Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Missing input validation can lead to command execution in composer BIT-composer-2022-24828, CVE-2022-24828, GHSA-x7cr-6qr6-2hh6 | High | 1.9% | 13 Apr, 2022 | Packagist composer/composer |
SQL Injection in Pimcore CVE-2022-1339, GHSA-mj2c-5mjv-gmmj | High | 5.5% | 13 Apr, 2022 | Packagist pimcore/pimcore |
Persistent Cross-site Scripting vulnerability in PrivateBin CVE-2022-24833, GHSA-cqcc-mm6x-vmvw | High | 1.4% | 11 Apr, 2022 | Packagist privatebin/privatebin |
Code Injection in Bolt CMS CVE-2021-40219, GHSA-gprh-7767-cw39 | High | 3.4% | 11 Apr, 2022 | Packagist bolt/core |
Improper Neutralization of Formula Elements in a CSV File in Kimai 2 CVE-2021-43515, GHSA-64fq-9c6w-rq44 | High | 1.0% | 08 Apr, 2022 | Packagist kevinpapst/kimai2 |
SQL Injection in Pimcore CVE-2022-1219, GHSA-6gm7-j668-w6h9 | High | 1.4% | 08 Apr, 2022 | Packagist pimcore/pimcore |
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown GHSA-5jfw-35xp-5m42 | High | Not scored | 05 Apr, 2022 | Packagist pocketmine/bedrock-protocol |
Cross-site Scripting in TastyIgniter CVE-2022-0602, GHSA-cjw5-f2x5-r4q5 | High | 0.7% | 05 Apr, 2022 | Packagist tastyigniter/tastyigniter |
SQL injection in ImpressCMS CVE-2022-26986, GHSA-f99r-jjgr-f373 | High | 4.1% | 05 Apr, 2022 | Packagist impresscms/impresscms |
Weak password hash in LiveHelperChat BIT-livehelperchat-2022-1235, CVE-2022-1235, GHSA-vx8v-g3p3-88vg | High | 0.6% | 05 Apr, 2022 | Packagist remdex/livehelperchat |
Server side request forgery in LiveHelperChat BIT-livehelperchat-2022-1213, CVE-2022-1213, GHSA-hhr9-7xvh-8xgc | High | 0.6% | 05 Apr, 2022 | Packagist remdex/livehelperchat |
Files or Directories Accessible to External Parties in Adminer CVE-2021-43008, GHSA-rxfq-3vpc-vv72 | High | 13.6% | 05 Apr, 2022 | Packagist vrana/adminer |
Remote code execution in Subrion CVE-2021-43464, GHSA-g54x-29xv-58h5 | High | 1.4% | 04 Apr, 2022 | Packagist intelliants/subrion |
Cross-Site Request Forgery in YOURLS CVE-2022-0088, GHSA-gx7g-wjxg-jwwj | High | 2.0% | 03 Apr, 2022 | Packagist yourls/yourls |
Automatic named constructor discovery in Valinor GHSA-xhr8-mpwq-2rr2 | High | Not scored | 01 Apr, 2022 | Packagist cuyz/valinor |
Access Control vulnerability in Dolibarr BIT-dolibarr-2021-37517, CVE-2021-37517, GHSA-xw7v-qrhc-jjg2 | High | 1.0% | 31 Mar, 2022 | Packagist dolibarr/dolibarr |
SQL Injection in Dolibarr BIT-dolibarr-2021-36625, CVE-2021-36625, GHSA-vrgp-3ph6-2wwq | High | 0.9% | 31 Mar, 2022 | Packagist dolibarr/dolibarr |
Unrestricted Upload of File with Dangerous Type in WPanel 4 CVE-2021-34257, GHSA-vhgr-gfx3-fg37 | High | 1.8% | 31 Mar, 2022 | Packagist wpanel/wpanel4-cms |
Type Confusion in LiveHelperChat BIT-livehelperchat-2022-1176, CVE-2022-1176, GHSA-5cmw-fhq9-8fhh | High | 1.3% | 31 Mar, 2022 | Packagist remdex/livehelperchat |
Path Traversal within joomla/archive tar class BIT-joomla-2022-23793, CVE-2022-23793, GHSA-jm67-jh3g-cg3f | High | 2.1% | 30 Mar, 2022 | Packagist joomla/archive |
Old sessions not blocked by login enable function in Snipe-IT CVE-2022-1155, GHSA-636j-7x7r-gvw2 | High | 1.0% | 30 Mar, 2022 | Packagist snipe/snipe-it |
Path Traversal in ImpressCMS CVE-2021-26601, GHSA-4q96-9f63-p7jj | High | 3.2% | 28 Mar, 2022 | Packagist impresscms/impresscms |
Arbitrary shell execution GHSA-3988-h75v-hwf6 | High | Not scored | 26 Mar, 2022 | Packagist squizlabs/php_codesniffer |
Arbitrary shell execution GHSA-mhfv-8rc9-w38c | High | Not scored | 26 Mar, 2022 | Packagist squizlabs/php_codesniffer |
SQL Injection in Moodle BIT-moodle-2022-0983, CVE-2022-0983, GHSA-h2fw-93qx-vrcq | High | 0.9% | 25 Mar, 2022 | Packagist moodle/moodle |
SQL Injection in Yeswiki CVE-2021-43091, GHSA-xgx2-332h-9x6q | High | 1.4% | 25 Mar, 2022 | Packagist yeswiki/yeswiki |
