Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
thorsten/phpmyfaq vulnerable to business logic errors CVE-2023-1887, GHSA-gx43-fqrx-6fcw | High | 0.7% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter CVE-2023-1882, GHSA-jph3-3j24-pg3j | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header CVE-2023-1881, GHSA-hhjm-mpmf-cxg9 | High | 0.5% | 05 Apr, 2023 | Packagist microweber/microweber |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter CVE-2023-1880, GHSA-m8q9-7v2f-qjx9 | High | 1.6% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog CVE-2023-1878, GHSA-gcmq-7652-x98j | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter CVE-2023-1758, GHSA-3j93-7rf7-p7m6 | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter CVE-2023-1757, GHSA-jvjx-qqh7-6x6c | High | 0.5% | 05 Apr, 2023 | Packagist thorsten/phpmyfaq |
Uvdesk remote code execution vulnerability CVE-2023-0265, GHSA-2hw6-4rv9-82fp | High | 1.6% | 04 Apr, 2023 | Packagist uvdesk/community-skeleton |
Appwrite Server-Side Request Forgery vulnerability CVE-2023-27159, GHSA-hxgx-584x-vwm8 | High | 36.4% | 31 Mar, 2023 | Packagist appwrite/server-ce |
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management CVE-2023-1762, GHSA-xww4-w6ff-5q3g | High | 0.9% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
smarty Cross-site Scripting vulnerability in Javascript escaping CVE-2023-28447, GHSA-7j98-h7fp-4vwj | High | 1.0% | 28 Mar, 2023 | Packagist smarty/smarty |
Magento Open Source allows XML Injection CVE-2023-22247, GHSA-2444-8gj8-6fmx | High | 0.9% | 27 Mar, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Moodle vulnerable to Cross-site Request Forgery BIT-moodle-2023-28335, CVE-2023-28335, GHSA-wxmq-v9gx-75pg | High | 0.4% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle SQL Injection vulnerability BIT-moodle-2023-28329, CVE-2023-28329, GHSA-72w2-j52c-7682 | High | 1.2% | 23 Mar, 2023 | Packagist moodle/moodle |
NotrinosERP vulnerable to SQL Injection CVE-2023-24788, GHSA-4pqp-69m3-f8pp | High | 3.1% | 23 Mar, 2023 | Packagist notrinos/notrinos-erp |
Pimcore vulnerable to improper quoting of filters in Custom Reports CVE-2023-28438, GHSA-vf7q-g2pv-jxvx | High | 0.9% | 22 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore Remote Code Execution vulnerability in Search function CVE-2023-1578, GHSA-42c3-wvww-gcqj | High | 62.8% | 22 Mar, 2023 | Packagist pimcore/pimcore |
Teampass SQL Injection vulnerability CVE-2023-1545, GHSA-ppxm-q2h4-v7mm | High | 8.4% | 21 Mar, 2023 | Packagist nilsteampassnet/teampass |
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model CVE-2023-28108, GHSA-xc9p-r5qj-8xm9 | High | 0.9% | 16 Mar, 2023 | Packagist pimcore/pimcore |
DDOS attack on graphql endpoints CVE-2023-28104, GHSA-67g8-c724-8mp3 | High | 1.1% | 16 Mar, 2023 | Packagist silverstripe/graphql |
Possible CSRF token fixation CVE-2023-25170, GHSA-3g43-x7qr-96ph | High | 0.2% | 13 Mar, 2023 | Packagist prestashop/prestashop |
Code Injection in alextselegidis/easyappointments CVE-2023-1367, GHSA-9qvw-fhj2-xqmv | High | 0.4% | 13 Mar, 2023 | Packagist alextselegidis/easyappointments |
Company admin role gives excessive privileges in eZ Platform Ibexa CVE-2022-48365, GHSA-qq2j-9pf8-g58c | High | 0.9% | 12 Mar, 2023 | Packagist ezsystems/ezplatform-kernel Packagist ezsystems/ezpublish-kernel |
cockpit-hq/cockpit is vulnerable to unrestricted file uploads CVE-2023-1313, GHSA-6x8f-x6qw-qwx3 | High | 1.0% | 10 Mar, 2023 | Packagist cockpit-hq/cockpit |
Moodle vulnerable to Server-Side Request Forgery BIT-moodle-2021-36396, CVE-2021-36396, GHSA-4rmj-w58m-fvch | High | 1.4% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Uncontrolled Resource Consumption BIT-moodle-2021-36395, CVE-2021-36395, GHSA-273w-7fxj-pcp6 | High | 0.7% | 06 Mar, 2023 | Packagist moodle/moodle |
