Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+

112 advisories

Loading
Moodle External Control of File Name or Path vulnerability Moderate
CVE-2023-30943 was published for moodle/moodle (Composer) May 2, 2023
Windows Compressed Folder Tampering Vulnerability Moderate Unreviewed
CVE-2024-26185 was published Mar 12, 2024
A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated... Moderate Unreviewed
CVE-2023-0008 was published May 10, 2023
A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of... Moderate Unreviewed
CVE-2024-22178 was published Apr 3, 2024
A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open... Moderate Unreviewed
CVE-2024-21870 was published Apr 3, 2024
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared... Moderate Unreviewed
CVE-2024-2917 was published Mar 27, 2024
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API Moderate
CVE-2024-23634 was published for org.geoserver:gs-restconfig (Maven) Mar 20, 2024
sikeoka
Credited to sikeoka
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message... Moderate Unreviewed
CVE-2023-47147 was published Mar 15, 2024
IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and... Moderate Unreviewed
CVE-2023-26282 was published Mar 5, 2024
A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as... Moderate Unreviewed
CVE-2024-2155 was published Mar 4, 2024
A vulnerability, which was classified as critical, has been found in SourceCodester Insurance... Moderate Unreviewed
CVE-2024-2150 was published Mar 3, 2024
A vulnerability, which was classified as critical, was found in SourceCodester Inventory... Moderate Unreviewed
CVE-2023-4749 was published Sep 4, 2023
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an... Moderate Unreviewed
CVE-2023-0003 was published Feb 8, 2023
A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by... Moderate Unreviewed
CVE-2024-0728 was published Jan 19, 2024
A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software... Moderate Unreviewed
CVE-2023-20114 was published Nov 1, 2023
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to... Moderate Unreviewed
CVE-2023-20234 was published Aug 23, 2023
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as... Moderate Unreviewed
CVE-2024-0265 was published Jan 7, 2024
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been... Moderate Unreviewed
CVE-2023-6618 was published Dec 8, 2023
This external control vulnerability, if exploited, could allow a local OS-authenticated user... Moderate Unreviewed
CVE-2023-34982 was published Nov 15, 2023
A vulnerability, which was classified as critical, has been found in SourceCodester Resort... Moderate Unreviewed
CVE-2023-4191 was published Aug 7, 2023
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0... Moderate Unreviewed
CVE-2023-2152 was published Apr 18, 2023
Cortex's Alertmanager can expose local files content via specially crafted config Moderate
CVE-2022-23536 was published for github.com/cortexproject/cortex (Go) Dec 19, 2022
aus
Credited to aus
ingress-nginx component for Kubernetes allows file overwrite Moderate
CVE-2020-8553 was published for k8s.io/ingress-nginx (Go) May 24, 2022
The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary... Moderate Unreviewed
CVE-2022-2943 was published Sep 7, 2022
Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar... Moderate Unreviewed
CVE-2022-0377 was published Mar 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database