GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,335
Erlang
31
GitHub Actions
22
Go
2,096
Maven
5,000+
npm
3,762
NuGet
678
pip
3,448
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
452 advisories
Filter by severity
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount...
Moderate
Unreviewed
CVE-2023-32454
was published
Feb 6, 2024
Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to...
Moderate
Unreviewed
CVE-2008-2052
was published
May 1, 2022
Moodle vulnerable to symlink attack
Moderate
CVE-2008-5153
was published
for
moodle/moodle
(Composer)
May 17, 2022
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Moderate
Unreviewed
CVE-2010-4817
was published
Apr 21, 2022
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce...
Moderate
Unreviewed
CVE-2024-0068
was published
Feb 29, 2024
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage...
Moderate
Unreviewed
CVE-2002-0725
was published
Apr 30, 2022
The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via...
Moderate
Unreviewed
CVE-2010-0398
was published
Apr 21, 2022
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of...
Moderate
Unreviewed
CVE-2011-2924
was published
Apr 22, 2022
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of...
Moderate
Unreviewed
CVE-2011-2923
was published
Apr 22, 2022
Pacemaker before 1.1.6 configure script creates temporary files insecurely
Moderate
Unreviewed
CVE-2011-5271
was published
Apr 23, 2022
In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone...
Moderate
Unreviewed
CVE-2019-13227
was published
May 24, 2022
deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper:...
Moderate
Unreviewed
CVE-2019-13229
was published
May 24, 2022
deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to...
Moderate
Unreviewed
CVE-2019-13228
was published
May 24, 2022
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than...
Moderate
Unreviewed
CVE-2019-13636
was published
May 24, 2022
In Avast Antivirus before 19.4, a local administrator can trick the product into renaming...
Moderate
Unreviewed
CVE-2019-11230
was published
May 24, 2022
The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to...
Moderate
Unreviewed
CVE-2019-18645
was published
May 24, 2022
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A...
Moderate
Unreviewed
CVE-2019-3750
was published
May 24, 2022
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an...
Moderate
Unreviewed
CVE-2020-3223
was published
May 24, 2022
A vulnerability in the Cisco Application Framework component of the Cisco IOx application...
Moderate
Unreviewed
CVE-2020-3237
was published
May 24, 2022
OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account...
Moderate
Unreviewed
CVE-2020-8585
was published
May 24, 2022
An Improper Link Resolution Before File Access vulnerability in console port access of Juniper...
Moderate
Unreviewed
CVE-2023-28972
was published
Apr 18, 2023
An NTFS Junction condition exists in the Qualys Cloud Agent
for Windows platform in versions...
Moderate
Unreviewed
CVE-2023-28141
was published
Apr 18, 2023
imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of...
Moderate
Unreviewed
CVE-2023-34204
was published
May 30, 2023
The Firefox updater created a directory writable by non-privileged users. When uninstalling...
Moderate
Unreviewed
CVE-2023-4052
was published
Aug 1, 2023
A website could have obscured the full screen notification by using a URL with a scheme handled...
Moderate
Unreviewed
CVE-2023-4053
was published
Aug 1, 2023
ProTip!
Advisories are also available from the
GraphQL API