GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,741
NuGet
668
pip
3,422
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
29 advisories
Filter by severity
Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro allows Path Traversal.This...
High
Unreviewed
CVE-2024-56214
was published
Dec 31, 2024
Some Huawei home music system products have a path traversal vulnerability. Successful...
High
Unreviewed
CVE-2023-7263
was published
Dec 28, 2024
Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this...
High
Unreviewed
CVE-2023-7300
was published
Dec 26, 2024
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue...
High
Unreviewed
CVE-2024-56055
was published
Dec 18, 2024
Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue...
High
Unreviewed
CVE-2024-56049
was published
Dec 18, 2024
Path Traversal vulnerability in NotFound ARForms allows Path Traversal.This issue affects ARForms...
High
Unreviewed
CVE-2024-54216
was published
Dec 6, 2024
Path Traversal: '.../...//' vulnerability in Softpulse Infotech SP Blog Designer allows PHP Local...
High
Unreviewed
CVE-2024-52498
was published
Nov 28, 2024
The back-end does not sufficiently verify the user-controlled filename parameter which makes it...
High
Unreviewed
CVE-2024-50054
was published
Nov 23, 2024
Path Traversal: '.../...//' vulnerability in Corporate Zen Contact Page With Google Map allows...
High
Unreviewed
CVE-2024-52447
was published
Nov 20, 2024
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could...
High
Unreviewed
CVE-2020-26073
was published
Nov 18, 2024
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead...
High
Unreviewed
CVE-2024-41973
was published
Nov 18, 2024
The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability....
High
Unreviewed
CVE-2024-11136
was published
Nov 14, 2024
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup...
High
Unreviewed
CVE-2023-21418
was published
Nov 21, 2023
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...
High
Unreviewed
CVE-2023-21416
was published
Nov 21, 2023
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del...
High
Unreviewed
CVE-2023-21415
was published
Oct 16, 2023
Sandro Poppi, member of the AXIS OS Bug Bounty Program,
has found that the VAPIX API...
High
Unreviewed
CVE-2023-21417
was published
Nov 21, 2023
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking allows PHP Local File...
High
Unreviewed
CVE-2024-51582
was published
Nov 4, 2024
Multi-DNC – CWE-35: Path Traversal: '.../...//'
High
Unreviewed
CVE-2024-45248
was published
Oct 6, 2024
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support,...
High
Unreviewed
CVE-2024-0113
was published
Aug 12, 2024
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could...
High
Unreviewed
CVE-2024-36991
was published
Jul 1, 2024
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks,...
High
Unreviewed
CVE-2024-39171
was published
Jul 9, 2024
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of...
High
Unreviewed
CVE-2024-27901
was published
Apr 9, 2024
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a...
High
Unreviewed
CVE-2023-32714
was published
Jun 1, 2023
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
High
Unreviewed
CVE-2022-48476
was published
Apr 24, 2023
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an...
High
Unreviewed
CVE-2023-47279
was published
Dec 1, 2023
ProTip!
Advisories are also available from the
GraphQL API