GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
967 advisories
Filter by severity
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
High
Unreviewed
CVE-2020-15645
was published
May 24, 2022
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and...
High
Unreviewed
CVE-2022-42287
was published
Jan 13, 2023
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal...
High
Unreviewed
CVE-2019-13359
was published
May 24, 2022
An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 ...
High
Unreviewed
CVE-2021-43970
was published
Mar 11, 2022
Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings...
High
Unreviewed
CVE-2022-25602
was published
Mar 19, 2022
An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows...
High
Unreviewed
CVE-2020-26007
was published
Mar 22, 2022
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action...
High
Unreviewed
CVE-2022-26965
was published
Mar 19, 2022
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is...
High
Unreviewed
CVE-2022-0687
was published
Mar 22, 2022
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload....
High
Unreviewed
CVE-2022-25581
was published
Mar 20, 2022
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0...
High
Unreviewed
CVE-2020-26008
was published
Mar 22, 2022
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
High
Unreviewed
CVE-2022-23346
was published
Mar 22, 2022
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior...
High
Unreviewed
CVE-2022-1033
was published
Mar 24, 2022
A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType...
High
Unreviewed
CVE-2021-43101
was published
Mar 30, 2022
A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function...
High
Unreviewed
CVE-2021-43103
was published
Mar 30, 2022
A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function...
High
Unreviewed
CVE-2021-43100
was published
Mar 30, 2022
Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to...
High
Unreviewed
CVE-2022-28223
was published
Mar 31, 2022
A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function,...
High
Unreviewed
CVE-2021-43102
was published
Mar 30, 2022
A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.
High
Unreviewed
CVE-2021-43098
was published
Mar 30, 2022
Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload...
High
Unreviewed
CVE-2022-23155
was published
Apr 2, 2022
Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component...
High
Unreviewed
CVE-2022-28062
was published
Apr 5, 2022
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an...
High
Unreviewed
CVE-2021-32961
was published
Apr 3, 2022
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the...
High
Unreviewed
CVE-2022-0403
was published
Apr 5, 2022
An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed...
High
Unreviewed
CVE-2020-28062
was published
Apr 5, 2022
Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via ...
High
Unreviewed
CVE-2022-26630
was published
Apr 6, 2022
An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0...
High
Unreviewed
CVE-2022-27435
was published
Apr 5, 2022
ProTip!
Advisories are also available from the
GraphQL API