GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,741
NuGet
668
pip
3,422
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
537 advisories
Filter by severity
Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
Critical
Unreviewed
CVE-2021-36224
was published
Feb 6, 2023
TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which...
Critical
Unreviewed
CVE-2023-24155
was published
Feb 3, 2023
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is...
Critical
Unreviewed
CVE-2023-24149
was published
Feb 3, 2023
A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to...
Critical
Unreviewed
CVE-2022-48113
was published
Feb 3, 2023
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3...
Critical
Unreviewed
CVE-2023-24022
was published
Jan 26, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34442
was published
Jan 18, 2023
EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented...
Critical
Unreviewed
CVE-2022-39185
was published
Jan 12, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34441
was published
Jan 11, 2023
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...
Critical
Unreviewed
CVE-2022-34440
was published
Jan 11, 2023
In the DES implementation, the affected product versions use a default key for encryption....
Critical
Unreviewed
CVE-2021-40342
was published
Jan 6, 2023
The affected products store both public and private key that are used to sign and protect Custom...
Critical
Unreviewed
CVE-2022-3927
was published
Jan 6, 2023
Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An...
Critical
Unreviewed
CVE-2022-47618
was published
Jan 3, 2023
A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected...
Critical
Unreviewed
CVE-2014-125030
was published
Jan 1, 2023
Mutiny 7.2.0-10788 suffers from Hardcoded root password.
Critical
Unreviewed
CVE-2022-37832
was published
Dec 17, 2022
Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an...
Critical
Unreviewed
CVE-2022-41653
was published
Dec 14, 2022
MegaRAC Default Credentials Vulnerability
Critical
Unreviewed
CVE-2022-40242
was published
Dec 6, 2022
AMI MegaRAC Redfish Arbitrary Code Execution
Critical
Unreviewed
CVE-2022-40259
was published
Dec 6, 2022
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server....
Critical
Unreviewed
CVE-2022-38337
was published
Dec 6, 2022
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows...
Critical
Unreviewed
CVE-2022-44096
was published
Nov 30, 2022
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows...
Critical
Unreviewed
CVE-2022-44097
was published
Nov 30, 2022
A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the...
Critical
Unreviewed
CVE-2022-41157
was published
Nov 25, 2022
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...
Critical
Unreviewed
CVE-2022-29830
was published
Nov 25, 2022
A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote...
Critical
Unreviewed
CVE-2022-40602
was published
Nov 22, 2022
A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc....
Critical
Unreviewed
CVE-2022-29889
was published
Oct 25, 2022
An authentication bypass vulnerability exists in the web interface /action/factory* functionality...
Critical
Unreviewed
CVE-2022-29477
was published
Oct 25, 2022
ProTip!
Advisories are also available from the
GraphQL API