Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,613
NuGet
638
pip
3,210
Pub
10
RubyGems
854
Rust
817
Swift
35
Unreviewed advisories
All unreviewed
5,000+

2,278 advisories

Loading
A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online... Critical Unreviewed
CVE-2024-27115 was published Sep 11, 2024
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload... High Unreviewed
CVE-2024-8232 was published Sep 10, 2024
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows... High Unreviewed
CVE-2024-44871 was published Sep 10, 2024
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin... High Unreviewed
CVE-2024-7770 was published Sep 10, 2024
Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in... Critical Unreviewed
CVE-2024-44849 was published Sep 9, 2024
The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to... Moderate Unreviewed
CVE-2024-7620 was published Sep 7, 2024
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user... High Unreviewed
CVE-2024-45171 was published Sep 5, 2024
File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of... Critical Unreviewed
CVE-2024-8463 was published Sep 5, 2024
IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute... Critical Unreviewed
CVE-2024-45076 was published Sep 4, 2024
MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. High Unreviewed
CVE-2024-42991 was published Sep 3, 2024
A vulnerability, which was classified as critical, has been found in SourceCodester Petshop... Moderate Unreviewed
CVE-2024-8342 was published Aug 30, 2024
A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0.... Moderate Unreviewed
CVE-2024-8341 was published Aug 30, 2024
A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected... Moderate Unreviewed
CVE-2024-8338 was published Aug 30, 2024
6SHR system from Gether Technology does not properly validate uploaded file types, allowing... High Unreviewed
CVE-2024-8330 was published Aug 30, 2024
FeehiCMS User[avatar] unrestricted upload Moderate
CVE-2024-8296 was published for feehi/cms (Composer) Aug 29, 2024
FeehiCMS file upload vulnerability Moderate
CVE-2024-8294 was published for feehi/cms (Composer) Aug 29, 2024
FeehiCMS BannerForm[img] unrestricted upload Moderate
CVE-2024-8295 was published for feehi/cms (Composer) Aug 29, 2024
The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing... High Unreviewed
CVE-2024-6311 was published Aug 28, 2024
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager... Moderate Unreviewed
CVE-2024-8170 was published Aug 26, 2024
A vulnerability, which was classified as critical, has been found in Chengdu Everbrite Network... Moderate Unreviewed
CVE-2024-8164 was published Aug 26, 2024
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™... High Unreviewed
CVE-2024-7987 was published Aug 26, 2024
A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This... Moderate Unreviewed
CVE-2024-8166 was published Aug 26, 2024
publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin... High Unreviewed
CVE-2024-42523 was published Aug 23, 2024
A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been classified as... Moderate Unreviewed
CVE-2024-8089 was published Aug 23, 2024
The Versa Director GUI provides an option to customize the look and feel of the user interface.... Moderate Unreviewed
CVE-2024-39717 was published Aug 22, 2024
ProTip! Advisories are also available from the GraphQL API