Browse CVEs

MEDIUM 6.5 CVE-2021-22865 An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web auth… Enterprise Server 2.21.18 / 2.22.10+ Fix from $1,6002021-04-02 HIGH 8.8 CVE-2021-22864 A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-cont… Enterprise Server 2.21.17 / 2.22.9+ Fix from $1,9502021-03-23 HIGH 8.1 CVE-2021-22863 An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance … GitHub 2.20.24 / 2.21.15+ Fix from $1,9502021-03-03 MEDIUM 6.5 CVE-2021-22861 An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write ac… GitHub 2.20.24 / 2.21.15+ Fix from $1,6002021-03-03 MEDIUM 6.5 CVE-2021-22862 An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a rep… GitHub Mitigation only Fix from $1,6002021-03-03 HIGH 8.8 CVE-2020-10519 A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-cont… GitHub 2.20.24 / 2.21.15+ Fix from $1,9502021-03-03 HIGH 8.8 CVE-2020-10518 A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-cont… GitHub 2.19.21 / 2.20.15+ Fix from $1,9502020-08-27 CRITICAL 9.8 CVE-2020-10516 An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissio… GitHub 2.18.20 / 2.19.15+ Fix from $2,3002020-06-03 CRITICAL 9.8 CVE-2017-18365EPSS 21% The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute ar… GitHub 2.8.7+ Fix from $2,3002019-03-28 MEDIUM 5.8 CVE-2012-5814 Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Nam… Gaug.es No fix yet Fix from $1,6002012-11-04 HIGH 7.5 CVE-2012-2055 GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attack… GitHub 20120304+ Fix from $1,9502012-04-05