Filter
Versions
GitHub Enterprise ServerUnsafe Reflection in Github Enterprise Server leading to Command Injection
9.8
EPSS
0.37%
First published (updated )
GitHub Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…
9.8
EPSS
0.04%
First published (updated )
GitHub Enterprise ServerImproper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group
9.8
First published (updated )
GitHub Enterprise ServerImproper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE
9.8
First published (updated )
GitHub Enterprise ServerIncorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitHub Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled
9.5
EPSS
0.83%
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
9.1
First published (updated )
GitHub Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server
8.8
EPSS
0.06%
First published (updated )
GitHub Enterprise ServerUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
8.8
First published (updated )
GitHub Enterprise ServerUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitHub Enterprise ServerImproper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
8.8
First published (updated )
GitHub Enterprise ServerUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources
8.8
First published (updated )
GitHub Enterprise ServerPath traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
8.8
First published (updated )
GitHub Enterprise ServerDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution
8.8
First published (updated )
GitHub Enterprise ServerImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages
8.8
First published (updated )
GitHub Enterprise ServerCode injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions
8.8
First published (updated )
GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to remote code execution
8.8
First published (updated )
GitHub Enterprise ServerImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation
8.8
First published (updated )
GitHub Enterprise ServerInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token
8.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitHub Enterprise ServerSensitive Information in Log File in GitHub Enterprise Server
8.1
EPSS
0.09%
First published (updated )
GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
8
First published (updated )
GitHub Enterprise ServerDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion
7.7
EPSS
0.04%
First published (updated )
GitHub Enterprise ServerImproper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists
7.7
First published (updated )
GitHub Enterprise ServerImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data
7.5
EPSS
0.06%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.