Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,147
NuGet
735
pip
3,948
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+

7,179 advisories

Loading
Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration... Moderate Unreviewed
CVE-2013-3706 was published May 17, 2022
OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated... High Unreviewed
CVE-2022-35216 was published Aug 5, 2022
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An... Moderate Unreviewed
CVE-2016-5941 was published May 17, 2022
Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8... Moderate Unreviewed
CVE-2015-1884 was published May 17, 2022
Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows... High Unreviewed
CVE-2017-5480 was published May 17, 2022
An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19.... High Unreviewed
CVE-2016-9364 was published May 17, 2022
EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited... High Unreviewed
CVE-2017-4980 was published May 17, 2022
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS... Moderate Unreviewed
CVE-2015-7006 was published May 17, 2022
HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View... High Unreviewed
CVE-2017-7258 was published May 17, 2022
A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS... High Unreviewed
CVE-2013-7462 was published May 17, 2022
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2022-27615 was published Jul 29, 2022
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2022-22685 was published Jul 29, 2022
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... High Unreviewed
CVE-2022-27611 was published Jul 29, 2022
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse... Moderate Unreviewed
CVE-2016-6126 was published May 17, 2022
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory... High Unreviewed
CVE-2017-5228 was published May 17, 2022
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability... High Unreviewed
CVE-2017-6510 was published May 17, 2022
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An... Moderate Unreviewed
CVE-2016-8933 was published May 17, 2022
A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and... High Unreviewed
CVE-2021-41031 was published Jul 19, 2022
The affected product is vulnerable to directory traversal, which may allow an attacker to access... Critical Unreviewed
CVE-2022-2139 was published Jul 23, 2022
lite-dev-server vulnerable to Directory Traversal High
CVE-2022-25895 was published for lite-dev-server (npm) Dec 21, 2022
lirantal
easy-static-server vulnerable to Directory Traversal High
CVE-2022-25931 was published for easy-static-server (npm) Dec 20, 2022
lirantal
Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified... Critical Unreviewed
CVE-2016-6517 was published May 17, 2022
Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka... Moderate Unreviewed
CVE-2013-6030 was published May 17, 2022
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote... High Unreviewed
CVE-2016-10038 was published May 17, 2022
Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin... Moderate Unreviewed
CVE-2020-10459 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database