GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,517
Maven
5,000+
npm
4,154
NuGet
736
pip
3,953
Pub
12
RubyGems
946
Rust
1,026
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,327 advisories
Filter by severity
ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX...
High
Unreviewed
CVE-2022-4780
was published
Dec 29, 2022
A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected...
Critical
Unreviewed
CVE-2014-125030
was published
Jan 1, 2023
Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An...
Critical
Unreviewed
CVE-2022-47618
was published
Jan 3, 2023
In the DES implementation, the affected product versions use a default key for encryption....
Critical
Unreviewed
CVE-2021-40342
was published
Jan 6, 2023
The affected products store both public and private key that are used to sign and protect Custom...
Critical
Unreviewed
CVE-2022-3927
was published
Jan 6, 2023
Hardcoded credential is found in affected products' message queue. An attacker that manages to...
Moderate
Unreviewed
CVE-2022-3928
was published
Jan 6, 2023
KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys
Critical
CVE-2023-22463
was published
for
github.com/KubeOperator/kubepi
(Go)
Jan 6, 2023
Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism....
High
Unreviewed
CVE-2022-36925
was published
Jan 9, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34440
was published
Jan 11, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34441
was published
Jan 11, 2023
EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented...
Critical
Unreviewed
CVE-2022-39185
was published
Jan 12, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34442
was published
Jan 18, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password...
High
Unreviewed
CVE-2022-34462
was published
Jan 18, 2023
A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an...
High
Unreviewed
CVE-2023-20038
was published
Jan 20, 2023
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3...
Critical
Unreviewed
CVE-2023-24022
was published
Jan 26, 2023
An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to...
Moderate
Unreviewed
CVE-2022-48067
was published
Jan 27, 2023
There is an improper authentication vulnerability in Pandora FMS v764. The application verifies...
Low
Unreviewed
CVE-2022-43978
was published
Jan 28, 2023
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege...
High
Unreviewed
CVE-2022-42973
was published
Feb 1, 2023
Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application...
High
Unreviewed
CVE-2023-23132
was published
Feb 1, 2023
A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to...
Critical
Unreviewed
CVE-2022-48113
was published
Feb 3, 2023
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is...
Critical
Unreviewed
CVE-2023-24149
was published
Feb 3, 2023
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet...
High
Unreviewed
CVE-2023-24147
was published
Feb 3, 2023
TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which...
Critical
Unreviewed
CVE-2023-24155
was published
Feb 3, 2023
Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
Critical
Unreviewed
CVE-2021-36224
was published
Feb 6, 2023
Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows...
Moderate
Unreviewed
CVE-2023-21426
was published
Feb 9, 2023
ProTip!
Advisories are also available from the
GraphQL API