GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
47 advisories
Filter by severity
A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2...
Moderate
Unreviewed
CVE-2024-12897
was published
Dec 23, 2024
The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application...
Moderate
Unreviewed
CVE-2024-12645
was published
Dec 16, 2024
Microsoft SharePoint Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2024-49062
was published
Dec 12, 2024
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been rated as problematic....
Moderate
Unreviewed
CVE-2024-12482
was published
Dec 12, 2024
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0...
Moderate
Unreviewed
CVE-2024-32116
was published
Nov 12, 2024
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing...
Moderate
Unreviewed
CVE-2024-9923
was published
Oct 14, 2024
Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint
Moderate
CVE-2024-6985
was published
for
lollms
(pip)
Oct 11, 2024
Microsoft Defender for Endpoint for Linux Spoofing Vulnerability
Moderate
Unreviewed
CVE-2024-43614
was published
Oct 8, 2024
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was...
Moderate
Unreviewed
CVE-2024-47948
was published
Oct 8, 2024
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary...
Moderate
Unreviewed
CVE-2024-47949
was published
Oct 8, 2024
An incorrect limitation of a path to a restricted directory (path traversal) has been detected in...
Moderate
Unreviewed
CVE-2024-9405
was published
Oct 1, 2024
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2024-38258
was published
Sep 10, 2024
CHANGING Mobile One Time Password does not properly filter parameters for the file download...
Moderate
Unreviewed
CVE-2024-3122
was published
Jul 1, 2024
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC...
Moderate
Unreviewed
CVE-2024-37138
was published
Jun 26, 2024
path traversal vulnerability was identified in the parisneo/lollms-webui
Moderate
CVE-2024-4330
was published
for
lollms
(pip)
Jun 2, 2024
Oceanic allows unsanitized user input to lead to path traversal in URLs
Moderate
CVE-2024-34712
was published
for
oceanic.js
(npm)
May 14, 2024
A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to...
Moderate
Unreviewed
CVE-2024-20352
was published
Apr 3, 2024
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence...
Moderate
Unreviewed
CVE-2024-20310
was published
Apr 3, 2024
Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An...
Moderate
Unreviewed
CVE-2024-25944
was published
Mar 29, 2024
An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in...
Moderate
Unreviewed
CVE-2024-22398
was published
Mar 14, 2024
Helm dependency management path traversal
Moderate
CVE-2024-25620
was published
for
helm.sh/helm/v3
(Go)
Feb 15, 2024
registry-support: decompress can delete files outside scope via relative paths
Moderate
CVE-2024-1485
was published
for
github.com/devfile/registry-support/registry-library
(Go)
Feb 14, 2024
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL...
Moderate
Unreviewed
CVE-2024-24938
was published
Feb 6, 2024
In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives
Moderate
Unreviewed
CVE-2024-24942
was published
Feb 6, 2024
: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows...
Moderate
Unreviewed
CVE-2021-22281
was published
Feb 2, 2024
ProTip!
Advisories are also available from the
GraphQL API