Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

5,218 advisories

Loading
The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions... High Unreviewed
CVE-2024-10803 was published Nov 23, 2024
SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-7565 was published Nov 23, 2024
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This... Critical Unreviewed
CVE-2023-51639 was published Nov 22, 2024
Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This... High Unreviewed
CVE-2023-52334 was published Nov 22, 2024
Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability... High Unreviewed
CVE-2023-51643 was published Nov 22, 2024
Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-51647 was published Nov 22, 2024
Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This... High Unreviewed
CVE-2023-52332 was published Nov 22, 2024
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability... High Unreviewed
CVE-2023-51645 was published Nov 22, 2024
Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability... Critical Unreviewed
CVE-2023-52333 was published Nov 22, 2024
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability... High Unreviewed
CVE-2024-5581 was published Nov 22, 2024
Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-51646 was published Nov 22, 2024
A path traversal vulnerability has been reported to affect several QNAP operating system versions... Low Unreviewed
CVE-2024-37046 was published Nov 22, 2024
Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2023-51640 was published Nov 22, 2024
Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This... High Unreviewed
CVE-2023-51648 was published Nov 22, 2024
A path traversal vulnerability has been reported to affect several QNAP operating system versions... Moderate Unreviewed
CVE-2024-37043 was published Nov 22, 2024
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an... Moderate Unreviewed
CVE-2024-52054 was published Nov 22, 2024
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an... Moderate Unreviewed
CVE-2024-52056 was published Nov 22, 2024
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an... High Unreviewed
CVE-2024-52055 was published Nov 22, 2024
The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-11303 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers... High Unreviewed
CVE-2024-11310 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of... Critical Unreviewed
CVE-2024-11311 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of... Critical Unreviewed
CVE-2024-11312 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of... Critical Unreviewed
CVE-2024-11313 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of... Critical Unreviewed
CVE-2024-11314 was published Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of... Critical Unreviewed
CVE-2024-11315 was published Nov 18, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database