Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

187 advisories

Loading
Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4... High Unreviewed
CVE-2020-10636 was published Feb 25, 2022
A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted... High Unreviewed
CVE-2022-24318 was published Feb 11, 2022
Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols... High Unreviewed
CVE-2021-36337 was published Dec 22, 2021
WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier... High Unreviewed
CVE-2012-6707 was published May 17, 2022
IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected... High Unreviewed
CVE-2017-1375 was published May 17, 2022
Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows... High Unreviewed
CVE-2017-14797 was published May 17, 2022
Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600... High Unreviewed
CVE-2017-8174 was published May 17, 2022
IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows... High Unreviewed
CVE-2017-1271 was published May 17, 2022
An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no... High Unreviewed
CVE-2017-17436 was published May 14, 2022
In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) application 5.0.0 for Android,... High Unreviewed
CVE-2018-5298 was published May 14, 2022
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores... High Unreviewed
CVE-2017-1701 was published May 14, 2022
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected... High Unreviewed
CVE-2017-1255 was published May 14, 2022
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker... High Unreviewed
CVE-2017-1473 was published May 14, 2022
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10... High Unreviewed
CVE-2016-4693 was published May 14, 2022
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption... High Unreviewed
CVE-2017-13699 was published May 14, 2022
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow... High Unreviewed
CVE-2018-1648 was published May 14, 2022
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining... High Unreviewed
CVE-2013-7469 was published May 14, 2022
Play Framework Inadequate Encryption Strength vulnerability High
CVE-2019-17598 was published for com.typesafe.play:play-ws_2.12 (Maven) May 24, 2022
Using remote content in encrypted messages can lead to the disclosure of plaintext. This... High Unreviewed
CVE-2018-5184 was published May 14, 2022
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic... High Unreviewed
CVE-2019-4175 was published May 24, 2022
On specific devices, there is a possible bypass of configuration integrity due to improperly used... High Unreviewed
CVE-2022-20374 was published Aug 12, 2022
System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with... High Unreviewed
CVE-2018-6635 was published May 13, 2022
On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account... High Unreviewed
CVE-2017-14262 was published May 13, 2022
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected... High Unreviewed
CVE-2017-1366 was published May 13, 2022
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow... High Unreviewed
CVE-2017-1695 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database