Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
ZendFramework vulnerable to Cross-site Scripting GHSA-5gmf-3c43-q73v | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
ZendFramework potential remote code execution in zend-mail via Sendmail adapter GHSA-gff2-p6vm-3p8g | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
ZendFramework Potential Proxy Injection Vulnerabilities GHSA-mg7h-9qfx-4r83 | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
ZendFramework Information Disclosure and Insufficient Entropy vulnerability GHSA-2fhr-8r8r-qp56 | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
Zendframework session validation vulnerability GHSA-62f6-h68r-3jpw | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
Zendframework has potential Cross-site Scripting vector in multiple view helpers GHSA-8q77-cv62-jj38 | Medium | Not scored | 07 Jun, 2024 | Packagist zendframework/zendframework |
TYPO3 Denial of Service in Online Media Asset Handling GHSA-f3wf-q4fj-3gxf | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Information Disclosure in Install Tool GHSA-6487-3qvg-8px9 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Frontend User Login GHSA-2rcw-9hrm-8q7q | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Backend Modal Component GHSA-7q33-hxwj-7p8v | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Online Media Asset Rendering GHSA-8m6j-p5jv-v69w | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Information Disclosure of Installed Extensions GHSA-f624-8hfq-5fh3 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Form Framework validation handling GHSA-v8m4-3w37-ghxx | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Form Framework GHSA-4h5c-5g25-v7fh | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Link Handling GHSA-xgmx-j3hv-jh9x | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Broken Access Control in Localization Handling GHSA-772m-43f3-hmf8 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Filelist Module GHSA-g7hw-jh4p-75wr | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Fluid ViewHelpers GHSA-85ch-44w7-rf32 | Medium | Not scored | 07 Jun, 2024 | Packagist typo3/cms |
Cross-site scripting (XSS) vulnerability in Description metadata CVE-2024-37160, GHSA-5pxr-7m4j-jjc6 | Medium | 0.5% | 07 Jun, 2024 | Packagist getformwork/formwork |
TokenController formName not sanitized in hidden input CVE-2024-37156, GHSA-rrvc-c7xg-7cf3 | Medium | 0.3% | 06 Jun, 2024 | Packagist sulu/form-bundle |
Improper Authentication in CraftCMS two factor authentication plugin CVE-2024-5658, GHSA-96qm-hwhp-2rm8 | Medium | 0.6% | 06 Jun, 2024 | Packagist born05/craft-twofactorauthentication |
Insecure Unserialize Vulnerability in FLOW3 GHSA-m2hp-5x78-74mg | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
Typo3 Arbitrary file upload and XML External Entity processing GHSA-2p4f-vc9q-r5vp | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
By-passing Protection of PharStreamWrapper Interceptor GHSA-4v5g-8pq2-32m2 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/phar-stream-wrapper |
Time-Based Information Disclosure Vulnerability in Flow GHSA-r6mm-wmhf-849m | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/flow |
Privilege Escalation in TYPO3 Neos GHSA-wr3c-6c22-m9v6 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/neos |
Typo3 Cross-Site Scripting in Language Pack Handling GHSA-259v-xm34-p7fr | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Broken Access Control in Import Module GHSA-f5rr-9r84-wwqf | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API GHSA-hww5-6x85-mc24 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Security Misconfiguration in Frontend Session Handling GHSA-qr5f-6fcv-w69q | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Security Misconfiguration in User Session Handling GHSA-g9rv-6g56-65h8 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Information Disclosure in Backend User Interface GHSA-q9c4-9v5m-597p | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Typo3 Information Disclosure in User Authentication GHSA-m96r-7vqm-j95g | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 CMS Backend GHSA-v4qr-8h2v-qpjx | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 CMS GHSA-5gr6-97fv-52cc | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Insecure Unserialize in TYPO3 Backend GHSA-c7rj-92xr-wprg | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cache Flooding in TYPO3 Frontend GHSA-pw2q-qwvj-gh43 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 Frontend GHSA-mh3r-6cp5-hc2j | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 CMS GHSA-6f9m-v7mp-7jjq | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Information Disclosure in TYPO3 CMS GHSA-g46h-v2cc-6c94 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) vulnerability in typolinks GHSA-p5c5-gmj4-g48f | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) in TYPO3 Backend GHSA-hq37-rfjc-mr8h | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in third party library mso/idna-convert GHSA-qmwf-j7g7-f5jw | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Information Disclosure in TYPO3 Backend GHSA-vpr3-rc99-2wpr | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
SQL Injection in TYPO3 Frontend Login GHSA-j86x-pjmr-9m6w | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Insecure Unserialize in TYPO3 Import/Export GHSA-xvcp-33rc-j8gq | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 Backend GHSA-86r8-4g3w-7xjp | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Privilege Escalation in TYPO3 CMS GHSA-v5jp-4h2p-j2p4 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 Backend GHSA-5wx6-xwxf-q8qj | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 CMS GHSA-6xh8-8pfv-53vx | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |