Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Privilege Escalation in TYPO3 CMS GHSA-v5jp-4h2p-j2p4 | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 Backend GHSA-5wx6-xwxf-q8qj | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Authentication Bypass in TYPO3 CMS GHSA-6xh8-8pfv-53vx | Medium | Not scored | 05 Jun, 2024 | Packagist typo3/cms |
Digital products download without proper payment status check CVE-2024-37296, GHSA-v4g2-cm5v-cxv7 | Medium | 0.5% | 05 Jun, 2024 | Packagist aimeos/ai-client-html |
Vulnerable embedded jQuery Version GHSA-jmh9-6rjq-gjh9 | Medium | Not scored | 05 Jun, 2024 | Packagist pimcore/admin-ui-classic-bundle |
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search GHSA-pmxp-7224-h794 | Medium | Not scored | 04 Jun, 2024 | Packagist typo3/cms |
Typo3 Arbitrary File Disclosure in Form Component GHSA-wrpf-2x8h-82gr | Medium | Not scored | 04 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content GHSA-8j9v-4hhh-x43c | Medium | Not scored | 04 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting (XSS) in TYPO3 component Backend GHSA-3jxq-5xhh-9jr3 | Medium | Not scored | 04 Jun, 2024 | Packagist typo3/cms |
Reflected Cross-Site Scripting (XSS) in Dolibarr CVE-2024-34051, GHSA-hv2j-6654-x74q | Medium | 12.0% | 03 Jun, 2024 | Packagist dolibarr/dolibarr |
TYPO3 Cross-Site Scripting (XSS) in form component GHSA-5j86-5xvg-7q93 | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in legacy form component GHSA-vgm8-r9gm-fw59 | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in link validator component GHSA-cg4m-qjjp-7497 | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend GHSA-6fc6-cj2j-h22x | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
Cross-Site Scripting in TYPO3 component Indexed Search GHSA-wh8q-72cp-p5wf | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
TYPO3 is susceptible to Cross-Site Flashing GHSA-qrxh-46mr-pr7q | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend GHSA-5cxf-xx9j-54jc | Medium | Not scored | 03 Jun, 2024 | Packagist typo3/cms |
Moodle Unsanitized HTML in site log for config_log_created BIT-moodle-2024-34006, CVE-2024-34006, GHSA-vvh5-7v3m-j3mj | Medium | 0.4% | 31 May, 2024 | Packagist moodle/moodle |
Moodle Authenticated LFI risk in some misconfigured shared hosting environments BIT-moodle-2024-34004, CVE-2024-34004, GHSA-q3cm-ccrm-2mr6 | Medium | 0.5% | 31 May, 2024 | Packagist moodle/moodle |
Moodle Authenticated LFI risk in some misconfigured shared hosting environments BIT-moodle-2024-34003, CVE-2024-34003, GHSA-jg4f-8w9x-jv35 | Medium | 0.4% | 31 May, 2024 | Packagist moodle/moodle |
Moodle Cross-site Scripting (XSS) BIT-moodle-2024-34000, CVE-2024-34000, GHSA-8qwh-4vwv-7c5m | Medium | 0.5% | 31 May, 2024 | Packagist moodle/moodle |
Moodle Cross-site Scripting (XSS) BIT-moodle-2024-33998, CVE-2024-33998, GHSA-xqhh-253w-4q5f | Medium | 0.4% | 31 May, 2024 | Packagist moodle/moodle |
Moodle stored Cross-site Scripting (XSS) BIT-moodle-2024-33997, CVE-2024-33997, GHSA-9qgq-93c7-9hm4 | Medium | 0.4% | 31 May, 2024 | Packagist moodle/moodle |
Moodle broken access control when setting calendar event type BIT-moodle-2024-33996, CVE-2024-33996, GHSA-4qww-rxq6-x7gf | Medium | 0.4% | 31 May, 2024 | Packagist moodle/moodle |
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure GHSA-pqfv-97hj-g97g | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms |
TYPO3 Brute Force Protection Bypass in backend login GHSA-jqr8-q455-xx45 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms |
TYPO3 Information Disclosure Vulnerability Exploitable by Editors GHSA-r287-hc8j-w56h | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors GHSA-wp8j-c736-c5r3 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms |
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode CVE-2024-32877, GHSA-qg5r-95m4-mjgj | Medium | 0.3% | 30 May, 2024 | Packagist yiisoft/yii2 |
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting GHSA-mxjf-hc9v-xgv2 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms |
TYPO3 Cross-Site Scripting in Filelist Module GHSA-6xwf-7rfm-4gwc | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Link Handling GHSA-4ppr-jw47-9qm5 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Form Framework validation handling GHSA-95qm-3xp7-vfj5 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Broken Access Control in Import Module GHSA-g776-759r-pf6x | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Information Disclosure in Backend User Interface GHSA-rv8r-8mh5-5376 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Information Disclosure in User Authentication GHSA-wj85-rg5g-v8jm | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Disclosure of Information about Installed Extensions GHSA-p2h4-7fp3-cmh8 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Information Disclosure in Page Tree GHSA-wvvp-jwf5-qcpc | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Security Misconfiguration in User Session Handling GHSA-xmgr-jff3-fcfv | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Form Framework GHSA-4459-qrcc-vfcf | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Language Pack Handling GHSA-76r3-m635-p3vc | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Broken Access Control in Localization Handling GHSA-9rx9-7fmh-gj3g | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Fluid ViewHelpers GHSA-22q7-cg4r-p9mx | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-fluid |
TYPO3 Denial of Service in Online Media Asset Handling GHSA-29m4-mx89-3mjg | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Information Disclosure in Install Tool GHSA-66c2-7g4p-wx4p | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Frontend User Login GHSA-8c25-vj2w-p72j | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Backend Modal Component GHSA-g4c9-qfvw-fmr4 | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting in Online Media Asset Rendering GHSA-wg8h-gxf4-g4gh | Medium | Not scored | 30 May, 2024 | Packagist typo3/cms-core |
Twig Path Traversal vulnerability in the filesystem loader GHSA-7cvr-xhm5-x998 | Medium | Not scored | 30 May, 2024 | Packagist twig/twig |
Thelia BackOffice default template vulnerable to Cross-site Scripting GHSA-pp7v-wxx9-hm6r | Medium | Not scored | 30 May, 2024 | Packagist thelia/backoffice-default-template |