Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Unsafe deserialization in Yii 2 CVE-2020-15148, GHSA-699q-wcff-g9mj | Critical | 77.5% | 15 Sep, 2020 | Packagist yiisoft/yii2 |
Potential XSS injection In PrestaShop contactform CVE-2020-15178, GHSA-95hx-62rh-gg96 | Critical | 1.2% | 15 Sep, 2020 | Packagist prestashop/contactform |
Authentication bypass in MAGMI CVE-2020-5777, GHSA-g475-pch5-6wvv | Critical | 23.3% | 01 Sep, 2020 | Packagist dweeves/magmi |
Remote Code Execution in SyliusResourceBundle CVE-2020-15146, GHSA-h6m7-j4h3-9rf5 | Critical | 2.1% | 19 Aug, 2020 | Packagist sylius/resource-bundle |
Potential Remote Code Execution in TYPO3 with mediace extension CVE-2020-15086, GHSA-4h44-w6fm-548g | Critical | 3.6% | 29 Jul, 2020 | Packagist friendsoftypo3/mediace |
Magento DOM-based Cross-site scripting vulnerability BIT-magento-2020-9691, CVE-2020-9691, GHSA-g7pc-799q-743f | Critical | 6.0% | 29 Jul, 2020 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento php object injection vulnerability CVE-2020-9664, GHSA-337c-3rch-q35j | Critical | 8.4% | 22 Jul, 2020 | Packagist magento/core |
Magento security mitigation bypass vulnerability BIT-magento-2020-9632, CVE-2020-9632, GHSA-6w29-x5j4-qhrw | Critical | 7.4% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento security mitigation bypass vulnerability BIT-magento-2020-9631, CVE-2020-9631, GHSA-gffx-9f36-r8wp | Critical | 7.4% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento business logic error vulnerability BIT-magento-2020-9630, CVE-2020-9630, GHSA-5j4w-v87m-8r65 | Critical | 4.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Defense-in-depth security mitigation vulnerability BIT-magento-2020-9585, CVE-2020-9585, GHSA-55gv-hfg3-hwjq | Critical | 4.9% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9583, CVE-2020-9583, GHSA-c55h-7q4j-g6rq | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9582, CVE-2020-9582, GHSA-c3m4-hxv9-4mxj | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Security mitigation bypass vulnerability BIT-magento-2020-9580, CVE-2020-9580, GHSA-j2jp-58gv-g2pg | Critical | 5.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Security mitigation bypass vulnerability BIT-magento-2020-9579, CVE-2020-9579, GHSA-vrp3-wc28-qg2h | Critical | 5.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core |
Magento command injection vulnerability BIT-magento-2020-9578, CVE-2020-9578, GHSA-724x-gqhv-9c5x | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9576, CVE-2020-9576, GHSA-4f7x-gjqc-qqpg | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Phar unserialization vulnerability in phpMussel CVE-2020-4043, GHSA-qr95-4mq5-r3fh | Critical | 2.6% | 10 Jun, 2020 | Packagist Maikuolan/phpMussel Packagist maikuolan/phpmussel Packagist phpmussel/phpmussel |
Critical severity vulnerability in Ignition CVE-2020-13909, GHSA-m5v7-pr32-mjx2 | Critical | 1.5% | 07 Jun, 2020 | Packagist facade/ignition |
Potential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar CVE-2020-11094, GHSA-c8wh-6jw4-2h79 | Critical | 1.0% | 03 Jun, 2020 | Packagist rainlab/debugbar-plugin |
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors() CVE-2020-13756, GHSA-phrq-v4q2-hmq6 | Critical | 49.8% | 03 Jun, 2020 | Packagist sabberworm/php-css-parser |
bbPress unauthenticated privilege-escalation CVE-2020-13693, GHSA-mwxh-6j9v-45ph | Critical | 43.9% | 29 May, 2020 | Packagist bbpress/bbpress |
Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header CVE-2020-13485, GHSA-wxvr-qqm7-6h65 | Critical | 1.4% | 25 May, 2020 | Packagist verbb/knock-knock |
Class destructors causing side-effects when being unserialized in TYPO3 CMS BIT-typo3-2020-11066, CVE-2020-11066, GHSA-2rxh-h6h9-qrqc | Critical | 1.5% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Potential Code Injection in Sprout Forms CVE-2020-11056, GHSA-px8v-hxxx-2rgh | Critical | 1.0% | 07 May, 2020 | Packagist barrelstrength/sprout-base-email Packagist barrelstrength/sprout-forms |
