Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

14 advisories

Loading
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master... High Unreviewed
CVE-2022-32282 was published Aug 23, 2022
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X... High Unreviewed
CVE-2023-39546 was published Nov 17, 2023
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and... Critical Unreviewed
CVE-2023-34132 was published Jul 13, 2023
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass... High Unreviewed
CVE-2023-4299 was published Aug 31, 2023
Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's... High Unreviewed
CVE-2021-45036 was published Nov 28, 2022
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH... High Unreviewed
CVE-2017-7927 was published May 13, 2022
The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to... Moderate Unreviewed
CVE-2025-48925 was published May 28, 2025
E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses... Moderate Unreviewed
CVE-2025-52543 was published Oct 1, 2025
A use of password hash instead of password for authentication vulnerability [CWE-836]... Moderate Unreviewed
CVE-2025-64471 was published Dec 9, 2025
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash... High Unreviewed
CVE-2019-25552 was published Mar 21, 2026
Vikunja: Scoped API tokens with projects.background permission can delete project backgrounds Moderate
CVE-2026-40103 was published for code.vikunja.io/api (Go) Apr 10, 2026
alecclyde Credited to alecclyde
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with... Critical Unreviewed
CVE-2023-23450 was published May 15, 2023
motionEye: Authentication possible via password hash Critical
CVE-2026-46488 was published for motioneye (pip) Jun 22, 2026
FireByteApplications Credited to FireByteApplications, 0xLynk, dimashn04, C4spr0x1A, sighnwaive, MichaIng, Marijn0, and zagrim 0xLynk 0xLynk
dimashn04 dimashn04 C4spr0x1A C4spr0x1A sighnwaive sighnwaive MichaIng MichaIng Marijn0 Marijn0 zagrim zagrim
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the... Critical Unreviewed
CVE-2026-9222 was published Jun 26, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database