Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

22 advisories

Loading
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the... Critical Unreviewed
CVE-2026-69657 was published Sep 4, 2026
In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden... Critical Unreviewed
CVE-2026-5269 was published Jul 15, 2026
An unauthenticated remote attacker can recover a default, hard coded password from a firmware... Critical Unreviewed
CVE-2026-35075 was published Jun 3, 2026
A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) ... Critical Unreviewed
CVE-2026-33784 was published Apr 10, 2026
Harbor allows the use of the default password for web UI login Critical
CVE-2026-4404 was published for github.com/goharbor/harbor (Go) Mar 23, 2026
MLflow Use of Default Password Authentication Bypass Vulnerability Critical
CVE-2026-2635 was published for mlflow (pip) Feb 21, 2026
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a... Critical Unreviewed
CVE-2026-24429 was published Jan 26, 2026
Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any... Critical Unreviewed
CVE-2025-66050 was published Jan 9, 2026
NeuVector admin account has insecure default password Critical
CVE-2025-8077 was published for github.com/neuvector/neuvector (Go) Aug 28, 2025
holyspectral Credited to holyspectral
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password... Critical Unreviewed
CVE-2025-27690 was published Apr 10, 2025
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords. Critical Unreviewed
CVE-2025-22938 was published Mar 31, 2025
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service... Critical Unreviewed
CVE-2025-26701 was published Mar 11, 2025
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through... Critical Unreviewed
CVE-2025-26793 was published Feb 15, 2025
Default Credentail vulnerabilities allows access to an Aspect device using publicly available... Critical Unreviewed
CVE-2024-51555 was published Dec 5, 2024
An unauthenticated attacker with access to the local network of the medical office can use known... Critical Unreviewed
CVE-2024-50588 was published Nov 8, 2024
Remote command execution due to use of default passwords. The following products are affected:... Critical Unreviewed
CVE-2023-45249 was published Jul 24, 2024
An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges... Critical Unreviewed
CVE-2024-30802 was published May 14, 2024
Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through... Critical Unreviewed
CVE-2024-29666 was published Mar 25, 2024
An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain... Critical Unreviewed
CVE-2023-24049 was published Dec 5, 2023
Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default... Critical Unreviewed
CVE-2023-32090 was published Aug 7, 2023
Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and... Critical Unreviewed
CVE-2023-25131 was published Apr 24, 2023
Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or... Critical Unreviewed
CVE-2022-4126 was published Mar 27, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database