Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Corveda PHPSandbox Protection Mechanism Failure vulnerability CVE-2014-125107, GHSA-625p-jwcp-r2r5 | Medium | 0.8% | 19 Dec, 2023 | Packagist corveda/phpsandbox |
phpMyFAQ Cross-site Scripting vulnerability CVE-2023-6890, GHSA-4h37-q5j3-hw96 | Medium | 0.5% | 16 Dec, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Cross-site Scripting vulnerability CVE-2023-6889, GHSA-w8xj-992g-842f | Medium | 0.5% | 16 Dec, 2023 | Packagist thorsten/phpmyfaq |
Business Logic Errors in microweber/microweber CVE-2023-6832, GHSA-qjfx-fvx7-3wvw | Medium | 0.5% | 15 Dec, 2023 | Packagist microweber/microweber |
Insecure Direct Object Reference in extension "Content Consent" (content_consent) CVE-2023-50462, GHSA-j8cw-ppmv-wj85 | Medium | 0.3% | 13 Dec, 2023 | Packagist t3s/content-consent |
Broken Access Control in extension "femanager" CVE-2023-50459, GHSA-4xp5-hr35-84cx | Medium | 0.3% | 13 Dec, 2023 | Packagist in2code/femanager |
Cross-site Scripting in Semantic MediaWiki CVE-2022-48614, GHSA-hj4c-vfc4-5f9c | Medium | 0.4% | 10 Dec, 2023 | Packagist mediawiki/semantic-media-wiki |
Microweber missing standardized error handling mechanism CVE-2023-6599, GHSA-9r6p-hg4g-5gxp | Medium | 0.5% | 08 Dec, 2023 | Packagist microweber/microweber |
Microweber Business Logic Errors CVE-2023-6566, GHSA-3rpx-pgmf-j96h | Medium | 0.5% | 07 Dec, 2023 | Packagist microweber/microweber |
pubnub Insufficient Entropy vulnerability CVE-2023-26154, GHSA-5844-q3fc-56rh, GO-2023-2385, PYSEC-2026-1807 | Medium | 1.0% | 06 Dec, 2023 | Go github.com/pubnub/go Go github.com/pubnub/go/v5 Go github.com/pubnub/go/v6 Go github.com/pubnub/go/v7 +10 more |
Test code in published microsoft-graph-beta package exposes phpinfo() GHSA-7mc6-x925-7qvx | Medium | Not scored | 05 Dec, 2023 | Packagist microsoft/microsoft-graph-beta |
Test code in published microsoft-graph-core package exposes phpinfo() CVE-2023-49283, GHSA-mhhp-c3cm-2r86 | Medium | 2.2% | 05 Dec, 2023 | Packagist microsoft/microsoft-graph-core |
Test code in published microsoft-graph package exposes phpinfo() CVE-2023-49282, GHSA-cgwq-6prq-8h9q | Medium | 2.2% | 05 Dec, 2023 | Packagist microsoft/microsoft-graph |
PHPMemcachedAdmin vulnerable to cross-site scripting (XSS) via improper encoding CVE-2023-6027, GHSA-pr4w-m4rp-gp87 | Medium | 0.4% | 30 Nov, 2023 | Packagist elijaa/phpmemcacheadmin |
October CMS safe mode bypass using Page template injection CVE-2023-44381, GHSA-q22j-5r3g-9hmh | Medium | 0.5% | 29 Nov, 2023 | Packagist october/system |
October CMS stored XSS by authenticated backend user with improper configuration CVE-2023-44383, GHSA-rvx8-p3xp-fj3p | Medium | 0.4% | 29 Nov, 2023 | Packagist october/system |
OroCommerce get-totals-for-checkout API endpoint returns unwanted data CVE-2023-32065, GHSA-88g2-xgh9-4ph2 | Medium | 0.5% | 27 Nov, 2023 | Packagist oro/commerce |
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility CVE-2023-32064, GHSA-8gwj-68w6-7v6c | Medium | 0.5% | 27 Nov, 2023 | Packagist oro/customer-portal |
OroCRMCallBundle has incorrect call view page visibility CVE-2023-32063, GHSA-897w-jv7j-6r7g | Medium | 0.5% | 27 Nov, 2023 | Packagist oro/crm-call-bundle |
OroCalendarBundle has incorrect system calendar events visibility CVE-2023-32062, GHSA-x2xm-p6vq-482g | Medium | 0.5% | 27 Nov, 2023 | Packagist oro/calendar-bundle |
Cleartext Storage of Sensitive Information in HMAC SHA256 Authentication CVE-2023-48707, GHSA-v427-c49j-8w6x | Medium | 0.3% | 23 Nov, 2023 | Packagist codeigniter4/shield |
Insertion of Sensitive Information into Log CVE-2023-48708, GHSA-j72f-h752-mx4w | Medium | 0.6% | 23 Nov, 2023 | Packagist codeigniter4/shield |
Cross-site Scripting in DOMSanitizer CVE-2023-49146, GHSA-2ghm-r75j-pjx2 | Medium | 0.4% | 22 Nov, 2023 | Packagist rhukster/dom-sanitizer |
Cross-site Scripting in Admidio CVE-2023-47380, GHSA-vm4p-gh82-xq96 | Medium | 0.7% | 22 Nov, 2023 | Packagist admidio/admidio |