phpseclib Infinite Loop vulnerability CVE-2023-27560, GHSA-hm7p-r324-hhf3 | High | 0.8% | 03 Mar, 2023 | Packagist phpseclib/phpseclib |
api-platform/core's secured properties may be accessible within collections CVE-2023-25575, GHSA-vr2x-7687-h6qv | High | 0.6% | 28 Feb, 2023 | Packagist api-platform/core |
laravel-admin has Arbitrary File Upload vulnerability CVE-2023-24249, GHSA-g857-47pm-3r32 | High | 2.4% | 27 Feb, 2023 | Packagist encore/laravel-admin |
TeamPass External Control of File Name or Path vulnerability CVE-2023-1070, GHSA-x36g-4629-xp9v | High | 0.8% | 27 Feb, 2023 | Packagist nilsteampassnet/teampass |
Froxlor Cross-Site Request Forgery vulnerability CVE-2023-1033, GHSA-p7qq-rrvw-x55x | High | 0.3% | 25 Feb, 2023 | Packagist froxlor/froxlor |
RosarioSIS Improper Access Control vulnerability CVE-2023-0994, GHSA-prjg-28jg-m3p5 | High | 1.0% | 24 Feb, 2023 | Packagist francoisjacquet/rosariosis |
Codiad information disclosure vulnerability CVE-2017-20178, GHSA-2q79-56rq-8v3c | High | 0.7% | 21 Feb, 2023 | Packagist codiad/codiad |
Moodle Improper Access Control vulnerability BIT-moodle-2023-23923, CVE-2023-23923, GHSA-32jc-9p58-p82x | High | 1.0% | 17 Feb, 2023 | Packagist moodle/moodle |
Code Injection in froxlor/froxlor CVE-2023-0877, GHSA-vp4r-h765-5mwp | High | 3.9% | 17 Feb, 2023 | Packagist froxlor/froxlor |
SameSite Attribute vulnerability in pimCore CVE-2023-25240, GHSA-r2vq-p658-p274 | High | 1.0% | 13 Feb, 2023 | Packagist pimcore/pimcore |
Weak Password Requirements in thorsten/phpmyfaq CVE-2023-0793, GHSA-fxrq-xhj9-rf5j | High | 0.7% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Uncaught Exception in thorsten/phpmyfaq CVE-2023-0790, GHSA-6vv4-qq3r-9rv8 | High | 0.7% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
privilege chaining in cockpit-hq/cockpit CVE-2023-0759, GHSA-86rf-38v8-9c4x | High | 0.3% | 09 Feb, 2023 | Packagist cockpit-hq/cockpit |
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering BIT-typo3-2023-24814, CVE-2023-24814, GHSA-r4f8-f93x-5qh3 | High | 0.8% | 07 Feb, 2023 | Packagist typo3/cms Packagist typo3/cms-core |
froxlor is vulnerable to privilege escalation from customer to root via directory-options CVE-2023-0671, GHSA-9fqc-9cpr-w73q | High | 1.1% | 04 Feb, 2023 | Packagist froxlor/froxlor |
Payment information sent to PayPal not necessarily identical to created order CVE-2023-23941, GHSA-vxpm-8hcp-qh27 | High | 0.3% | 03 Feb, 2023 | Packagist swag/paypal |
Broken Access Control in 3rd party TYPO3 extension "femanager" CVE-2023-25014, GHSA-3p9x-xxx6-2w4p | High | 0.5% | 02 Feb, 2023 | Packagist in2code/femanager |
Broken Access Control in 3rd party TYPO3 extension "femanager" CVE-2023-25013, GHSA-mm8v-wmqx-8h2j | High | 0.5% | 02 Feb, 2023 | Packagist in2code/femanager |
Symfony storing cookie headers in HttpCache BIT-symfony-2022-24894, CVE-2022-24894, GHSA-h7vf-5wrv-9fhv | High | 4.0% | 01 Feb, 2023 | Packagist symfony/http-kernel Packagist symfony/symfony |
Symfony vulnerable to Session Fixation of CSRF tokens BIT-symfony-2022-24895, CVE-2022-24895, GHSA-3gv2-29qc-v67m | High | 0.8% | 01 Feb, 2023 | Packagist symfony/security-bundle Packagist symfony/symfony |
Froxlor contains Weak Password Requirements CVE-2023-0564, GHSA-pm72-27mg-fc28 | High | 0.5% | 29 Jan, 2023 | Packagist froxlor/froxlor |
DataFlow upload remote code execution vulnerability CVE-2021-41231, GHSA-h632-p764-pjqm | High | 1.2% | 27 Jan, 2023 | Packagist openmage/magento-lts |
Fix for authenticated remote code execution through layout update CVE-2021-41144, GHSA-5j2g-3ph4-rgvm | High | 1.2% | 27 Jan, 2023 | Packagist openmage/magento-lts |
DoS vulnerability in MaliciousCode filter CVE-2023-23617, GHSA-3p73-mm7v-4f6m | High | 1.0% | 27 Jan, 2023 | Packagist openmage/magento-lts |