Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,318
Erlang
31
GitHub Actions
21
Go
2,074
Maven
5,000+
npm
3,746
NuGet
674
pip
3,434
Pub
12
RubyGems
892
Rust
880
Swift
37
Unreviewed advisories
All unreviewed
5,000+

969 advisories

Loading
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5... Critical Unreviewed
CVE-2024-34982 was published May 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND... Critical Unreviewed
CVE-2024-32809 was published May 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content... Critical Unreviewed
CVE-2024-31351 was published May 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best... Critical Unreviewed
CVE-2023-25444 was published May 17, 2024
An unauthenticated attacker can upload a malicious file to the server which when accessed by a... Critical Unreviewed
CVE-2024-33006 was published May 14, 2024
Cockpit CMS contains an arbitrary file upload vulenrability Critical
CVE-2024-4825 was published for cockpit-hq/cockpit (Composer) May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in URBAN BASE Z-Downloads.This... Critical Unreviewed
CVE-2024-34555 was published May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT... Critical Unreviewed
CVE-2024-34440 was published May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue... Critical Unreviewed
CVE-2024-34416 was published May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light... Critical Unreviewed
CVE-2024-34411 was published May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for... Critical Unreviewed
CVE-2024-32700 was published May 14, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP... Critical Unreviewed
CVE-2024-31377 was published May 14, 2024
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath... Critical Unreviewed
CVE-2024-33120 was published May 7, 2024
An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04... Critical Unreviewed
CVE-2024-33786 was published May 3, 2024
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution... Critical Unreviewed
CVE-2023-51590 was published May 3, 2024
Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This... Critical Unreviewed
CVE-2024-4306 was published Apr 29, 2024
Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community:... Critical Unreviewed
CVE-2024-0916 was published Apr 26, 2024
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php. Critical Unreviewed
CVE-2024-31615 was published Apr 25, 2024
pyLoad allows upload to arbitrary folder lead to RCE Critical
CVE-2024-32880 was published for pyload-ng (pip) Apr 24, 2024
zhcy2018
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited... Critical Unreviewed
CVE-2023-31090 was published Apr 24, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Tribulant Newsletters.This issue... Critical Unreviewed
CVE-2024-32954 was published Apr 24, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay... Critical Unreviewed
CVE-2024-32836 was published Apr 24, 2024
A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via... Critical Unreviewed
CVE-2024-29661 was published Apr 22, 2024
jizhiCMS 2.5 suffers from a File upload vulnerability. Critical Unreviewed
CVE-2024-32161 was published Apr 17, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plugin Team ... Critical Unreviewed
CVE-2024-32514 was published Apr 17, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database