Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
41
Go
3,005
Maven
5,000+
npm
4,733
NuGet
788
pip
4,343
Pub
12
RubyGems
987
Rust
1,137
Swift
50
Unreviewed advisories
All unreviewed
5,000+

1,374 advisories

Loading
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an... High Unreviewed
CVE-2021-32961 was published Apr 3, 2022
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. High Unreviewed
CVE-2021-43098 was published Mar 30, 2022
Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload... High Unreviewed
CVE-2022-23155 was published Apr 2, 2022
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function,... High Unreviewed
CVE-2021-43102 was published Mar 30, 2022
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function... High Unreviewed
CVE-2021-43103 was published Mar 30, 2022
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function... High Unreviewed
CVE-2021-43100 was published Mar 30, 2022
Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to... High Unreviewed
CVE-2022-28223 was published Mar 31, 2022
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType... High Unreviewed
CVE-2021-43101 was published Mar 30, 2022
Unrestricted Upload of File with Dangerous Type in Gogs High
CVE-2022-0415 was published for gogs.io/gogs (Go) Mar 28, 2022
wuhan005
Credited to wuhan005
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior... High Unreviewed
CVE-2022-1033 was published Mar 24, 2022
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues. High Unreviewed
CVE-2022-23346 was published Mar 22, 2022
Unrestricted Upload of File with Dangerous Type in ShowDoc High
CVE-2022-1034 was published for showdoc/showdoc (Composer) Mar 23, 2022
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload.... High Unreviewed
CVE-2022-25581 was published Mar 20, 2022
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0... High Unreviewed
CVE-2020-26008 was published Mar 22, 2022
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is... High Unreviewed
CVE-2022-0687 was published Mar 22, 2022
An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows... High Unreviewed
CVE-2020-26007 was published Mar 22, 2022
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action... High Unreviewed
CVE-2022-26965 was published Mar 19, 2022
Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings... High Unreviewed
CVE-2022-25602 was published Mar 19, 2022
An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 ... High Unreviewed
CVE-2021-43970 was published Mar 11, 2022
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal... High Unreviewed
CVE-2019-13359 was published May 24, 2022
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and... High Unreviewed
CVE-2022-42287 was published Jan 13, 2023
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... High Unreviewed
CVE-2020-15645 was published May 24, 2022
Infinite loop in .Net Bond High
CVE-2020-1469 was published for Bond.Core.CSharp (NuGet) Apr 8, 2022
Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0 High
CVE-2020-15277 was published for baserproject/basercms (Composer) Oct 30, 2020
Aquilao
Credited to Aquilao
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database