Moodle Oauth 2 Insufficiently Protects Against Compromise CVE-2019-14880, GHSA-rv62-6f56-j83w | Critical | 1.1% | 31 Mar, 2020 | Packagist moodle/moodle |
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type CVE-2020-10806, GHSA-54p5-gxq6-j98g | Critical | 2.3% | 22 Mar, 2020 | Packagist ezsystems/ezpublish-kernel Packagist ezsystems/ezpublish-legacy |
Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php CVE-2019-19212, GHSA-pm57-926c-28mr | Critical | 3.9% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Code injection in codiad CVE-2019-19208, GHSA-v92m-hhhw-vv9v | Critical | 19.2% | 16 Mar, 2020 | Packagist codiad/codiad |
Fat-Free Framework arbitrary code execution CVE-2020-5203, GHSA-hpj2-4hfj-g233 | Critical | 2.1% | 11 Mar, 2020 | Packagist bcosca/fatfree |
SEOmatic for CraftCMS allows Server-Side Template Injection CVE-2020-9757, GHSA-6q4j-8pjm-5mgc | Critical | 72.8% | 04 Mar, 2020 | Packagist nystudio107/craft-seomatic |
Zend Framework SQL injection vulnerability CVE-2014-8089, GHSA-qh9w-r7g5-q939 | Critical | 2.5% | 17 Feb, 2020 | Packagist zendframework/zend-db Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
jQuery File Upload Plugin Unrestricted file upload vulnerability CVE-2014-8739, GHSA-wxg6-f773-g2f7 | Critical | 91.9% | 08 Feb, 2020 | Packagist blueimp/jquery-file-upload |
Magento security bypass vulnerability BIT-magento-2020-3718, CVE-2020-3718, GHSA-x9p7-vgp2-9pq2 | Critical | 7.5% | 29 Jan, 2020 | Packagist magento/community-edition Packagist magneto/core |
Magento deserialization vulnerability BIT-magento-2020-3716, CVE-2020-3716, GHSA-9wc9-498w-h8xv | Critical | 14.0% | 29 Jan, 2020 | Packagist magento/community-edition |
Dolibarr Improper Restriction of Excessive Authentication Attempts BIT-dolibarr-2020-7995, CVE-2020-7995, GHSA-m5c3-3gvf-q8j5 | Critical | 4.5% | 26 Jan, 2020 | Packagist dolibarr/dolibarr |
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability CVE-2014-4172, GHSA-9fc5-q25c-r2wr | Critical | 6.1% | 24 Jan, 2020 | Maven org.jasig.cas:cas-client NuGet DotNetCasClient Packagist jasig/phpcas |
ImpressPages CMS RCE CVE-2011-4943, GHSA-4xf9-4r44-86rc | Critical | 1.8% | 22 Jan, 2020 | Packagist impresspages/impresspages |
Drupal SQL Injection vulnerability CVE-2011-2715, GHSA-hcq9-hmgf-6qr9 | Critical | 1.1% | 14 Jan, 2020 | Packagist drupal/core |
php-shellcommand command injection vulnerability CVE-2019-10774, GHSA-c7fv-wv9f-cgjw, SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426 | Critical | 4.6% | 30 Dec, 2019 | Packagist mikehaertl/php-shellcommand |
class.upload.php in verot.net omits .pht from the set of dangerous file extensions CVE-2019-19634, GHSA-2gc7-w4hw-rr2m | Critical | 4.2% | 17 Dec, 2019 | Packagist verot/class.upload.php |
Object injection in cookie driver in phpfastcache CVE-2019-16774, GHSA-484f-743f-6jx2 | Critical | 1.2% | 12 Dec, 2019 | Packagist phpfastcache/phpfastcache |
phpMyAdmin unsanitized Git information CVE-2019-19617, GHSA-pgph-mc4p-f8c3 | Critical | 2.3% | 06 Dec, 2019 | Packagist phpmyadmin/phpmyadmin |
Remote code execution in verot/class.upload.php CVE-2019-19576, GHSA-r5gm-4p5w-pq2p | Critical | 26.4% | 04 Dec, 2019 | Packagist verot/class.upload.php |
Typo3 SQL injection due to faulty prepared statements CVE-2011-3583, GHSA-gx4p-6w86-f8jx | Critical | 1.4% | 26 Nov, 2019 | Packagist typo3/cms |
SQL injection in phpMyAdmin CVE-2019-18622, GHSA-jgjc-332c-8cmc | Critical | 2.2% | 22 Nov, 2019 | Packagist phpmyadmin/phpmyadmin |
Symfony Unsafe Cache Serialization Could Enable RCE CVE-2019-18889, GHSA-79gr-58r3-pwm3 | Critical | 33.2% | 21 Nov, 2019 | Packagist symfony/cache Packagist symfony/symfony |
Improper Input Validation in Symfony CVE-2019-11325, GHSA-w4rc-rx25-8m86 | Critical | 3.4% | 21 Nov, 2019 | Packagist symfony/symfony Packagist symfony/var-exporter |
Smarty3 Arbitrary PHP Code Execution CVE-2011-1028, GHSA-6frx-2r5w-c524 | Critical | 1.6% | 20 Nov, 2019 | Packagist smarty/smarty |
SQL Injection in usmanhalalit/pixie CVE-2019-10766, GHSA-68wg-qv6r-j4vp, SNYK-PHP-USMANHALALITPIXIE-534879 | Critical | 1.5% | 19 Nov, 2019 | Packagist usmanhalalit/pixie |