GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
61
GitHub Actions
50
Go
3,821
Maven
5,000+
npm
5,000+
NuGet
939
pip
5,000+
Pub
13
RubyGems
1,059
Rust
1,357
Swift
54
Unreviewed advisories
All unreviewed
5,000+
34 advisories
Filter by severity
A Use of Default Password vulnerability in the Juniper Networks
Support Insights (JSI)
...
Critical
Unreviewed
CVE-2026-33784
was published
Apr 10, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application...
Moderate
Unreviewed
CVE-2025-14917
was published
Mar 25, 2026
Harbor allows the use of the default password for web UI login
Critical
CVE-2026-4404
was published
for
github.com/goharbor/harbor
(Go)
Mar 23, 2026
A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this...
Moderate
Unreviewed
CVE-2026-3186
was published
Feb 25, 2026
MLflow Use of Default Password Authentication Bypass Vulnerability
Critical
CVE-2026-2635
was published
for
mlflow
(pip)
Feb 21, 2026
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a...
Critical
Unreviewed
CVE-2026-24429
was published
Jan 26, 2026
Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any...
Critical
Unreviewed
CVE-2025-66050
was published
Jan 9, 2026
Liferay Portal Uses Default Password
Moderate
CVE-2025-43799
was published
for
com.liferay.portal:release.portal.bom
(Maven)
Sep 15, 2025
A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown...
Low
Unreviewed
CVE-2025-9589
was published
Aug 29, 2025
NeuVector admin account has insecure default password
Critical
CVE-2025-8077
was published
for
github.com/neuvector/neuvector
(Go)
Aug 28, 2025
A potential security vulnerability has been identified in the Poly Clariti Manager for versions...
Moderate
Unreviewed
CVE-2025-43021
was published
Jul 23, 2025
70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows...
High
Unreviewed
CVE-2025-2766
was published
Jun 6, 2025
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user...
Moderate
Unreviewed
CVE-2024-13966
was published
May 27, 2025
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password...
Critical
Unreviewed
CVE-2025-27690
was published
Apr 10, 2025
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
Critical
Unreviewed
CVE-2025-22938
was published
Mar 31, 2025
A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an...
Moderate
Unreviewed
CVE-2025-2921
was published
Mar 28, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...
High
Unreviewed
CVE-2024-49559
was published
Mar 17, 2025
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic....
Moderate
Unreviewed
CVE-2025-2347
was published
Mar 16, 2025
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service...
Critical
Unreviewed
CVE-2025-26701
was published
Mar 11, 2025
A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as...
Low
Unreviewed
CVE-2025-1878
was published
Mar 3, 2025
The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through...
Critical
Unreviewed
CVE-2025-26793
was published
Feb 15, 2025
Default Credentail vulnerabilities allows access to an Aspect device using publicly available...
Critical
Unreviewed
CVE-2024-51555
was published
Dec 5, 2024
An unauthenticated attacker with access to the local network of the
medical office can use known...
Critical
Unreviewed
CVE-2024-50588
was published
Nov 8, 2024
Snipe-IT remote code execution
High
CVE-2024-48987
was published
for
snipe/snipe-it
(Composer)
Oct 11, 2024
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file...
Moderate
Unreviewed
CVE-2024-36440
was published
Aug 22, 2024
ProTip!
Advisories are also available from the
GraphQL API