Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,253
Erlang
31
GitHub Actions
21
Go
2,018
Maven
5,000+
npm
3,725
NuGet
662
pip
3,402
Pub
12
RubyGems
890
Rust
861
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

34 advisories

Loading
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160,... High Unreviewed
CVE-2021-1296 was published May 24, 2022
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160,... High Unreviewed
CVE-2021-1297 was published May 24, 2022
Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote... Moderate Unreviewed
CVE-2021-32507 was published May 24, 2022
Local File Inclusion vulnerability of the omni-directional communication system allows remote... Moderate Unreviewed
CVE-2021-30173 was published May 24, 2022
Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote... Moderate Unreviewed
CVE-2021-32506 was published May 24, 2022
A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up... Moderate Unreviewed
CVE-2023-2101 was published Apr 15, 2023
A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This... Moderate Unreviewed
CVE-2023-2765 was published May 17, 2023
A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by... Moderate Unreviewed
CVE-2023-5022 was published Sep 17, 2023
A vulnerability, which was classified as problematic, has been found in Chengdu Flash Flood... Moderate Unreviewed
CVE-2023-4172 was published Aug 6, 2023
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application... High Unreviewed
CVE-2022-20958 was published Nov 4, 2022
Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue... Moderate Unreviewed
CVE-2023-30970 was published Jan 29, 2024
An attacker could potentially exploit this vulnerability, leading to files being read from the... Moderate Unreviewed
CVE-2023-5390 was published Jan 31, 2024
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the... Low Unreviewed
CVE-2023-50955 was published Feb 21, 2024
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated... Moderate Unreviewed
CVE-2023-34135 was published Jul 13, 2023
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability... High Unreviewed
CVE-2023-33871 was published Jul 18, 2023
Microsoft Defender for IoT Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21323 was published Apr 9, 2024
Microsoft Defender for IoT Remote Code Execution Vulnerability High Unreviewed
CVE-2024-29053 was published Apr 9, 2024
An improper absolute path traversal vulnerability was reported for the Ready For application... Moderate Unreviewed
CVE-2023-41830 was published May 3, 2024
An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in... High Unreviewed
CVE-2024-6250 was published Jun 27, 2024
A vulnerability in the content scanning and message filtering features of Cisco Secure Email... Critical Unreviewed
CVE-2024-20401 was published Jul 17, 2024
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when... High Unreviewed
CVE-2018-20250 was published May 13, 2022
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers... High Unreviewed
CVE-2024-28806 was published Jul 29, 2024
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR... High Unreviewed
CVE-2024-33620 was published Jun 18, 2024
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the... Moderate Unreviewed
CVE-2024-7323 was published Aug 2, 2024
OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality,... Moderate Unreviewed
CVE-2024-8778 was published Sep 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database