GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,342
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
150 advisories
Filter by severity
Apache Solr Relative Path Traversal vulnerability
Moderate
CVE-2024-52012
was published
for
org.apache.solr:solr-core
(Maven)
Jan 27, 2025
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A...
High
Unreviewed
CVE-2025-23011
was published
Jan 23, 2025
Relative Path Traversal vulnerability in Webangon The Pack Elementor addons allows PHP Local File...
High
Unreviewed
CVE-2024-50453
was published
Oct 28, 2024
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0...
Moderate
Unreviewed
CVE-2024-32116
was published
Nov 12, 2024
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...
Low
Unreviewed
CVE-2024-35274
was published
Nov 12, 2024
A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through...
Moderate
Unreviewed
CVE-2024-32115
was published
Jan 14, 2025
A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and...
Moderate
Unreviewed
CVE-2024-46664
was published
Jan 14, 2025
A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms...
Moderate
Unreviewed
CVE-2025-0390
was published
Jan 11, 2025
A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives...
Moderate
Unreviewed
CVE-2025-0225
was published
Jan 5, 2025
A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S...
Moderate
Unreviewed
CVE-2024-13130
was published
Jan 5, 2025
@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability
High
CVE-2024-45816
was published
for
@backstage/plugin-techdocs-backend
(npm)
Sep 17, 2024
A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2...
Moderate
Unreviewed
CVE-2024-12897
was published
Dec 23, 2024
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5...
Critical
Unreviewed
CVE-2023-34990
was published
Dec 18, 2024
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0...
High
Unreviewed
CVE-2023-42791
was published
Feb 20, 2024
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions ...
High
Unreviewed
CVE-2024-27199
was published
Mar 4, 2024
The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application...
Moderate
Unreviewed
CVE-2024-12645
was published
Dec 16, 2024
TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The...
High
Unreviewed
CVE-2024-12642
was published
Dec 16, 2024
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been rated as problematic....
Moderate
Unreviewed
CVE-2024-12482
was published
Dec 12, 2024
Microsoft SharePoint Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2024-49062
was published
Dec 12, 2024
Ansible galaxy-importer Path Traversal vulnerability
Moderate
CVE-2023-5189
was published
for
galaxy-importer
(pip)
Nov 15, 2023
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in...
High
Unreviewed
CVE-2024-54154
was published
Dec 4, 2024
The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote...
High
Unreviewed
CVE-2024-11067
was published
Nov 11, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of...
Critical
Unreviewed
CVE-2024-11312
was published
Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of...
Critical
Unreviewed
CVE-2024-11313
was published
Nov 18, 2024
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers...
High
Unreviewed
CVE-2024-11310
was published
Nov 18, 2024
ProTip!
Advisories are also available from the
GraphQL API