Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+

2,825 advisories

Loading
A directory traversal vulnerability exists in the archive download functionality of Veertu Anka... High Unreviewed
CVE-2024-41163 was published Oct 3, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44011 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44012 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44013 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44016 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44015 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44018 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44023 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44034 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-47324 was published Oct 5, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-47323 was published Oct 5, 2024
Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability High
CVE-2024-47818 was published for @saltcorn/server (npm) Oct 7, 2024
dellalibera
Authenticated RCE via Path Traversal High Unreviewed
CVE-2024-47559 was published Oct 7, 2024
Pre-Auth RCE via Path Traversal High Unreviewed
CVE-2024-47557 was published Oct 7, 2024
Authenticated RCE via Path Traversal High Unreviewed
CVE-2024-47558 was published Oct 7, 2024
Pre-Auth RCE via Path Traversal High Unreviewed
CVE-2024-47556 was published Oct 7, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47011 was published Oct 8, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47009 was published Oct 8, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47010 was published Oct 8, 2024
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with... High Unreviewed
CVE-2024-9381 was published Oct 8, 2024
Adguard Home arbitrary file read vulnerability High
CVE-2024-36814 was published for github.com/AdguardTeam/AdGuardHome (Go) Oct 8, 2024
itz-d0dgy
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation... High Unreviewed
CVE-2024-47191 was published Oct 9, 2024
Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows... High Unreviewed
CVE-2024-9575 was published Oct 9, 2024
In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user... High Unreviewed
CVE-2024-45731 was published Oct 14, 2024
SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path... High Unreviewed
CVE-2024-46898 was published Oct 15, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database