GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,476
Erlang
33
GitHub Actions
24
Go
2,207
Maven
5,000+
npm
3,858
NuGet
696
pip
3,639
Pub
12
RubyGems
913
Rust
918
Swift
38
Unreviewed advisories
All unreviewed
5,000+
89 advisories
Filter by severity
A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this...
Moderate
Unreviewed
CVE-2025-2556
was published
Mar 20, 2025
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials...
Critical
Unreviewed
CVE-2025-30115
was published
Mar 18, 2025
On IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be...
High
Unreviewed
CVE-2025-30106
was published
Mar 18, 2025
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, contain(s) a Use of Hard-coded Password...
High
Unreviewed
CVE-2024-48831
was published
Mar 17, 2025
A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to...
High
Unreviewed
CVE-2025-2343
was published
Mar 16, 2025
A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on...
Moderate
Unreviewed
CVE-2025-2342
was published
Mar 16, 2025
A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified...
Moderate
Unreviewed
CVE-2025-2322
was published
Mar 15, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...
Critical
Unreviewed
CVE-2025-27638
was published
Mar 5, 2025
A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic....
Low
Unreviewed
CVE-2025-1879
was published
Mar 3, 2025
TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc...
High
Unreviewed
CVE-2025-25428
was published
Feb 28, 2025
A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal...
Critical
Unreviewed
CVE-2025-1100
was published
Feb 12, 2025
A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI...
Moderate
Unreviewed
CVE-2022-26388
was published
Feb 7, 2025
A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and...
Moderate
Unreviewed
CVE-2024-11630
was published
Nov 23, 2024
A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100,...
Critical
Unreviewed
CVE-2024-20412
was published
Oct 23, 2024
FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114...
Critical
Unreviewed
CVE-2024-25825
was published
Oct 9, 2024
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several...
High
Unreviewed
CVE-2024-46328
was published
Sep 26, 2024
The web application for ProGauge MAGLINK LX4 CONSOLE contains an
administrative-level user...
Critical
Unreviewed
CVE-2024-43423
was published
Sep 25, 2024
runofast Indoor Security Camera for Baby Monitor has a default password of password for the root...
Moderate
Unreviewed
CVE-2024-46959
was published
Sep 18, 2024
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
Critical
Unreviewed
CVE-2023-37231
was published
Sep 10, 2024
A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220....
Critical
Unreviewed
CVE-2024-8580
was published
Sep 8, 2024
Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an...
High
Unreviewed
CVE-2024-39585
was published
Sep 6, 2024
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows...
Critical
Unreviewed
CVE-2024-42639
was published
Aug 16, 2024
Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P...
Moderate
Unreviewed
CVE-2024-31798
was published
Aug 15, 2024
D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.
High
Unreviewed
CVE-2024-41616
was published
Aug 6, 2024
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly...
High
Unreviewed
CVE-2024-38885
was published
Aug 2, 2024
ProTip!
Advisories are also available from the
GraphQL API