Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

98 advisories

Loading
A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as... Moderate Unreviewed
CVE-2024-8655 was published Sep 10, 2024
Priority – CWE-552: Files or Directories Accessible to External Parties Moderate Unreviewed
CVE-2024-41699 was published Aug 20, 2024
CWE-552: Files or Directories Accessible to External Parties vulnerability exists which may... Moderate Unreviewed
CVE-2024-5056 was published Jun 12, 2024
A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic.... Moderate Unreviewed
CVE-2024-5587 was published Jun 2, 2024
A vulnerability was found in SourceCodester Online Birth Certificate Management System 1.0. It... Moderate Unreviewed
CVE-2024-5045 was published May 17, 2024
Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This... Moderate Unreviewed
CVE-2023-39479 was published May 3, 2024
Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation... Moderate Unreviewed
CVE-2023-39480 was published May 3, 2024
In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is... Moderate Unreviewed
CVE-2024-3164 was published Apr 2, 2024
A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded... Moderate Unreviewed
CVE-2023-45594 was published Mar 5, 2024
Aria Operations for Networks contains a local file read vulnerability. A malicious actor with... Moderate Unreviewed
CVE-2024-22240 was published Feb 6, 2024
A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified... Moderate Unreviewed
CVE-2024-1005 was published Jan 29, 2024
Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation... Moderate Unreviewed
CVE-2023-52112 was published Jan 16, 2024
Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A... Moderate Unreviewed
CVE-2023-48661 was published Dec 14, 2023
The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory,... Moderate Unreviewed
CVE-2023-5907 was published Dec 11, 2023
Tyler Technologies Court Case Management Plus may store backups in a location that can be... Moderate Unreviewed
CVE-2023-6375 was published Nov 30, 2023
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows... Moderate Unreviewed
CVE-2023-42534 was published Nov 13, 2023
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit... Moderate Unreviewed
CVE-2023-47612 was published Nov 9, 2023
The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the... Moderate Unreviewed
CVE-2023-4930 was published Nov 6, 2023
The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the... Moderate Unreviewed
CVE-2023-4933 was published Oct 16, 2023
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged... Moderate Unreviewed
CVE-2023-5101 was published Oct 9, 2023
File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002... Moderate Unreviewed
CVE-2023-4588 was published Sep 6, 2023
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local... Moderate Unreviewed
CVE-2023-41717 was published Aug 31, 2023
An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an... Moderate Unreviewed
CVE-2023-4475 was published Aug 22, 2023
In multiple Codesys products in multiple versions, after successful authentication as a user,... Moderate Unreviewed
CVE-2023-37551 was published Aug 3, 2023
Sysaid - CWE-552: Files or Directories Accessible to External Parties -  Authenticated users... Moderate Unreviewed
CVE-2023-32226 was published Jul 30, 2023
ProTip! Advisories are also available from the GraphQL API