LibreNMS has Broken Access control on Graphs Feature CVE-2023-48294, GHSA-fpq5-4vwm-78x4 | Medium | 0.7% | 17 Nov, 2023 | Packagist librenms/librenms |
LibreNMS Cross-site Scripting at Device groups Deletion feature CVE-2023-48295, GHSA-8phr-637g-pxrg | Medium | 0.6% | 17 Nov, 2023 | Packagist librenms/librenms |
Concrete CMS Cross-site Scripting vulnerability CVE-2023-48649, GHSA-36fr-3wg8-q5v8 | Medium | 0.6% | 17 Nov, 2023 | Packagist concrete5/concrete5 |
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory GHSA-w98g-5fmx-wm4x | Medium | Not scored | 15 Nov, 2023 | Packagist pocketmine/raklib |
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes CVE-2023-48219, GHSA-v626-r774-j7f8 | Medium | 0.7% | 15 Nov, 2023 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document CVE-2023-47636, GHSA-c8hj-w239-5gvf | Medium | 0.7% | 15 Nov, 2023 | Packagist pimcore/admin-ui-classic-bundle |
Information Disclosure in typo3/cms-install tool BIT-typo3-2023-47126, CVE-2023-47126, GHSA-p2jh-95jg-2w55 | Medium | 0.7% | 14 Nov, 2023 | Packagist typo3/cms-install |
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer BIT-typo3-2023-47125, CVE-2023-47125, GHSA-mm79-jhqm-9j54 | Medium | 0.6% | 14 Nov, 2023 | Packagist typo3/html-sanitizer |
TYPO3 vulnerable to Weak Authentication in Session Handling BIT-typo3-2023-47127, CVE-2023-47127, GHSA-3vmm-7h4j-69rm | Medium | 0.6% | 14 Nov, 2023 | Packagist typo3/cms-core |
Symfony potential Cross-site Scripting in WebhookController BIT-symfony-2023-46735, CVE-2023-46735, GHSA-72x2-5c85-6wmr | Medium | 0.6% | 10 Nov, 2023 | Packagist symfony/symfony Packagist symfony/webhook |
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters BIT-symfony-2023-46734, CVE-2023-46734, GHSA-q847-2q57-wmr3 | Medium | 0.7% | 10 Nov, 2023 | Packagist symfony/symfony Packagist symfony/twig-bridge |
Symfony possible session fixation vulnerability BIT-symfony-2023-46733, CVE-2023-46733, GHSA-m2wj-r6g3-fxfx | Medium | 0.7% | 10 Nov, 2023 | Packagist symfony/security-http Packagist symfony/symfony |
Moodle Improper Access Control vulnerability BIT-moodle-2023-5549, CVE-2023-5549, GHSA-fm5h-58g2-4m3f | Medium | 0.6% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability BIT-moodle-2023-5548, CVE-2023-5548, GHSA-cwh2-q44x-5w3c | Medium | 0.3% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-5547, CVE-2023-5547, GHSA-9gqp-3g28-w9xc | Medium | 0.5% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-5546, CVE-2023-5546, GHSA-9724-h8p7-r3jv | Medium | 1.3% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability BIT-moodle-2023-5545, CVE-2023-5545, GHSA-26fg-v32r-h663 | Medium | 0.6% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-5544, CVE-2023-5544, GHSA-j5xf-gv89-g422 | Medium | 0.6% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Improper Access Control vulnerability BIT-moodle-2023-5542, CVE-2023-5542, GHSA-8mm2-m2gp-c6x2 | Medium | 0.5% | 09 Nov, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-5541, CVE-2023-5541, GHSA-28gc-4qq5-8q26 | Medium | 0.5% | 09 Nov, 2023 | Packagist moodle/moodle |
Any value can be changed in the configuration table by an employee having access to block reassurance module CVE-2023-47110, GHSA-xfm3-hjcc-gv78 | Medium | 0.4% | 09 Nov, 2023 | Packagist prestashop/blockreassurance |
Microweber Cross-site Scripting vulnerability CVE-2023-47379, GHSA-jmwm-w2rm-prv9 | Medium | 0.5% | 08 Nov, 2023 | Packagist microweber/microweber |
Microweber Improper Access Control vulnerability CVE-2023-5976, GHSA-q57g-38pc-jwv8 | Medium | 0.4% | 07 Nov, 2023 | Packagist microweber/microweber |
Reportico Cross-site Scripting vulnerability CVE-2023-46925, GHSA-9cw9-m7hg-w8mf | Medium | 0.4% | 02 Nov, 2023 | Packagist reportico-web/reportico |
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting BIT-phpbb-2023-5917, CVE-2023-5917, GHSA-gmx8-8rff-qv6q | Medium | 0.5% | 02 Nov, 2023 | Packagist phpbb/phpbb |
Dolibarr Improper Input Validation vulnerability BIT-dolibarr-2023-4198, CVE-2023-4198, GHSA-48v2-596x-4jr9 | Medium | 0.6% | 01 Nov, 2023 | Packagist dolibarr/dolibarr |