SQL Injection in Fork CMS CVE-2022-1064, GHSA-rr8m-29g8-8cgc | High | 1.2% | 25 Mar, 2022 | Packagist forkcms/forkcms |
SQL Injection in Fork CMS CVE-2022-0153, GHSA-q863-cchm-c6c6 | High | 1.1% | 24 Mar, 2022 | Packagist forkcms/forkcms |
Integer Overflow or Wraparound in Microweber CVE-2022-1036, GHSA-3qr6-qrqm-8v86 | High | 1.2% | 22 Mar, 2022 | Packagist microweber/microweber |
Unrestricted Upload of File with Dangerous Type in ShowDoc CVE-2022-1034, GHSA-xp82-jmw8-mjxp | High | 1.5% | 22 Mar, 2022 | Packagist showdoc/showdoc |
Improper Input Validation in guzzlehttp/psr7 BIT-drupal-2022-24775, CVE-2022-24775, DRUPAL-CORE-2022-006, GHSA-q7rv-6hp3-vh96 | High | 2.5% | 21 Mar, 2022 | Packagist drupal/core Packagist guzzlehttp/psr7 |
Exposure of Resource to Wrong Sphere in ThinkPHP Framework CVE-2022-25481, GHSA-69wp-xwm7-69wm | High | 4.7% | 21 Mar, 2022 | Packagist topthink/framework |
Insufficient Session Expiration in Admidio CVE-2022-0991, GHSA-mf79-f657-47ww | High | 1.0% | 19 Mar, 2022 | Packagist admidio/admidio |
Improperly checked metadata on tools/armour itemstacks received from the client CVE-2022-51013, GHSA-46c5-pfj8-fv65 | High | 0.5% | 18 Mar, 2022 | Packagist pocketmine/pocketmine-mp |
NaN/INF in serverbound movement packets can crash clients and servers CVE-2021-48007, GHSA-fm35-jgg3-3grx | High | 0.5% | 18 Mar, 2022 | Packagist pocketmine/pocketmine-mp |
Cross-site Scripting in CKEditor4 BIT-drupal-2022-24728, BIT-drupal-2022-24729, CVE-2022-24728, CVE-2022-24729, DRUPAL-CORE-2022-005, GHSA-4fc4-4p5g-6w89, GHSA-f6rf-9m92-x2hh | High | 2.5% | 16 Mar, 2022 | Packagist drupal/core npm ckeditor4 |
Stored Cross-site Scripting in grav CVE-2022-0970, GHSA-r6hh-5g3q-wwgc | High | 1.8% | 15 Mar, 2022 | Packagist getgrav/grav |
Integer Overflow in microweber CVE-2022-0968, GHSA-5fxv-xx5p-g2fv | High | 3.7% | 15 Mar, 2022 | Packagist microweber/microweber |
Denial of service in microweber CVE-2022-0961, GHSA-hrf4-hcpc-3345 | High | 1.0% | 15 Mar, 2022 | Packagist microweber/microweber |
Insufficient Session Expiration in Sylius CVE-2022-24743, GHSA-mf3v-f2qq-pf9g | High | 1.3% | 14 Mar, 2022 | Packagist sylius/sylius |
Cross-site Scripting in microweber CVE-2022-0930, GHSA-2cv6-6437-39p2 | High | 0.9% | 12 Mar, 2022 | Packagist microweber/microweber |
Moodle denial-of-service risk in the draft files area BIT-moodle-2021-32476, CVE-2021-32476, GHSA-4qxc-qxrp-33cw | High | 1.1% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Blind SQL injection possible via MNet authentication BIT-moodle-2021-32474, CVE-2021-32474, GHSA-rvmc-8gmg-ggqr | High | 0.9% | 11 Mar, 2022 | Packagist moodle/moodle |
Integer Overflow or Wraparound in Microweber CVE-2022-0913, GHSA-c383-q5vf-hx55 | High | 1.4% | 11 Mar, 2022 | Packagist microweber/microweber |
Unrestricted Upload of File with Dangerous Type in Croogo CVE-2021-44673, GHSA-4pww-fqgh-36hj | High | 9.0% | 10 Mar, 2022 | Packagist croogo/croogo |
Exposure of Sensitive Information to an Unauthorized Actor in PhpMyAdmin BIT-phpmyadmin-2022-0813, CVE-2022-0813, GHSA-vx8q-j7h9-vf6q | High | 1.3% | 10 Mar, 2022 | Packagist phpmyadmin/phpmyadmin |
Incorrect Authentication in shopware CVE-2022-24748, GHSA-83vp-6jqg-6cmr | High | 0.8% | 09 Mar, 2022 | Packagist shopware/core |
Improper Neutralization of Special Elements Used in a Template Engine in microweber CVE-2022-0896, GHSA-q9qc-pp5x-mc8c | High | 1.4% | 09 Mar, 2022 | Packagist microweber/microweber |
Server-Side Request Forgery and Open Redirect in AllTube Download CVE-2022-24739, GHSA-75p7-527p-w8wp | High | 0.9% | 08 Mar, 2022 | Packagist rudloff/alltube |
Cross Site Request Forgery in intelliants/subrion CVE-2020-18326, GHSA-9cc3-5w85-pxvx | High | 2.2% | 04 Mar, 2022 | Packagist intelliants/subrion |