Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,109
Maven
5,000+
npm
3,765
NuGet
680
pip
3,453
Pub
12
RubyGems
892
Rust
887
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,296 advisories

Loading
An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4... High Unreviewed
CVE-2024-53582 was published Jan 31, 2025
An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File... High Unreviewed
CVE-2024-53537 was published Jan 31, 2025
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead... High Unreviewed
CVE-2024-41973 was published Nov 18, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-24569 was published Feb 3, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-23819 was published Feb 3, 2025
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files... High Unreviewed
CVE-2024-57728 was published Jan 16, 2025
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR... High Unreviewed
CVE-2023-26243 was published Apr 27, 2023
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in... High Unreviewed
CVE-2024-54154 was published Dec 4, 2024
The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to... High Unreviewed
CVE-2024-13720 was published Jan 30, 2025
The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions... High Unreviewed
CVE-2024-13671 was published Jan 30, 2025
SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an... High Unreviewed
CVE-2021-38163 was published May 24, 2022
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP... High Unreviewed
CVE-2022-27925 was published Apr 22, 2022
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an... High Unreviewed
CVE-2022-30333 was published May 10, 2022
CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in... High Unreviewed
CVE-2024-57549 was published Jan 28, 2025
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports... High Unreviewed
CVE-2018-5430 was published May 13, 2022
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow... High Unreviewed
CVE-2018-0296 was published May 13, 2022
Local privilege escalation due to incorrect assignment of privileges of temporary files in the... High Unreviewed
CVE-2025-0542 was published Jan 25, 2025
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2025-23422 was published Jan 24, 2025
The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget... High Unreviewed
CVE-2024-13409 was published Jan 24, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42232 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42225 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email... High Unreviewed
CVE-2023-42226 was published Jan 14, 2025
Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the... High Unreviewed
CVE-2023-42227 was published Jan 14, 2025
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote... High Unreviewed
CVE-2016-3976 was published Apr 30, 2022
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory... High Unreviewed
CVE-2024-1974 was published Apr 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database