Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,195 advisories

Loading
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file... High Unreviewed
CVE-2024-10626 was published Nov 9, 2024
In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path... High Unreviewed
CVE-2024-47742 was published Oct 21, 2024
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup... High Unreviewed
CVE-2023-21418 was published Nov 21, 2023
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del... High Unreviewed
CVE-2023-21415 was published Oct 16, 2023
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API... High Unreviewed
CVE-2023-21417 was published Nov 21, 2023
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an... High Unreviewed
CVE-2024-47253 was published Nov 5, 2024
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking allows PHP Local File... High Unreviewed
CVE-2024-51582 was published Nov 4, 2024
A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and... High Unreviewed
CVE-2024-38449 was published Jun 17, 2024
An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on... High Unreviewed
CVE-2024-39722 was published Oct 31, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-37108 was published Nov 1, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-37423 was published Nov 1, 2024
Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS... High Unreviewed
CVE-2024-48735 was published Oct 30, 2024
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to... High Unreviewed
CVE-2024-7962 was published Oct 29, 2024
Directory Traversal in Automatic-Systems SOC FL9600 FastLine lego_T04E00 allows a remote attacker... High Unreviewed
CVE-2023-37607 was published Jan 3, 2024
A path deletion vulnerability was addressed by preventing vulnerable code from running with... High Unreviewed
CVE-2024-44159 was published Oct 28, 2024
A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS... High Unreviewed
CVE-2024-44255 was published Oct 28, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-50508 was published Oct 30, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-50509 was published Oct 30, 2024
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... High Unreviewed
CVE-2024-45262 was published Oct 24, 2024
Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an... High Unreviewed
CVE-2023-35003 was published Oct 28, 2024
A post-authentication arbitrary file read vulnerability within the server plugins section in... High Unreviewed
CVE-2024-35308 was published Oct 22, 2024
In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical... High Unreviewed
CVE-2024-47027 was published Oct 25, 2024
The BuddyPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to,... High Unreviewed
CVE-2024-10011 was published Oct 25, 2024
iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the... High Unreviewed
CVE-2024-10313 was published Oct 24, 2024
Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing... High Unreviewed
CVE-2024-10200 was published Oct 21, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database