Latest vulnerabilities for vendor "github"

9.6

First published (updated )

CVE-2024-52308

GitHub Enterprise ServerInfoleak

5.7

EPSS

0.05%

First published (updated )

CVE-2024-9539

GitHub Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled

9.5

EPSS

0.83%

First published (updated )

CVE-2024-9487

GitHub Enterprise ServerAn improper privilege management vulnerability allowed arbitrary workflows to be committed using an …

6.2

EPSS

0.06%

First published (updated )

CVE-2024-8263

GitHub Enterprise ServerXSS

6.1

EPSS

0.05%

First published (updated )

CVE-2024-8770

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

npm/@actions/artifactArbitrary File Write via artifact extraction in actions/artifact

7.5

First published (updated )

CVE-2024-42471

GitHub Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

9.8

EPSS

0.04%

First published (updated )

CVE-2024-6800

GitHub Enterprise ServerIncorrect Authorization allows read access to issues in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-6337

GitHub Enterprise ServerAn Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an att…

5.3

EPSS

0.05%

First published (updated )

CVE-2024-7711

GitHub Enterprise ServerGitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

6.3

EPSS

0.04%

First published (updated )

CVE-2024-6395

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerSecurity misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

6.9

EPSS

0.04%

First published (updated )

CVE-2024-6336

GitHub Enterprise ServerImproper authorization allows read access to issue content in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5817

GitHub Enterprise ServerImproper authorization allows persistent access in GitHub Enterprise Server

6.9

EPSS

0.04%

First published (updated )

CVE-2024-5816

GitHub Enterprise ServerCross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository

6.8

EPSS

0.04%

First published (updated )

CVE-2024-5815

GitHub Enterprise ServerDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

7.7

EPSS

0.04%

First published (updated )

CVE-2024-5795

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerImproper Privilege Management allows for access to unauthorized repository content during migration

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5566

The RegisterUS House of Reps tells staff: No Microsoft Copilot for you!

First published (updated )

News

The Register

The RegisterOver 170K users caught up in poisoned Python package ruse

First published (updated )

News

The Register

BleepingComputerHackers poison source code from largest Discord bot platform

First published (updated )

News

BleepingComputer

BleepingComputerOver 12 million auth secrets and keys leaked on GitHub in 2023

First published (updated )

News

BleepingComputer

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1378

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1374

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1372

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1369

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1359

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1355

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

8

First published (updated )

CVE-2024-1354

GitHub Enterprise ServerPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload

6.5

First published (updated )

CVE-2024-1082

GitHub Enterprise ServerXSS, CSRF

6.5

First published (updated )

CVE-2024-1084

GitHub Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

8.8

EPSS

0.06%

First published (updated )

CVE-2024-0507

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.