GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,097
Erlang
29
GitHub Actions
19
Go
1,925
Maven
5,000+
npm
3,657
NuGet
638
pip
3,264
Pub
10
RubyGems
873
Rust
823
Swift
35
Unreviewed advisories
All unreviewed
5,000+
865 advisories
Filter by severity
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password
Critical
CVE-2016-0733
was published
for
org.apache.ranger:ranger
(Maven)
Oct 17, 2018
Authentication Bypass in hapi-auth-jwt2
Critical
CVE-2016-10525
was published
for
hapi-auth-jwt2
(npm)
Feb 18, 2019
Authentication Bypass in console-io
Critical
CVE-2016-10532
was published
for
console-io
(npm)
Feb 18, 2019
API Admin Auth Weakness in tomato
Critical
CVE-2013-7379
was published
for
tomato
(npm)
Aug 31, 2020
Authentication Bypass in express-laravel-passport
Critical
GHSA-v66p-w7qx-wv98
was published
for
express-laravel-passport
(npm)
Sep 4, 2020
phpMyFAQ Improper Authentication vulnerability
Critical
CVE-2023-0311
was published
for
thorsten/phpmyfaq
(Composer)
Jan 16, 2023
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...
Critical
Unreviewed
CVE-2021-45079
was published
Feb 8, 2022
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user...
Critical
Unreviewed
CVE-2022-23383
was published
Mar 11, 2022
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid"...
Critical
Unreviewed
CVE-2021-45786
was published
Mar 17, 2022
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
Critical
CVE-2021-41303
was published
for
org.apache.shiro:shiro-core
(Maven)
Sep 20, 2021
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...
Critical
Unreviewed
CVE-2022-0547
was published
Mar 19, 2022
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware...
Critical
Unreviewed
CVE-2022-0342
was published
Mar 29, 2022
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not...
Critical
Unreviewed
CVE-2022-23795
was published
Mar 31, 2022
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code...
Critical
Unreviewed
CVE-2021-44515
was published
Dec 13, 2021
A vulnerability classified as critical was found in SourceCodester One Church Management System 1...
Critical
Unreviewed
CVE-2022-1084
was published
Mar 30, 2022
A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker...
Critical
Unreviewed
CVE-2019-9564
was published
Mar 31, 2022
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect...
Critical
Unreviewed
CVE-2021-32980
was published
Apr 5, 2022
All programming connections receive the same unlocked privileges, which can result in a privilege...
Critical
Unreviewed
CVE-2021-32984
was published
Apr 5, 2022
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24...
Critical
Unreviewed
CVE-2021-45508
was published
Dec 27, 2021
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08...
Critical
Unreviewed
CVE-2021-45511
was published
Dec 27, 2021
NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.
Critical
Unreviewed
CVE-2021-45496
was published
Dec 27, 2021
Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0...
Critical
Unreviewed
CVE-2021-45501
was published
Dec 27, 2021
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24...
Critical
Unreviewed
CVE-2021-45504
was published
Dec 27, 2021
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is...
Critical
Unreviewed
CVE-2021-20158
was published
Dec 31, 2021
NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.
Critical
Unreviewed
CVE-2021-45495
was published
Dec 27, 2021
ProTip!
Advisories are also available from the
GraphQL API