Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,274
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,419
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

6,333 advisories

Loading
Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py Low
CVE-2024-6971 was published for lollms (pip) Oct 11, 2024
The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file... Moderate Unreviewed
CVE-2024-7514 was published Oct 11, 2024
Gradio has several components with post-process steps allow arbitrary file leaks Moderate
CVE-2024-47868 was published for gradio (pip) Oct 10, 2024
ahpaleus Vasco-jofra
Gradio has a one-level read path traversal in `/custom_component` Moderate
CVE-2024-47166 was published for gradio (pip) Oct 10, 2024
ahpaleus Vasco-jofra
Gradio's `is_in_or_equal` function may be bypassed Moderate
CVE-2024-47164 was published for gradio (pip) Oct 10, 2024
Vasco-jofra ahpaleus
open-webui allows writing and deleting arbitrary files Moderate
CVE-2024-7037 was published for open-webui (pip) Oct 9, 2024
Buildah allows arbitrary directory mount Moderate
CVE-2024-9675 was published for github.com/containers/buildah (Go) Oct 9, 2024
Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows... High Unreviewed
CVE-2024-9575 was published Oct 9, 2024
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation... High Unreviewed
CVE-2024-47191 was published Oct 9, 2024
Adguard Home arbitrary file read vulnerability High
CVE-2024-36814 was published for github.com/AdguardTeam/AdGuardHome (Go) Oct 8, 2024
itz-d0dgy
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with... High Unreviewed
CVE-2024-9381 was published Oct 8, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47010 was published Oct 8, 2024
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was... Moderate Unreviewed
CVE-2024-47948 was published Oct 8, 2024
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary... Moderate Unreviewed
CVE-2024-47949 was published Oct 8, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47011 was published Oct 8, 2024
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker... High Unreviewed
CVE-2024-47009 was published Oct 8, 2024
A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0).... Moderate Unreviewed
CVE-2024-47563 was published Oct 8, 2024
Authenticated RCE via Path Traversal High Unreviewed
CVE-2024-47558 was published Oct 7, 2024
Pre-Auth RCE via Path Traversal High Unreviewed
CVE-2024-47557 was published Oct 7, 2024
Authenticated RCE via Path Traversal High Unreviewed
CVE-2024-47559 was published Oct 7, 2024
Pre-Auth RCE via Path Traversal High Unreviewed
CVE-2024-47556 was published Oct 7, 2024
Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs... Critical Unreviewed
CVE-2024-46446 was published Oct 7, 2024
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled Moderate
CVE-2024-45291 was published for phpoffice/phpspreadsheet (Composer) Oct 7, 2024
emilvirkki
Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability High
CVE-2024-47818 was published for @saltcorn/server (npm) Oct 7, 2024
dellalibera
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2024-44018 was published Oct 5, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database