Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+

7,184 advisories

Loading
dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be... Moderate Unreviewed
CVE-2014-3227 was published May 17, 2022
Path Traversal in nemo-toolkit Moderate
CVE-2022-22821 was published for nemo-toolkit (pip) Jan 11, 2022
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers... Moderate Unreviewed
CVE-2014-4306 was published May 17, 2022
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote... Moderate Unreviewed
CVE-2014-1442 was published May 17, 2022
Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4... Moderate Unreviewed
CVE-2014-1970 was published May 17, 2022
Directory traversal vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to read... Moderate Unreviewed
CVE-2014-2352 was published May 17, 2022
dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature... High Unreviewed
CVE-2014-3127 was published May 17, 2022
Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote... Moderate Unreviewed
CVE-2013-1806 was published May 17, 2022
Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and... Moderate Unreviewed
CVE-2014-1974 was published May 17, 2022
Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read... Moderate Unreviewed
CVE-2014-2976 was published May 17, 2022
Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow... High Unreviewed
CVE-2014-0358 was published May 17, 2022
Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x... High Unreviewed
CVE-2014-2863 was published May 17, 2022
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x... High Unreviewed
CVE-2011-3315 was published May 17, 2022
Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote... Moderate Unreviewed
CVE-2013-7097 was published May 17, 2022
Directory traversal vulnerability in the apps4u@android SD Card Manager application before... Moderate Unreviewed
CVE-2014-1969 was published May 17, 2022
Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to... Moderate Unreviewed
CVE-2013-6000 was published May 17, 2022
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows... Moderate Unreviewed
CVE-2012-5192 was published May 17, 2022
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee... Moderate Unreviewed
CVE-2014-2536 was published May 17, 2022
Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before... High Unreviewed
CVE-2014-2864 was published May 17, 2022
Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome... High Unreviewed
CVE-2013-6652 was published May 17, 2022
IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to... High Unreviewed
CVE-2019-4460 was published May 24, 2022
Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2... Moderate Unreviewed
CVE-2013-6768 was published May 17, 2022
Directory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has... High Unreviewed
CVE-2014-1707 was published May 17, 2022
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations High
CVE-2022-26049 was published for com.diffplug.gradle:goomph (Maven) Sep 12, 2022
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows... Moderate Unreviewed
CVE-2013-2641 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database