GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
963 advisories
Filter by severity
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
Critical
CVE-2018-1000544
was published
for
rubyzip
(RubyGems)
Sep 6, 2018
Unrestricted Upload of File with Dangerous Type in blueimp-file-upload
Critical
CVE-2018-9206
was published
for
blueimp-file-upload
(npm)
Oct 22, 2018
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
Critical
CVE-2018-18830
was published
for
net.mingsoft:ms-mcms
(Maven)
Nov 1, 2018
Unrestricted Upload of File with Dangerous Type in jquery-file-upload
Critical
CVE-2018-9207
was published
for
jquery-file-upload
(npm)
Dec 19, 2018
Remote code execution in verot/class.upload.php
Critical
CVE-2019-19576
was published
for
verot/class.upload.php
(Composer)
Jan 16, 2020
Unrestricted upload of file with dangerous type in Apache Solr
Critical
CVE-2019-12409
was published
for
org.apache.solr:solr-core
(Maven)
Jan 28, 2020
class.upload.php in verot.net omits .pht from the set of dangerous file extensions
Critical
CVE-2019-19634
was published
for
verot/class.upload.php
(Composer)
Feb 28, 2020
Unrestricted Upload of File with Dangerous Type in django-widgy
Critical
CVE-2020-18704
was published
for
django-widgy
(pip)
Aug 30, 2021
Unrestricted File Upload in ShowDoc v2.9.5
Critical
CVE-2021-36440
was published
for
showdoc/showdoc
(Composer)
Sep 9, 2021
Showdoc File Upload Vulnerability
Critical
CVE-2021-41745
was published
for
showdoc/showdoc
(Composer)
Oct 25, 2021
Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
Critical
Unreviewed
CVE-2021-42099
was published
Dec 1, 2021
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI...
Critical
Unreviewed
CVE-2021-43936
was published
Dec 7, 2021
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution...
Critical
Unreviewed
CVE-2021-43117
was published
Dec 14, 2021
A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.
Critical
Unreviewed
CVE-2021-40883
was published
Dec 15, 2021
OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an...
Critical
Unreviewed
CVE-2021-41560
was published
Dec 16, 2021
Chain Sea ai chatbot system’s file upload function has insufficient filtering for special...
Critical
Unreviewed
CVE-2021-44164
was published
Dec 21, 2021
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker...
Critical
Unreviewed
CVE-2021-44159
was published
Dec 21, 2021
An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles...
Critical
Unreviewed
CVE-2021-44031
was published
Dec 23, 2021
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database...
Critical
Unreviewed
CVE-2021-45411
was published
Jan 13, 2022
An unrestricted file upload vulnerability exists in Sourcecodester Free school management...
Critical
Unreviewed
CVE-2021-46013
was published
Jan 19, 2022
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows...
Critical
Unreviewed
CVE-2021-38697
was published
Jan 19, 2022
Arbitrary file upload in Mingsoft MCMS
Critical
CVE-2022-23315
was published
for
net.mingsoft:ms-mcms
(Maven)
Jan 22, 2022
Arbitrary File Upload in Mingsoft MCMS
Critical
CVE-2022-22929
was published
for
net.mingsoft:ms-mcms
(Maven)
Jan 22, 2022
In ForestBlog, as of 2021-12-28, File upload can bypass verification.
Critical
Unreviewed
CVE-2021-46033
was published
Jan 26, 2022
Mingsoft MCMS vulnerable to Remote Code Execution via file upload.
Critical
CVE-2021-46386
was published
for
net.mingsoft:ms-mcms
(Maven)
Jan 27, 2022
ProTip!
Advisories are also available from the
GraphQL API