Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,780
Erlang
36
GitHub Actions
29
Go
2,344
Maven
5,000+
npm
3,973
NuGet
719
pip
3,770
Pub
12
RubyGems
923
Rust
978
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

40 advisories

Loading
Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before... Moderate Unreviewed
CVE-2023-24542 was published Oct 10, 2024
A vulnerability has been found in the CPython `venv` module and CLI where path names provided... Moderate Unreviewed
CVE-2024-9287 was published Oct 22, 2024
Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker... Moderate Unreviewed
CVE-2021-36631 was published Dec 22, 2022
Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE)... Moderate Unreviewed
CVE-2025-1984 was published Mar 12, 2025
Local privilege escalation due to unquoted search path vulnerability. The following products are... Moderate Unreviewed
CVE-2025-24831 was published Jan 31, 2025
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If... Moderate Unreviewed
CVE-2022-27592 was published Sep 6, 2024
Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager... Moderate Unreviewed
CVE-2024-5963 was published Aug 6, 2024
Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who... Moderate Unreviewed
CVE-2024-5402 was published Jul 15, 2024
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such... Moderate Unreviewed
CVE-2024-31201 was published Jul 31, 2024
Unquoted search path or element in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows... Moderate Unreviewed
CVE-2023-29165 was published Nov 14, 2023
Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local... Moderate Unreviewed
CVE-2024-4031 was published Apr 23, 2024
A vulnerability was found in AO-OPC server versions mentioned above. As the directory information... Moderate Unreviewed
CVE-2023-2685 was published Jul 28, 2023
Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129... Moderate Unreviewed
CVE-2019-11093 was published May 24, 2022
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could... Moderate Unreviewed
CVE-2023-0392 was published Nov 8, 2023
Unquoted search path in the installer for some Intel Server Configuration Utility software before... Moderate Unreviewed
CVE-2023-25075 was published Nov 14, 2023
Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update... Moderate Unreviewed
CVE-2023-32658 was published Nov 14, 2023
A vulnerability, which was classified as problematic, was found in Topaz OFD 2.11.0.201. This... Moderate Unreviewed
CVE-2023-5012 was published Sep 16, 2023
A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1... Moderate Unreviewed
CVE-2023-2644 was published May 11, 2023
A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as... Moderate Unreviewed
CVE-2023-2417 was published Apr 29, 2023
A local unquoted search path security vulnerability has been identified in HPE Agentless... Moderate Unreviewed
CVE-2021-29218 was published Feb 10, 2022
An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and... Moderate Unreviewed
CVE-2017-14019 was published May 13, 2022
Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server,... Moderate Unreviewed
CVE-2018-2406 was published May 13, 2022
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel... Moderate Unreviewed
CVE-2014-5455 was published May 13, 2022
Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender... Moderate Unreviewed
CVE-2015-4173 was published May 13, 2022
A local administrator could prevent the HMPA service from starting despite tamper protection... Moderate Unreviewed
CVE-2021-25269 was published Nov 27, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database