GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,454
Erlang
33
GitHub Actions
22
Go
2,153
Maven
5,000+
npm
3,818
NuGet
693
pip
3,492
Pub
12
RubyGems
902
Rust
903
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
255 advisories
Filter by severity
A files or directories accessible to external parties vulnerability has been reported to affect...
Moderate
Unreviewed
CVE-2024-48864
was published
Mar 7, 2025
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the...
Moderate
Unreviewed
CVE-2025-25799
was published
Mar 6, 2025
A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may...
Critical
Unreviewed
CVE-2024-53676
was published
Nov 27, 2024
Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All...
High
Unreviewed
CVE-2024-12917
was published
Feb 24, 2025
Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <...
High
Unreviewed
CVE-2022-33901
was published
Jul 23, 2022
Auth. (admin+) Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin <=...
Moderate
Unreviewed
CVE-2022-44634
was published
Jul 6, 2023
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
High
Unreviewed
CVE-2023-25260
was published
Mar 28, 2023
The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Local File...
High
Unreviewed
CVE-2024-3564
was published
Jun 1, 2024
amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.
High
Unreviewed
CVE-2023-23330
was published
Mar 28, 2023
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests...
High
Unreviewed
CVE-2023-1124
was published
Apr 3, 2023
An attacker could obtain firmware files and reverse engineer their
intended use leading to loss...
Moderate
Unreviewed
CVE-2025-23421
was published
Feb 14, 2025
In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205),...
High
Unreviewed
CVE-2024-11629
was published
Feb 12, 2025
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup...
High
Unreviewed
CVE-2023-27180
was published
Apr 7, 2023
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7...
Moderate
Unreviewed
CVE-2025-1042
was published
Feb 12, 2025
Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...
High
Unreviewed
CVE-2024-55213
was published
Feb 7, 2025
Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...
High
Unreviewed
CVE-2024-55214
was published
Feb 7, 2025
A vulnerability was found in SourceCodester Online Birth Certificate Management System 1.0. It...
Moderate
Unreviewed
CVE-2024-5045
was published
May 17, 2024
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...
Moderate
Unreviewed
CVE-2016-3715
was published
May 14, 2022
ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller...
High
Unreviewed
CVE-2024-57452
was published
Feb 3, 2025
Brocade Fabric OS versions before
8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2...
Moderate
Unreviewed
CVE-2024-10403
was published
Feb 4, 2025
Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021...
High
Unreviewed
CVE-2023-29080
was published
Jan 30, 2025
?An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior...
High
Unreviewed
CVE-2023-34316
was published
Jul 10, 2023
An arbitrary file deletion vulnerability exists in PaperCut NG/MF that only affects Windows...
Moderate
Unreviewed
CVE-2024-3037
was published
May 14, 2024
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before...
Moderate
Unreviewed
CVE-2023-29820
was published
May 12, 2023
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to...
High
Unreviewed
CVE-2024-45276
was published
Oct 15, 2024
ProTip!
Advisories are also available from the
GraphQL API