Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,939
Maven
5,000+
npm
3,677
NuGet
643
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+

333 advisories

Loading
Windows AppContainer Elevation Of Privilege Vulnerability High Unreviewed
CVE-2021-40476 was published May 24, 2022
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2... High Unreviewed
CVE-2021-38460 was published May 24, 2022
The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO... High Unreviewed
CVE-2021-35495 was published May 24, 2022
Information disclosure: The main configuration, including users and their hashed passwords, is... High Unreviewed
CVE-2021-23858 was published May 24, 2022
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to... High Unreviewed
CVE-2021-41297 was published May 24, 2022
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker... High Unreviewed
CVE-2021-40655 was published May 24, 2022
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,... High Unreviewed
CVE-2021-28498 was published May 24, 2022
Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption),... High Unreviewed
CVE-2021-39289 was published May 24, 2022
Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power... High Unreviewed
CVE-2021-35529 was published May 24, 2022
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers... High Unreviewed
CVE-2021-38165 was published May 24, 2022
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2... High Unreviewed
CVE-2021-27491 was published May 24, 2022
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2... High Unreviewed
CVE-2021-27495 was published May 24, 2022
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch,... High Unreviewed
CVE-2020-16839 was published May 24, 2022
Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage... High Unreviewed
CVE-2020-5315 was published May 24, 2022
IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user... High Unreviewed
CVE-2021-20439 was published May 24, 2022
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and... High Unreviewed
CVE-2020-12734 was published May 24, 2022
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all... High Unreviewed
CVE-2021-22780 was published May 24, 2022
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all... High Unreviewed
CVE-2021-22778 was published May 24, 2022
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power... High Unreviewed
CVE-2021-35527 was published May 24, 2022
IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could... High Unreviewed
CVE-2021-20415 was published May 24, 2022
There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful... High Unreviewed
CVE-2021-22370 was published May 24, 2022
There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful... High Unreviewed
CVE-2021-22351 was published May 24, 2022
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost.... High Unreviewed
CVE-2021-35050 was published May 24, 2022
TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie. High Unreviewed
CVE-2021-28857 was published May 24, 2022
D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR... High Unreviewed
CVE-2021-34204 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database