Skip to contentGithub vulnerabilities
Newest
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13729.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13699.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13599.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13559.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13548.0 High
- github enterprise serverPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact uploadCVE-2024-10826.3 Medium
- github enterprise serverCross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise...CVE-2024-10846.5 Medium
- github enterprise serverPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise ServerCVE-2024-0507Public exploitEPSS 65.8%6.5 Medium
- github enterprise serverUnsafe Reflection in Github Enterprise Server leading to Command InjectionCVE-2024-0200EPSS 71.7%7.2 High
- github view componentview_component Cross-site Scripting vulnerabilityCVE-2024-21636Fix available6.1 Medium
- github enterprise serverImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository DataCVE-2023-68477.5 High
- github enterprise serverIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise ServerCVE-2023-513802.7 Low
- github enterprise serverIncorrect Authorization for Issue Comments in GitHub Enterprise ServerCVE-2023-513794.9 Medium
- github enterprise serverInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenCVE-2023-466488.3 High
- github enterprise serverRace Condition allows Administrative Access on Organization RepositoriesCVE-2023-466496.3 Medium
- github enterprise serverImproper Privilege Management allows for arbitrary workflows to be runCVE-2023-68046.5 Medium
- github enterprise serverRace Condition allows Unauthorized Outside CollaboratorCVE-2023-68035.8 Medium
- github enterprise serverSensitive Information in Log File in GitHub Enterprise ServerCVE-2023-68027.2 High
- github enterprise serverSensitive Information in Log File in GitHub Enterprise ServerCVE-2023-67468.1 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages siteCVE-2023-466456.8 Medium
- github enterprise serverA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on...CVE-2023-66903.9 Low
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalationCVE-2023-466478.0 High
- github enterprise serverImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to...CVE-2023-466465.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237664.5 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to private repository leakageCVE-2023-237635.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237654.8 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237644.8 Medium
- github enterprise server, micro focus cobol server, enterprise developer +2 more +4 moreMitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.CVE-2023-322657.1 High
- github cmark-gfmQuadratic complexity bugs may lead to a denial of serviceCVE-2023-37463Fix available6.4 Medium
- github pull requests and issues, microsoft visual studio code - github pull requests and issues extension +1 moreVisual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution VulnerabilityCVE-2023-368677.8 High
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237626.5 Medium
- github enterprise serverImproper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gistsCVE-2023-237617.7 High
- github cmark-gfmQuadratic complexity may lead to a denial of service in cmark-gfmCVE-2023-24824Fix available5.3 Medium
- github cmark-gfmQuadratic complexity may lead to a denial of service in cmark-gfmCVE-2023-26485Fix available5.3 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code executionCVE-2023-237604.9 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository namesCVE-2022-462574.3 Medium
- github enterprise serverCode injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub ActionsCVE-2023-223814.1 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages siteCVE-2023-223806.5 Medium
- github cmark-gfmcmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of serviceCVE-2023-22486Fix available3.5 Low
- github cmark-gfmcmark-gfm out-of-bounds read in validate_protocolCVE-2023-22485Fix available5.3 Medium
- github cmark-gfmInefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of serviceCVE-2023-22484Fix available3.5 Low
- github cmark-gfmcmark-gfm Quadratic complexity bugs may lead to a denial of serviceCVE-2023-22483Fix available3.5 Low
- github enterprise serverIncorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokensCVE-2022-237399.8 Critical
- github enterprise serverIncorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow ScopeCVE-2022-462586.5 Medium
- github 491-projectpurpleparrots 491-Project Highscore update.php sql injectionCVE-2015-100315.5 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub PagesCVE-2022-462568.8 High
- github enterprise serverImproper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCECVE-2022-462559.8 Critical
- github enterprise serverIncorrect authorization in GitHub Enterprise Server token generation leading to full admin accessCVE-2022-237417.2 High
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server leading to page creation and deletionCVE-2022-237376.5 Medium
- github enterprise serverImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code ExecutionCVE-2022-237408.8 High
- Show moreLoading…