GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
37 advisories
Filter by severity
The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application...
High
Unreviewed
CVE-2024-12646
was published
Dec 16, 2024
The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up...
High
Unreviewed
CVE-2024-12644
was published
Dec 16, 2024
The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application...
High
Unreviewed
CVE-2024-12643
was published
Dec 16, 2024
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources....
Critical
Unreviewed
CVE-2024-51549
was published
Dec 5, 2024
DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote...
High
Unreviewed
CVE-2024-11978
was published
Nov 29, 2024
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in...
Moderate
Unreviewed
CVE-2024-10651
was published
Nov 1, 2024
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center ...
Moderate
Unreviewed
CVE-2024-20379
was published
Oct 23, 2024
The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga...
Critical
Unreviewed
CVE-2024-9924
was published
Oct 14, 2024
Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read...
High
Unreviewed
CVE-2024-8497
was published
Sep 25, 2024
OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality,...
Moderate
Unreviewed
CVE-2024-8778
was published
Sep 16, 2024
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the...
Moderate
Unreviewed
CVE-2024-7323
was published
Aug 2, 2024
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers...
High
Unreviewed
CVE-2024-28806
was published
Jul 29, 2024
A vulnerability in the content scanning and message filtering features of Cisco Secure Email...
Critical
Unreviewed
CVE-2024-20401
was published
Jul 17, 2024
An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in...
High
Unreviewed
CVE-2024-6250
was published
Jun 27, 2024
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR...
High
Unreviewed
CVE-2024-33620
was published
Jun 18, 2024
A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows...
Critical
Unreviewed
CVE-2024-2362
was published
Jun 6, 2024
A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically...
High
Unreviewed
CVE-2024-2548
was published
Jun 6, 2024
An improper absolute path traversal vulnerability was reported for the Ready For application...
Moderate
Unreviewed
CVE-2023-41830
was published
May 3, 2024
Microsoft Defender for IoT Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-29053
was published
Apr 9, 2024
Microsoft Defender for IoT Remote Code Execution Vulnerability
High
Unreviewed
CVE-2024-21323
was published
Apr 9, 2024
A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problematic....
Low
Unreviewed
CVE-2024-1703
was published
Feb 21, 2024
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the...
Low
Unreviewed
CVE-2023-50955
was published
Feb 21, 2024
An attacker could potentially exploit this vulnerability, leading to files being read from the...
Moderate
Unreviewed
CVE-2023-5390
was published
Jan 31, 2024
Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue...
Moderate
Unreviewed
CVE-2023-30970
was published
Jan 29, 2024
A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by...
Moderate
Unreviewed
CVE-2023-5022
was published
Sep 17, 2023
ProTip!
Advisories are also available from the
GraphQL API