Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

718 advisories

Loading
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal... Critical Unreviewed
CVE-2018-1000550 was published May 13, 2022
vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call... Critical Unreviewed
CVE-2017-17671 was published May 13, 2022
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1... Critical Unreviewed
CVE-2019-9960 was published May 13, 2022
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk... Critical Unreviewed
CVE-2019-8395 was published May 13, 2022
An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the... Critical Unreviewed
CVE-2019-1010257 was published May 13, 2022
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a... Critical Unreviewed
CVE-2018-16367 was published May 13, 2022
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly... Critical Unreviewed
CVE-2015-9266 was published May 13, 2022
Directory Traversal in Studio 42 elFinder Critical
CVE-2018-9110 was published for studio-42/elfinder (Composer) May 13, 2022
elFinder Path Traversal vulnerability Critical
CVE-2018-9109 was published for studio-42/elfinder (Composer) May 13, 2022
Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before... Critical Unreviewed
CVE-2016-6269 was published May 13, 2022
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed... Critical Unreviewed
CVE-2019-3396 was published May 13, 2022
Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system... Critical Unreviewed
CVE-2022-23166 was published May 13, 2022
MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure... Critical Unreviewed
CVE-2022-29596 was published May 12, 2022
The lack of sanitization in a relative url path in a search parameter allows for arbitrary... Critical Unreviewed
CVE-2022-26889 was published May 7, 2022
A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. Critical Unreviewed
CVE-2013-3073 was published May 5, 2022
Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. Critical Unreviewed
CVE-2013-4654 was published May 5, 2022
Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations... Critical Unreviewed
CVE-2013-4658 was published May 5, 2022
Improper path handling in kustomization files allows path traversal Critical
CVE-2022-24877 was published for github.com/fluxcd/flux2 (Go) May 4, 2022
hiddeco kurt-r2c
PEAR::Archive_Tar Directory Traversal vulnerability Critical
CVE-2006-0931 was published for pear/archive_tar (Composer) May 1, 2022
Rudloff
The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass... Critical Unreviewed
CVE-2004-0847 was published Apr 29, 2022
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360... Critical Unreviewed
CVE-2022-29081 was published Apr 29, 2022
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Critical Unreviewed
CVE-2022-29806 was published Apr 27, 2022
The Cab fare calculator WordPress plugin through 1.0.3 does not validate the controller parameter... Critical Unreviewed
CVE-2022-1391 was published Apr 26, 2022
The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter... Critical Unreviewed
CVE-2022-1390 was published Apr 26, 2022
ytnef has directory traversal Critical Unreviewed
CVE-2009-3887 was published Apr 21, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database