GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,611
NuGet
638
pip
3,209
Pub
10
RubyGems
853
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
4,999 advisories
Filter by severity
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component ...
High
Unreviewed
CVE-2024-44867
was published
Sep 10, 2024
Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7...
High
Unreviewed
CVE-2024-37728
was published
Sep 10, 2024
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by...
Moderate
Unreviewed
CVE-2024-31947
was published
Jul 13, 2024
Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a...
Moderate
Unreviewed
CVE-2024-40617
was published
Jul 17, 2024
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...
Moderate
Unreviewed
CVE-2024-21753
was published
Sep 10, 2024
nix 2.24 through 2.24.5 allows directory traversal via a symlink in a nar file, because of...
High
Unreviewed
CVE-2024-45845
was published
Sep 10, 2024
A vulnerability has been discovered in Node.js version 20, specifically within the experimental...
High
Unreviewed
CVE-2023-30584
was published
Sep 7, 2024
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe...
High
Unreviewed
CVE-2024-44720
was published
Sep 9, 2024
A path traversal vulnerability allows an attacker with a low-privileged account and local access...
High
Unreviewed
CVE-2024-40712
was published
Sep 7, 2024
Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file...
Moderate
Unreviewed
CVE-2024-8585
was published
Sep 9, 2024
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 allows...
High
Unreviewed
CVE-2024-6789
was published
Aug 27, 2024
Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote...
High
Unreviewed
CVE-2024-33274
was published
Apr 30, 2024
A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a...
Moderate
Unreviewed
CVE-2024-35474
was published
Jun 10, 2024
Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute...
High
Unreviewed
CVE-2024-34656
was published
Sep 4, 2024
A path traversal vulnerability has been reported to affect several QNAP operating system versions...
Moderate
Unreviewed
CVE-2024-21904
was published
Sep 6, 2024
A path traversal vulnerability has been reported to affect several QNAP operating system versions...
High
Unreviewed
CVE-2023-51366
was published
Sep 6, 2024
Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal...
High
Unreviewed
CVE-2024-7693
was published
Aug 12, 2024
Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e...
Moderate
Unreviewed
CVE-2023-34259
was published
Nov 3, 2023
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
Critical
Unreviewed
CVE-2024-6445
was published
Sep 6, 2024
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible
because the...
Moderate
Unreviewed
CVE-2024-0849
was published
Feb 7, 2024
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is...
High
Unreviewed
CVE-2024-45175
was published
Sep 5, 2024
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user...
High
Unreviewed
CVE-2024-45178
was published
Sep 5, 2024
Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access...
Moderate
Unreviewed
CVE-2024-34653
was published
Sep 4, 2024
A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This...
Moderate
Unreviewed
CVE-2024-8409
was published
Sep 4, 2024
Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.
High
Unreviewed
CVE-2023-36667
was published
Nov 9, 2023
ProTip!
Advisories are also available from the
GraphQL API