Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,978
Erlang
29
GitHub Actions
16
Go
1,768
Maven
4,991
npm
3,537
NuGet
616
pip
3,107
Pub
10
RubyGems
837
Rust
786
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

75 advisories

Loading
External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows... Moderate Unreviewed
CVE-2024-23317 was published Jul 11, 2024
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-38049 was published Jul 9, 2024
External Control of File Name or Path in GitHub repository stitionai/devika prior to -. High Unreviewed
CVE-2024-5334 was published Jun 27, 2024
Remote Command program allows an attacker to read any file using a Local File Inclusion... Moderate Unreviewed
CVE-2024-27175 was published Jun 14, 2024
A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of... High Unreviewed
CVE-2024-20366 was published May 15, 2024
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected... High Unreviewed
CVE-2024-27943 was published May 14, 2024
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or... Moderate Unreviewed
CVE-2024-25965 was published May 14, 2024
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected... High Unreviewed
CVE-2024-27944 was published May 14, 2024
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import... High Unreviewed
CVE-2024-27945 was published May 14, 2024
A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as... Moderate Unreviewed
CVE-2024-4818 was published May 14, 2024
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a... Moderate Unreviewed
CVE-2024-0100 was published May 14, 2024
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the... Critical Unreviewed
CVE-2024-0087 was published May 14, 2024
An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an... Moderate Unreviewed
CVE-2024-33860 was published May 7, 2024
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3... High Unreviewed
CVE-2024-31492 was published Apr 10, 2024
A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open... Moderate Unreviewed
CVE-2024-21870 was published Apr 3, 2024
A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of... Moderate Unreviewed
CVE-2024-22178 was published Apr 3, 2024
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared... Moderate Unreviewed
CVE-2024-2917 was published Mar 27, 2024
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message... Moderate Unreviewed
CVE-2023-47147 was published Mar 15, 2024
Windows Compressed Folder Tampering Vulnerability Moderate Unreviewed
CVE-2024-26185 was published Mar 12, 2024
IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and... Moderate Unreviewed
CVE-2023-26282 was published Mar 5, 2024
A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as... Moderate Unreviewed
CVE-2024-2155 was published Mar 4, 2024
A vulnerability, which was classified as critical, has been found in SourceCodester Insurance... Moderate Unreviewed
CVE-2024-2150 was published Mar 3, 2024
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail... Moderate Unreviewed
CVE-2020-36772 was published Jan 22, 2024
A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by... Moderate Unreviewed
CVE-2024-0728 was published Jan 19, 2024
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image... Moderate Unreviewed
CVE-2023-49864 was published Jan 10, 2024
ProTip! Advisories are also available from the GraphQL API