Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews CVE-2023-46722, GHSA-jfxw-6c5v-c42f | Medium | 0.5% | 31 Oct, 2023 | Packagist pimcore/admin-ui-classic-bundle |
Pimcore Cross-site Scripting vulnerability CVE-2023-5873, GHSA-j59v-hh4p-q92m | Medium | 0.3% | 31 Oct, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting (XSS) in thorsten/phpmyfaq CVE-2023-5867, GHSA-prrv-r843-4p75 | Medium | 0.4% | 31 Oct, 2023 | Packagist thorsten/phpmyfaq |
Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq CVE-2023-5866, GHSA-34w4-wrqp-j47g | Medium | 0.3% | 31 Oct, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5863, GHSA-j4vj-w5rj-8grw | Medium | 1.1% | 31 Oct, 2023 | Packagist thorsten/phpmyfaq |
Cross-site Scripting (XSS) in microweber/microweber CVE-2023-5861, GHSA-7q5f-29gx-57ff | Medium | 0.4% | 31 Oct, 2023 | Packagist microweber/microweber |
Cross-site Scripting (XSS) in dolibarr/dolibarr BIT-dolibarr-2023-5842, CVE-2023-5842, GHSA-9pjf-jw9q-fx49 | Medium | 0.5% | 30 Oct, 2023 | Packagist dolibarr/dolibarr |
baserCMS Directory Traversal vulnerability in Form submission data management Feature CVE-2023-43648, GHSA-hmqj-gv2m-hq55 | Medium | 1.2% | 26 Oct, 2023 | Packagist baserproject/basercms |
baserCMS Cross-site Scripting vulnerability in File upload Feature CVE-2023-43647, GHSA-ggj4-78rm-6xgv | Medium | 0.6% | 26 Oct, 2023 | Packagist baserproject/basercms |
baserCMS Cross-site Scripting Vulnerability in Favorites Feature CVE-2023-29009, GHSA-8vqx-prq4-rqrq | Medium | 0.6% | 26 Oct, 2023 | Packagist baserproject/basercms |
Zenario CMS Cross-site Scripting vulnerability CVE-2023-44769, GHSA-8g87-73vq-443p | Medium | 0.7% | 25 Oct, 2023 | Packagist tribalsystems/zenario |
Concrete CMS Cross-site Scripting vulnerability CVE-2023-44760, GHSA-4qv6-37xq-mgq2 | Medium | 0.7% | 23 Oct, 2023 | Packagist concrete5/concrete5 |
Evolution CMS Cross-site Scripting vulnerability CVE-2023-43340, GHSA-432f-967f-vxg4 | Medium | 0.5% | 19 Oct, 2023 | Packagist evolutioncms/evolution |
Subrion CMS vulnerable to Cross-site Scripting CVE-2023-43875, GHSA-646r-8fcc-p82r | Medium | 0.8% | 19 Oct, 2023 | Packagist intelliants/subrion |
Evolution CMS Cross-site Scripting vulnerability CVE-2023-43341, GHSA-5h47-9rm5-fx3f | Medium | 0.6% | 19 Oct, 2023 | Packagist evolutioncms/evolution |
TinyMCE XSS vulnerability in notificationManager.open API CVE-2023-45819, GHSA-hgqx-r2hp-jr38 | Medium | 0.6% | 19 Oct, 2023 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin CVE-2023-45818, GHSA-v65r-p3vv-jjfv | Medium | 0.8% | 19 Oct, 2023 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
MantisBT may disclose project names to unauthorized users CVE-2023-44394, GHSA-v642-mh27-8j6m | Medium | 0.7% | 16 Oct, 2023 | Packagist mantisbt/mantisbt |
Cross-site Scripting (XSS) in froxlor/froxlor CVE-2023-4829, GHSA-cvwv-h85m-w37h | Medium | 0.4% | 13 Oct, 2023 | Packagist froxlor/froxlor |
Magento Open Source allows Uncontrolled Resource Consumption CVE-2023-38251, GHSA-7pfc-834q-h497 | Medium | 0.8% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows SQL Injection CVE-2023-38250, GHSA-h3g9-cwr6-hphx | Medium | 0.8% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows SQL Injection CVE-2023-38249, GHSA-rq36-9f5f-2gw7 | Medium | 0.8% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows SQL Injection CVE-2023-38221, GHSA-ggr8-3hwx-4f2m | Medium | 0.8% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source has Improper Input Validation Vulnerability CVE-2023-26367, GHSA-9mx6-4gg4-85xj | Medium | 0.8% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Server-Side Request Forgery (SSRF) CVE-2023-26366, GHSA-8jxc-5f94-22vh | Medium | 0.9% | 13 Oct, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Cross-site Scripting (XSS) in froxlor/froxlor CVE-2023-5564, GHSA-j5hq-6frc-64v3 | Medium | 0.4% | 13 Oct, 2023 | Packagist froxlor/froxlor |
