Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,739
Maven
5,000+
npm
4,338
NuGet
765
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+

216 advisories

Loading
File Browser vulnerable to insecure password handling Moderate
CVE-2025-52997 was published for github.com/filebrowser/filebrowser (Go) Jun 30, 2025
mtausig hacdias
Credited to mtausig and hacdias
Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account... Moderate Unreviewed
CVE-2019-19145 was published Aug 1, 2025
A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This... Moderate Unreviewed
CVE-2025-8182 was published Jul 26, 2025
Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a... Critical Unreviewed
CVE-2025-28389 was published Jun 13, 2025
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by... Moderate Unreviewed
CVE-2024-22330 was published Jun 6, 2025
Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which... Critical Unreviewed
CVE-2025-28200 was published May 9, 2025
A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A.... Moderate Unreviewed
CVE-2025-4534 was published May 11, 2025
IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1,... Moderate Unreviewed
CVE-2025-1993 was published May 9, 2025
An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all... Critical Unreviewed
CVE-2025-26847 was published May 8, 2025
Spring Security Does Not Enforce Password Length High
CVE-2025-22228 was published for org.springframework.security:spring-security-crypto (Maven) Mar 20, 2025
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting,... Critical Unreviewed
CVE-2022-45482 was published Dec 2, 2022
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use... Critical Unreviewed
CVE-2017-3186 was published May 13, 2022
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting... Critical Unreviewed
CVE-2017-12861 was published May 13, 2022
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix... Critical Unreviewed
CVE-2017-7903 was published May 17, 2022
IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into... Low Unreviewed
CVE-2023-27272 was published Apr 14, 2025
RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived... High Unreviewed
CVE-2012-2441 was published May 13, 2022
MLflow has Weak Password Requirements Low
CVE-2025-1474 was published for mlflow (pip) Mar 20, 2025
Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If... Critical Unreviewed
CVE-2025-25211 was published Mar 31, 2025
HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network... Moderate Unreviewed
CVE-2024-21865 was published Mar 25, 2024
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the... High Unreviewed
CVE-2025-25749 was published Mar 11, 2025
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability... Moderate Unreviewed
CVE-2024-1345 was published Feb 19, 2024
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923... Critical Unreviewed
CVE-2025-27663 was published Mar 5, 2025
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong... Moderate Unreviewed
CVE-2024-41778 was published Mar 1, 2025
A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an... Moderate Unreviewed
CVE-2025-1341 was published Feb 16, 2025
Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800... Moderate Unreviewed
CVE-2024-22068 was published Oct 10, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database