Latest vulnerabilities for vendor "github"

9.9

First published (updated )

CVE-2022-39321

Github Cmark-gfmCommonMarker Integer Overflow Vulnerability

9.8

EPSS

0.42%

First published (updated )

CVE-2024-22051

GitHub Enterprise ServerUnsafe Reflection in Github Enterprise Server leading to Command Injection

9.8

EPSS

0.37%

First published (updated )

CVE-2024-0200

GitHub Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

9.8

EPSS

0.04%

First published (updated )

CVE-2024-6800

GitHub GitHubImproper access control in GitHub Enterprise Server leading to privilege escalation of organization member

9.8

First published (updated )

CVE-2020-10516

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerImproper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group

9.8

First published (updated )

CVE-2021-22869

GitHub GitHubThe Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allo…

9.8

First published (updated )

CVE-2017-18365

Fedoraproject FedoraInteger overflow in table parsing extension leads to heap memory corruption

9.8

First published (updated )

CVE-2022-24724

GitHub Enterprise ServerImproper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE

9.8

First published (updated )

CVE-2022-46255

Github 491-projectpurpleparrots 491-Project Highscore update.php sql injection

9.8

First published (updated )

CVE-2015-10031

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerIncorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens

9.8

First published (updated )

CVE-2022-23739

go/github.com/cli/cliConnecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

9.6

First published (updated )

CVE-2024-52308

GitHub Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled

9.5

EPSS

0.83%

First published (updated )

CVE-2024-9487

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1355

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1378

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1359

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1369

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1374

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

9.1

First published (updated )

CVE-2024-1372

GitHub Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

8.8

EPSS

0.06%

First published (updated )

CVE-2024-0507

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user

8.8

First published (updated )

CVE-2021-41598

GitHub Enterprise ServerUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server

8.8

First published (updated )

CVE-2021-22864

GitHub GitHubUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server

8.8

First published (updated )

CVE-2020-10519

GitHub Enterprise ServerImproper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution

8.8

First published (updated )

CVE-2021-41599

GitHub Enterprise ServerUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources

8.8

First published (updated )

CVE-2021-22866

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub GitHubUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server

8.8

First published (updated )

CVE-2020-10518

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections

8.8

First published (updated )

CVE-2022-23732

GitHub Enterprise ServerDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution

8.8

First published (updated )

CVE-2022-23734

GitHub Enterprise ServerImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution

8.8

First published (updated )

CVE-2022-23740

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages

8.8

First published (updated )

CVE-2022-46256

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.