Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability CVE-2018-9209, GHSA-j78w-6r73-22vh | Critical | 1.8% | 19 Nov, 2018 | Packagist fineuploader/php-traditional-server |
Centreon allows SNMP trap SQL Injection CVE-2018-19281, GHSA-w2xf-4gg9-87wr | Critical | 1.8% | 14 Nov, 2018 | Packagist centreon/centreon |
ThinkPHP SQLi Vulnerability CVE-2018-18546, GHSA-j7g8-3qqg-8cvm | Critical | 1.7% | 21 Oct, 2018 | Packagist topthink/framework |
ThinkPHP SQLi Vulnerability CVE-2018-18530, GHSA-7xfj-4jpg-58vf | Critical | 1.2% | 19 Oct, 2018 | Packagist topthink/framework |
ThinkPHP SQLi Vulnerability CVE-2018-18529, GHSA-78q9-24gv-g288 | Critical | 1.2% | 19 Oct, 2018 | Packagist topthink/framework |
ThinkPHP SQL injection vulnerability CVE-2018-17566, GHSA-75fm-52mm-q5rm | Critical | 1.5% | 26 Sep, 2018 | Packagist topthink/framework |
TCPDF vulnerable to attackers triggering deserialization of arbitrary data CVE-2018-17057, GHSA-5hw4-m7f3-hhx8 | Critical | 26.2% | 14 Sep, 2018 | Packagist fooman/tcpdf Packagist la-haute-societe/tcpdf Packagist spoonity/tcpdf Packagist tecnickcom/tcpdf |
Elefant CMS PHP Code Execution Vulnerability CVE-2018-16975, GHSA-x2w2-qgv6-8xrm | Critical | 3.7% | 12 Sep, 2018 | Packagist elefant/cms |
Elefant CMS Code Execution Vulnerability CVE-2018-16974, GHSA-77j2-7whr-6vpx | Critical | 3.6% | 12 Sep, 2018 | Packagist elefant/cms |
ThinkPHP SQL Injection vulnerability CVE-2018-16385, GHSA-vcm7-88jx-3r39 | Critical | 2.2% | 03 Sep, 2018 | Packagist topthink/framework |
Elefant CMS Improper Input Validation CVE-2018-15601, GHSA-pcf7-5974-vjh4 | Critical | 1.6% | 21 Aug, 2018 | Packagist elefant/cms |
phpWhois arbitrary code execution via a crafted whois record CVE-2015-5243, GHSA-c95f-27gx-6vq9 | Critical | 6.2% | 20 Aug, 2018 | Packagist brightlocal/phpwhois Packagist david-garcia/phpwhois Packagist ivankristianto/phpwhois Packagist jsmitty12/phpwhois +5 more |
Drupal PECL YAML parser unsafe object handling CVE-2017-6920, GHSA-9c24-g32g-35rj | Critical | 20.2% | 06 Aug, 2018 | Packagist drupal/core Packagist drupal/drupal |
PHPOffice Common Improper Restriction of XML External Entity Reference CVE-2018-14065, GHSA-2853-hf2g-9843 | Critical | 2.2% | 15 Jul, 2018 | Packagist phpoffice/common |
Codiad remote code execution vulnerability CVE-2018-14009, GHSA-584h-jhxh-pxp2 | Critical | 38.0% | 12 Jul, 2018 | Packagist codiad/codiad |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13450, GHSA-24q2-6x37-cgcx | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13449, GHSA-g5mq-v9hf-958h | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13448, GHSA-m5rg-g6f9-8wpw | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13447, GHSA-jjqq-m998-53jf | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Centreon RCE Vulnerability CVE-2018-11587, GHSA-c8qc-cp8v-prpx | Critical | 4.2% | 25 Jun, 2018 | Packagist centreon/centreon |
CodeIgniter Session Fixation Vulnerability CVE-2018-12071, GHSA-g434-3q2j-hj4r | Critical | 1.5% | 17 Jun, 2018 | Packagist codeigniter/framework |
Symfony Authentication Bypass CVE-2018-11407, GHSA-35c5-28pg-2qg4 | Critical | 2.4% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-core Packagist symfony/symfony |
Dolibarr SQL Injection vulnerability CVE-2018-9019, GHSA-fff9-m6f6-q3mh | Critical | 3.8% | 22 May, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability CVE-2018-10094, GHSA-57wj-22w9-wm9r | Critical | 69.8% | 22 May, 2018 | Packagist dolibarr/dolibarr |
phpMyAdmin Improper Privilege Management CVE-2017-18264, GHSA-5868-g58j-vrj5 | Critical | 2.8% | 01 May, 2018 | Packagist phpmyadmin/phpmyadmin |
