GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,298
Erlang
31
GitHub Actions
21
Go
2,063
Maven
5,000+
npm
3,744
NuGet
668
pip
3,424
Pub
12
RubyGems
892
Rust
876
Swift
36
Unreviewed advisories
All unreviewed
5,000+
472 advisories
Filter by severity
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a...
Moderate
Unreviewed
CVE-2019-9692
was published
May 14, 2022
Symfony Path Disclosure
Moderate
CVE-2018-19789
was published
for
symfony/form
(Composer)
May 14, 2022
Drupal Settings Tray access bypass
Moderate
CVE-2017-6931
was published
for
drupal/core
(Composer)
May 13, 2022
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...
Moderate
Unreviewed
CVE-2017-11405
was published
May 13, 2022
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...
Moderate
Unreviewed
CVE-2017-11404
was published
May 13, 2022
On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user...
Moderate
Unreviewed
CVE-2018-15333
was published
May 13, 2022
Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for...
Moderate
Unreviewed
CVE-2018-0587
was published
May 13, 2022
Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload...
Moderate
Unreviewed
CVE-2018-4921
was published
May 13, 2022
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...
Moderate
Unreviewed
CVE-2018-15424
was published
May 13, 2022
Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG...
Moderate
Unreviewed
CVE-2016-10258
was published
May 13, 2022
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
Moderate
CVE-2022-1411
was published
for
yetiforce/yetiforce-crm
(Composer)
May 6, 2022
TYPO3 Unrestricted File Upload vulnerability
Moderate
CVE-2008-2717
was published
for
typo3/cms-core
(Composer)
May 1, 2022
Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier,...
Moderate
Unreviewed
CVE-2006-6994
was published
May 1, 2022
Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated...
Moderate
Unreviewed
CVE-2006-5845
was published
May 1, 2022
The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users...
Moderate
Unreviewed
CVE-2006-4471
was published
May 1, 2022
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading...
Moderate
Unreviewed
CVE-2006-2428
was published
May 1, 2022
Mailsite Express allows remote attackers to upload and execute files with executable extensions...
Moderate
Unreviewed
CVE-2005-3288
was published
May 1, 2022
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for...
Moderate
Unreviewed
CVE-2005-0254
was published
May 1, 2022
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that...
Moderate
Unreviewed
CVE-2002-1841
was published
Apr 30, 2022
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote...
Moderate
Unreviewed
CVE-2001-1099
was published
Apr 30, 2022
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which...
Moderate
Unreviewed
CVE-2004-2262
was published
Apr 29, 2022
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.
Moderate
Unreviewed
CVE-2022-1045
was published
Apr 12, 2022
pgAdmin 4 Path Traversal vulnerability
Moderate
CVE-2022-0959
was published
for
pgadmin4
(pip)
Mar 17, 2022
File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc
Moderate
CVE-2022-0951
was published
for
showdoc/showdoc
(Composer)
Mar 16, 2022
Cross-site Scripting in ShowDoc
Moderate
CVE-2022-0950
was published
for
showdoc/showdoc
(Composer)
Mar 16, 2022
ProTip!
Advisories are also available from the
GraphQL API