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which...
Critical
Unreviewed
CVE-2025-28200
was published
May 9, 2025
An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all...
Critical
Unreviewed
CVE-2025-26847
was published
May 8, 2025
IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into...
Low
Unreviewed
CVE-2023-27272
was published
Apr 14, 2025
Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If...
Critical
Unreviewed
CVE-2025-25211
was published
Mar 31, 2025
Spring Security Does Not Enforce Password Length
High
CVE-2025-22228
was published
for
org.springframework.security:spring-security-crypto
(Maven)
Mar 20, 2025
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the...
High
Unreviewed
CVE-2025-25749
was published
Mar 11, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
Critical
Unreviewed
CVE-2025-27663
was published
Mar 5, 2025
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong...
Moderate
Unreviewed
CVE-2024-41778
was published
Mar 1, 2025
A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an...
Moderate
Unreviewed
CVE-2025-1341
was published
Feb 16, 2025
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords...
Moderate
Unreviewed
CVE-2023-37398
was published
Jan 29, 2025
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords...
Moderate
Unreviewed
CVE-2023-35907
was published
Jan 29, 2025
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak...
Moderate
Unreviewed
CVE-2024-42173
was published
Jan 11, 2025
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity...
High
Unreviewed
CVE-2025-22390
was published
Jan 4, 2025
Default Credentail vulnerabilities allows access to an Aspect device using publicly available...
Critical
Unreviewed
CVE-2024-51555
was published
Dec 5, 2024
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of...
Critical
Unreviewed
CVE-2024-48845
was published
Dec 5, 2024
Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password...
Moderate
Unreviewed
CVE-2024-51398
was published
Nov 1, 2024
D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password,...
Moderate
Unreviewed
CVE-2024-48272
was published
Oct 30, 2024
D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for...
High
Unreviewed
CVE-2024-48271
was published
Oct 30, 2024
Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800...
Moderate
Unreviewed
CVE-2024-22068
was published
Oct 10, 2024
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute...
High
Unreviewed
CVE-2024-7293
was published
Oct 9, 2024
The goTenna Pro series uses a weak password for the QR broadcast message. If the QR broadcast...
Moderate
Unreviewed
CVE-2024-47121
was published
Sep 26, 2024
ProTip!
Advisories are also available from the
GraphQL API