Drupal Core Remote Code Execution Vulnerability CVE-2018-7602, DRUPAL-CORE-2018-004, GHSA-297x-j9pm-xjgg | CriticalExploited | 99.2% | 25 Apr, 2018 | Packagist drupal/core Packagist drupal/drupal |
thinkphp SQL Injection via the index.php s parameter CVE-2018-10225, GHSA-xvhr-7q4q-qjgp | Critical | 1.1% | 19 Apr, 2018 | Packagist topthink/framework |
CSV Injection vulnerability with exported contact lists in Mautic CVE-2018-8092, GHSA-29v9-2fpx-j5g9 | Critical | 1.6% | 18 Apr, 2018 | Packagist mautic/core |
Drupal Core Remote Code Execution Vulnerability CVE-2018-7600, DRUPAL-CORE-2018-002, GHSA-7fh9-933g-885p | CriticalExploited | 100.0% | 28 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Directory Traversal in Studio 42 elFinder CVE-2018-9110, GHSA-44p8-c3wv-f28r | Critical | 2.9% | 28 Mar, 2018 | Packagist studio-42/elfinder |
elFinder Path Traversal vulnerability CVE-2018-9109, GHSA-45x3-mw7q-wf7f | Critical | 2.9% | 28 Mar, 2018 | Packagist studio-42/elfinder |
yii2-redis Potential Remote code execution CVE-2018-8073, GHSA-4hx3-m8w5-g5qh | Critical | 1.6% | 21 Mar, 2018 | Packagist yiisoft/yii2-redis |
Yii SQL injection vulnerability CVE-2018-7269, GHSA-hhg2-g6h6-c266 | Critical | 1.9% | 21 Mar, 2018 | Packagist yiisoft/yii2-dev |
Bacula-web SQL Injection Vulnerabilities CVE-2017-15367, GHSA-fv4m-5j2c-787r | Critical | 23.1% | 07 Mar, 2018 | Packagist bacula-web/bacula-web |
vrana/adminer vulnerable to SSRF by connecting to privileged ports CVE-2018-7667, GHSA-43f8-p5w3-5m25 | Critical | 5.0% | 05 Mar, 2018 | Packagist vrana/adminer |
Anchor CMS Logs Credentials CVE-2018-7251, GHSA-hxcw-pqqc-rv85 | Critical | 71.8% | 19 Feb, 2018 | Packagist anchorcms/anchor-cms |
SimpleSAMLphp Use of insecure connection charset (sqlauth module) CVE-2018-6521, GHSA-qv5p-6wrc-79wg | Critical | 3.1% | 02 Feb, 2018 | Packagist simplesamlphp/simplesamlphp |
Smarty PHP code injection CVE-2017-1000480, GHSA-9m49-vhwv-422g | Critical | 3.1% | 03 Jan, 2018 | Packagist smarty/smarty |
Dolibarr SQL injection vulnerability in fourn/index.php CVE-2017-17900, GHSA-6frc-vfw9-wm27 | Critical | 1.9% | 27 Dec, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in adherents/subscription/info.php CVE-2017-17899, GHSA-7789-v767-37r5 | Critical | 1.9% | 27 Dec, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in comm/multiprix.php CVE-2017-17897, GHSA-9v7m-f3cv-68rw | Critical | 1.9% | 27 Dec, 2017 | Packagist dolibarr/dolibarr |
October CMS File Upload Vulnerability CVE-2017-1000194, GHSA-8vh6-8w76-v6m3 | Critical | 1.2% | 17 Nov, 2017 | Packagist october/october |
MetalGenix GeniXCMS vulnerable to SQL Injection CVE-2015-3933, GHSA-q4hw-62mx-q37w | Critical | 3.8% | 08 Nov, 2017 | Packagist genix/cms |
CodeIgniter and Kohana vulnerable to PHP Object Injection CVE-2014-8684, GHSA-w9ph-q4h9-rwq6 | Critical | 72.2% | 19 Sep, 2017 | Packagist codeigniter/framework Packagist kohana/core |
Dolibarr SQL injection vulnerability in don/list.php CVE-2017-14242, GHSA-jjgq-jq8g-24w4 | Critical | 1.3% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in admin/menus/edit.php CVE-2017-14238, GHSA-qm8m-7626-762h | Critical | 1.3% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Incorrect persistent NameID generation in SimpleSAMLphp CVE-2017-12873, GHSA-gp2m-7cfp-h6gf | Critical | 1.7% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module CVE-2017-12868, GHSA-j96g-47x2-46hv | Critical | 2.1% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
baserCMS SQL Injection vulnerability CVE-2017-10842, GHSA-jc94-wp59-pq4f | Critical | 1.8% | 29 Aug, 2017 | Packagist baserproject/basercms |
Codiad Vulnerable to Shell Command Injection CVE-2017-11366, GHSA-jccv-3h4x-35mv | Critical | 7.5% | 21 Aug, 2017 | Packagist codiad/codiad |