2022

The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The `core.exportVariable` functio

undici is an HTTP/1.1 client, written from scratch for Node.js.`=< [email protected]` users are vulnerable to _CRLF Injection

An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess us

Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.

A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Aff

A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is a

A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects u

A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unkn

The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing

The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated us

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it ba

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the s

The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.

The GREYD.SUITE WordPress theme does not properly validate uploaded custom font packages, and does not perform any autho

The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privile

The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them ba

undici is an HTTP/1.1 client, written from scratch for Node.js.`undici` is vulnerable to SSRF (Server-side Request Forge

Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. When the extended fil

This Rails gem adds two methods to the ActiveRecord::Base class that allow you to update many records on a single databa

BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to re

Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attack

In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, a

An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Dir

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an un

A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some un

A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerabi

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. Th

A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected b

Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to en

Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a u

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a

Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install

Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a u

Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who c

Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacke

Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to ins

Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced

Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cro

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit

Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a u

Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who

Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attac

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to

Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convin

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convi