ConcreteCMS vulnerable to Stored Cross-site Scripting CVE-2023-44763, GHSA-wrp2-6v6j-hfmg | Medium | 0.7% | 10 Oct, 2023 | Packagist concrete5/concrete5 |
OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item CVE-2022-35950, GHSA-2jc6-3fhj-8q84 | Medium | 0.4% | 09 Oct, 2023 | Packagist oro/commerce |
Cross-site Scripting in snipe/snipe-it CVE-2023-5452, GHSA-rr5c-69c9-gj9f | Medium | 0.6% | 06 Oct, 2023 | Packagist snipe/snipe-it |
Zenario CMS Cross-site Scripting vulnerability CVE-2023-44771, GHSA-6cxv-27r2-fp3m | Medium | 0.6% | 06 Oct, 2023 | Packagist tribalsystems/zenario |
Zenario CMS Cross-site Scripting vulnerability CVE-2023-44770, GHSA-mr4w-7vm9-cgqx | Medium | 0.6% | 06 Oct, 2023 | Packagist tribalsystems/zenario |
ConcreteCMS Cross-site Scripting vulnerability CVE-2023-44766, GHSA-437p-jfm4-2387 | Medium | 0.6% | 06 Oct, 2023 | Packagist concrete5/concrete5 |
ConcreteCMS Cross-site Scripting vulnerability CVE-2023-44765, GHSA-6xx7-r8x4-fpjp | Medium | 0.6% | 06 Oct, 2023 | Packagist concrete5/concrete5 |
ConcreteCMS Cross-site Scripting vulnerability CVE-2023-44764, GHSA-j6h5-ggv2-3rfv | Medium | 0.6% | 06 Oct, 2023 | Packagist concrete5/concrete5 |
ConcreteCMS Cross-site Scripting vulnerability CVE-2023-44762, GHSA-6fm3-r6mf-j875 | Medium | 0.6% | 06 Oct, 2023 | Packagist concrete5/concrete5 |
ConcreteCMS Cross-site Scripting vulnerability CVE-2023-44761, GHSA-p4jj-gwpg-9jwh | Medium | 0.6% | 06 Oct, 2023 | Packagist concrete5/concrete5 |
TYPO3 extension femanager Broken Access Control vulnerability CVE-2023-45023, GHSA-93j4-v838-8767 | Medium | 0.2% | 04 Oct, 2023 | Packagist in2code/femanager |
Wallabag user can disable 2FA unintentionally GHSA-56fm-hfp3-x3w3 | Medium | Not scored | 02 Oct, 2023 | Packagist wallabag/wallabag |
Dolibarr Cross-site Scripting vulnerability BIT-dolibarr-2023-5323, CVE-2023-5323, GHSA-39m3-cj8c-886r | Medium | 0.4% | 01 Oct, 2023 | Packagist dolibarr/dolibarr |
phpMyFaq Cross-site Scripting vulnerability CVE-2023-5317, GHSA-5jwv-m8h3-69cg | Medium | 0.4% | 30 Sep, 2023 | Packagist thorsten/phpmyfaq |
PrestaShop allows users to uninstall modules from backoffice, even with low rights CVE-2023-43663, GHSA-6jmf-2pfc-q9m7 | Medium | 0.4% | 28 Sep, 2023 | Packagist prestashop/prestashop |
PrestaShop allows employee without any access rights to list all installed modules CVE-2023-43664, GHSA-gvrg-62jp-rf7j | Medium | 0.5% | 28 Sep, 2023 | Packagist prestashop/prestashop |
Subrion CMS Cross-site Scripting vulnerability CVE-2023-43884, GHSA-7vff-rv2f-cj79 | Medium | 0.5% | 28 Sep, 2023 | Packagist intelliants/subrion |
Withdrawn Advisory: October Cross-site Scripting vulnerability CVE-2023-43876, GHSA-2g8p-j2r6-vqpj | Medium | 0.5% | 28 Sep, 2023 | Packagist october/cms |
Economizzer vulnerable to Clickjacking CVE-2023-38873, GHSA-gc95-5mmp-mp6j | Medium | 0.8% | 28 Sep, 2023 | Packagist gugoan/economizzer |
Economizzer user enumeration vulnerability CVE-2023-38871, GHSA-h3qf-v68r-35jg | Medium | 0.8% | 28 Sep, 2023 | Packagist gugoan/economizzer |
Microweber Cross-site Scripting vulnerability CVE-2023-5244, GHSA-rgf9-j7gv-rq22 | Medium | 1.1% | 28 Sep, 2023 | Packagist microweber/microweber |
Pimcore Demo Allows GraphQL Introspection CVE-2023-5192, GHSA-p76j-h4m8-hx5c | Medium | 1.0% | 27 Sep, 2023 | Packagist pimcore/demo |
Subrion CMS XSS in /panel/configuration/financial/ CVE-2023-43830, GHSA-q832-2275-rfqh | Medium | 0.6% | 27 Sep, 2023 | Packagist intelliants/subrion |
Subrion CMS Cross-site Scripting vulnerability in /panel/languages CVE-2023-43828, GHSA-4w2j-wj9q-6wpx | Medium | 0.6% | 27 Sep, 2023 | Packagist intelliants/subrion |