Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

41 advisories

Loading
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the... Critical Unreviewed
CVE-2026-69657 was published Sep 4, 2026
A vulnerability was detected in sambitraj Student-Management-System up to... Moderate Unreviewed
CVE-2026-82698 was published Aug 31, 2026
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17... High Unreviewed
CVE-2026-19851 was published Aug 25, 2026
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden... Critical Unreviewed
CVE-2026-5269 was published Jul 15, 2026
Vantage6: Set admin user and password from environment or configuration Moderate
CVE-2026-54445 was published for vantage6 (pip) Jun 5, 2026
An unauthenticated remote attacker can recover a default, hard coded password from a firmware... Critical Unreviewed
CVE-2026-35075 was published Jun 3, 2026
Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try... Moderate Unreviewed
CVE-2026-8672 was published May 26, 2026
A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) ... Critical Unreviewed
CVE-2026-33784 was published Apr 10, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application... Moderate Unreviewed
CVE-2025-14917 was published Mar 25, 2026
Harbor allows the use of the default password for web UI login Critical
CVE-2026-4404 was published for github.com/goharbor/harbor (Go) Mar 23, 2026
A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this... Moderate Unreviewed
CVE-2026-3186 was published Feb 25, 2026
MLflow Use of Default Password Authentication Bypass Vulnerability Critical
CVE-2026-2635 was published for mlflow (pip) Feb 21, 2026
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a... Critical Unreviewed
CVE-2026-24429 was published Jan 26, 2026
Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any... Critical Unreviewed
CVE-2025-66050 was published Jan 9, 2026
Liferay Portal Uses Default Password Moderate
CVE-2025-43799 was published for com.liferay.portal:release.portal.bom (Maven) Sep 15, 2025
A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown... Low Unreviewed
CVE-2025-9589 was published Aug 29, 2025
NeuVector admin account has insecure default password Critical
CVE-2025-8077 was published for github.com/neuvector/neuvector (Go) Aug 28, 2025
holyspectral Credited to holyspectral
A potential security vulnerability has been identified in the Poly Clariti Manager for versions... Moderate Unreviewed
CVE-2025-43021 was published Jul 23, 2025
70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows... High Unreviewed
CVE-2025-2766 was published Jun 6, 2025
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user... Moderate Unreviewed
CVE-2024-13966 was published May 27, 2025
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password... Critical Unreviewed
CVE-2025-27690 was published Apr 10, 2025
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords. Critical Unreviewed
CVE-2025-22938 was published Mar 31, 2025
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an... Moderate Unreviewed
CVE-2025-2921 was published Mar 28, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an... High Unreviewed
CVE-2024-49559 was published Mar 17, 2025
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic.... Moderate Unreviewed
CVE-2025-2347 was published Mar 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database