Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+

177 advisories

Loading
metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote... High Unreviewed
CVE-2021-37842 was published May 24, 2022
Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile... High Unreviewed
CVE-2021-40527 was published May 24, 2022
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear... High Unreviewed
CVE-2020-19137 was published May 24, 2022
In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured... High Unreviewed
CVE-2021-31820 was published May 24, 2022
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control... High Unreviewed
CVE-2020-18759 was published May 24, 2022
In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. High Unreviewed
CVE-2021-37548 was published May 24, 2022
The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before... High Unreviewed
CVE-2021-33323 was published May 24, 2022
An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary... High Unreviewed
CVE-2020-22741 was published May 24, 2022
The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt... High Unreviewed
CVE-2020-12731 was published May 24, 2022
When configuring Octopus Server if it is configured with an external SQL database, on initial... High Unreviewed
CVE-2021-31817 was published May 24, 2022
When configuring Octopus Server if it is configured with an external SQL database, on initial... High Unreviewed
CVE-2021-31816 was published May 24, 2022
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key... High Unreviewed
CVE-2021-29950 was published May 24, 2022
The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service... High Unreviewed
CVE-2020-29324 was published May 24, 2022
An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect... High Unreviewed
CVE-2021-25644 was published May 24, 2022
Cleartext storage of sensitive information in multiple versions of Octopus Server where in... High Unreviewed
CVE-2021-30183 was published May 24, 2022
In multiple managed switches by WAGO in different versions the webserver cookies of the web based... High Unreviewed
CVE-2021-20995 was published May 24, 2022
In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after... High Unreviewed
CVE-2021-31791 was published May 24, 2022
The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV... High Unreviewed
CVE-2021-28937 was published May 24, 2022
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ... High Unreviewed
CVE-2021-28374 was published May 24, 2022
IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source... High Unreviewed
CVE-2021-20407 was published May 24, 2022
An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in... High Unreviewed
CVE-2021-27178 was published May 24, 2022
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext... High Unreviewed
CVE-2021-27175 was published May 24, 2022
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext... High Unreviewed
CVE-2021-27176 was published May 24, 2022
An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has... High Unreviewed
CVE-2021-27174 was published May 24, 2022
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find... High Unreviewed
CVE-2021-27140 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database