Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Akeneo PIM vulnerable to shell injection in the mass edition CVE-2017-1000009, GHSA-q8cr-xphm-7gfv | Critical | 3.9% | 17 Jul, 2017 | Packagist akeneo/pim-community-dev |
Code Injection in PHPUnit CVE-2017-9841, GHSA-r7c9-c69m-rph8 | CriticalExploited | 100.0% | 27 Jun, 2017 | Packagist phpunit/phpunit |
TeamPass SQL injection in users.queries.php CVE-2017-9436, GHSA-cm26-gp8j-w6xf | Critical | 1.0% | 05 Jun, 2017 | Packagist nilsteampassnet/teampass |
Dolibarr ERP and CRM SQLi CVE-2017-9435, GHSA-v3m8-7h3p-6j5m | Critical | 1.5% | 05 Jun, 2017 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM Insecure Encryption CVE-2017-7888, GHSA-98vc-98q7-57qf | Critical | 1.1% | 10 May, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter CVE-2017-7886, GHSA-gw37-vmvw-f833 | Critical | 1.7% | 10 May, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS Arbitrary User Password Reset Vulnerability CVE-2017-8827, GHSA-wm7g-rmgg-9837 | Critical | 1.6% | 08 May, 2017 | Packagist genix/cms |
Shopware RCE Vulnerability CVE-2016-3109, GHSA-cj2f-96jq-phpp | Critical | 28.1% | 21 Apr, 2017 | Packagist shopware/shopware |
TeamPass vulnerable to SQL Injection CVE-2015-7564, GHSA-r64j-5w3w-fp49 | Critical | 3.4% | 12 Apr, 2017 | Packagist nilsteampassnet/teampass |
Moodle SQL injection via user preferences CVE-2017-2641, GHSA-xhq3-455r-xv44 | Critical | 14.5% | 26 Mar, 2017 | Packagist moodle/moodle |
SimpleSAMLphp SAML2 spoof SAML responses CVE-2016-9814, GHSA-r8v4-7vwj-983x | Critical | 2.4% | 17 Feb, 2017 | Packagist simplesamlphp/saml2 |
Zend Framework Allows SQL Injection CVE-2016-6233, GHSA-p9hp-3gpv-52w3 | Critical | 2.0% | 17 Feb, 2017 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
Zend Framework Allows SQL Injection CVE-2016-4861, GHSA-xfjq-w3cw-h5fq | Critical | 4.1% | 17 Feb, 2017 | Packagist zendframework/zendframework |
Froxlor guessable password reset token CVE-2016-5100, GHSA-qj6h-m7xc-r2v3 | Critical | 1.9% | 13 Feb, 2017 | Packagist froxlor/froxlor |
Symfony Authentication Bypass CVE-2016-2403, GHSA-wvj5-r78r-hhfq | Critical | 4.3% | 07 Feb, 2017 | Packagist symfony/security Packagist symfony/security-core Packagist symfony/symfony |
Subrion CMS PHP Object Injection CVE-2017-5543, GHSA-4j79-4m6q-77vf | Critical | 2.0% | 20 Jan, 2017 | Packagist intelliants/subrion |
CodeIgniter arbitrary code execution CVE-2016-10131, GHSA-2pcj-76hj-xqhm | Critical | 3.1% | 12 Jan, 2017 | Packagist bcit-ci/codeigniter |
Swift Mailer mail transport Command Injection CVE-2016-10074, GHSA-pr44-4jfr-286m | Critical | 43.8% | 30 Dec, 2016 | Packagist swiftmailer/swiftmailer |
Remote code execution in PHPMailer CVE-2016-10045, GHSA-4pc3-96mx-wwc8 | Critical | 97.7% | 30 Dec, 2016 | Packagist phpmailer/phpmailer |
zend-mail remote code execution via Sendmail adapter CVE-2016-10034, GHSA-r9mw-gwx9-v3h5 | Critical | 38.4% | 30 Dec, 2016 | Packagist zendframework/zend-mail |
Remote code execution in PHPMailer CVE-2016-10033, GHSA-5f37-gxvh-23v6 | CriticalExploited | 99.7% | 30 Dec, 2016 | Packagist phpmailer/phpmailer |
phpMyAdmin CSRF Vulnerability CVE-2016-9866, GHSA-jvxx-8xxf-5495 | Critical | 1.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Authentication Bypass CVE-2016-6629, GHSA-567r-vqj7-5cw7 | Critical | 3.2% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
ADOdb Library SQL Injection CVE-2016-7405, GHSA-3fj4-q72x-x2g9 | Critical | 3.0% | 03 Oct, 2016 | Packagist adodb/adodb-php |
phpMyAdmin Code Injection vulnerability CVE-2016-5734, GHSA-rv57-479x-x4qv | Critical | 80.9% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
Zend Framework SQL injection vector using null byte for PDO CVE-2015-7695, GHSA-2hvh-c5c2-vj85 | Critical | 2.9% | 07 Jun, 2016 | Packagist zendframework/zendframework1 |
TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash CVE-2014-3945, GHSA-h7wf-jg4f-x2wc | Critical | 1.6% | 03 Jun, 2014 | Packagist typo3/cms |
EC-CUBE vulnerable to authorization bypass CVE-2014-0808, GHSA-j2hg-w4p4-6rvm | Critical | 2.2% | 22 Jan, 2014 | Packagist ec-cube/ec-cube |
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize CVE-2013-6288, GHSA-7m7g-jq4m-98w5 | Critical | 2.2% | 28 Oct, 2013 | Packagist apache-solr-for-typo3/solr |
Zend Framework XXE Vulnerability CVE-2012-3363, GHSA-7pg4-5233-82jv | Critical | 49.3% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
PEAR::Archive_Tar Directory Traversal vulnerability CVE-2006-0931, GHSA-f3xw-vgc7-f7h8 | Critical | 2.4% | 28 Feb, 2006 | Packagist pear/archive_tar |