GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
606 advisories
Filter by severity
A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when...
Critical
Unreviewed
CVE-2024-31849
was published
Apr 5, 2024
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation...
Critical
Unreviewed
CVE-2024-25693
was published
Apr 4, 2024
This vulnerability allows access to arbitrary files in the application server file system due to...
Critical
Unreviewed
CVE-2024-2227
was published
Mar 22, 2024
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow...
Critical
Unreviewed
CVE-2024-27768
was published
Mar 18, 2024
The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal...
Critical
Unreviewed
CVE-2023-6825
was published
Mar 13, 2024
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2024-21400
was published
Mar 12, 2024
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process...
Critical
Unreviewed
CVE-2024-28222
was published
Mar 7, 2024
An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the...
Critical
Unreviewed
CVE-2024-27764
was published
Mar 6, 2024
Possible path traversal in Apache OFBiz allowing authentication bypass.
Users are recommended to...
Critical
Unreviewed
CVE-2024-25065
was published
Feb 29, 2024
F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory...
Critical
Unreviewed
CVE-2024-25830
was published
Feb 29, 2024
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal...
Critical
Unreviewed
CVE-2024-23479
was published
Feb 15, 2024
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal...
Critical
Unreviewed
CVE-2024-23476
was published
Feb 15, 2024
The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File...
Critical
Unreviewed
CVE-2024-26261
was published
Feb 15, 2024
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42...
Critical
Unreviewed
CVE-2023-40266
was published
Feb 9, 2024
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is...
Critical
Unreviewed
CVE-2023-6989
was published
Feb 6, 2024
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to...
Critical
Unreviewed
CVE-2024-0221
was published
Feb 6, 2024
Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB,...
Critical
Unreviewed
CVE-2023-7077
was published
Feb 5, 2024
Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.
Critical
Unreviewed
CVE-2024-24482
was published
Feb 2, 2024
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16...
Critical
Unreviewed
CVE-2024-0402
was published
Jan 26, 2024
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers...
Critical
Unreviewed
CVE-2023-6623
was published
Jan 15, 2024
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory...
Critical
Unreviewed
CVE-2023-6699
was published
Jan 11, 2024
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine...
Critical
Unreviewed
CVE-2023-47211
was published
Jan 8, 2024
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via...
Critical
Unreviewed
CVE-2023-5991
was published
Dec 26, 2023
Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template...
Critical
Unreviewed
CVE-2023-46886
was published
Nov 29, 2023
Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in...
Critical
Unreviewed
CVE-2023-3533
was published
Nov 28, 2023
ProTip!
Advisories are also available from the
GraphQL API