Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

2,458 advisories

Loading
The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability... Critical Unreviewed
CVE-2024-9307 was published Nov 6, 2024
An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows... Critical Unreviewed
CVE-2024-41577 was published Aug 12, 2024
An issue discovered in moziloCMS v2.0 allows attackers to bypass file upload restrictions and run... Moderate Unreviewed
CVE-2024-29368 was published Apr 22, 2024
*Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS... High Unreviewed
CVE-2024-48734 was published Oct 30, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Helloprint Plug your WooCommerce... Critical Unreviewed
CVE-2024-50525 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in David F. Carr RSVPMaker for... Critical Unreviewed
CVE-2024-50531 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Rudra Innnovative Software... Critical Unreviewed
CVE-2024-50529 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP... Critical Unreviewed
CVE-2024-50530 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder... Critical Unreviewed
CVE-2024-50527 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post... Critical Unreviewed
CVE-2024-50523 was published Nov 4, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose Mail... Critical Unreviewed
CVE-2024-50526 was published Nov 4, 2024
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction... Critical Unreviewed
CVE-2023-52044 was published Oct 31, 2024
An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized... High Unreviewed
CVE-2024-48646 was published Oct 30, 2024
Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to... High Unreviewed
CVE-2024-48093 was published Oct 30, 2024
icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. Critical Unreviewed
CVE-2024-48202 was published Oct 30, 2024
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due... Critical Unreviewed
CVE-2024-10392 was published Oct 31, 2024
File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute... High Unreviewed
CVE-2024-48594 was published Oct 28, 2024
SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in... Critical Unreviewed
CVE-2024-25802 was published Feb 22, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Web and Print Design AR For... Critical Unreviewed
CVE-2024-50510 was published Oct 30, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia... Critical Unreviewed
CVE-2024-50511 was published Oct 30, 2024
The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to... High Unreviewed
CVE-2024-7985 was published Oct 29, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic OÜ SurveyJS: Drag... Critical Unreviewed
CVE-2024-50427 was published Oct 29, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows... Critical Unreviewed
CVE-2024-50420 was published Oct 29, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway... Critical Unreviewed
CVE-2024-50494 was published Oct 29, 2024
Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce... Critical Unreviewed
CVE-2024-50482 was published Oct 29, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database