Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations CVE-2023-42817, GHSA-m988-7375-7g2c | Medium | 0.4% | 25 Sep, 2023 | Packagist pimcore/admin-ui-classic-bundle |
Contao Cross-site Scripting vulnerabililty CVE-2018-5478, GHSA-mpg7-2rx9-h5qp | Medium | 0.4% | 21 Sep, 2023 | Packagist contao/core |
Neos CMS Cross Site Scripting vulnerability BIT-neos-2023-37611, CVE-2023-37611, GHSA-6qjf-7g3j-qx25 | Medium | 0.7% | 18 Sep, 2023 | Packagist neos/media-browser |
LibreNMS Cross-site Scripting vulnerability CVE-2023-4982, GHSA-m6jj-fgmh-3p8r | Medium | 0.7% | 15 Sep, 2023 | Packagist librenms/librenms |
LibreNMS Cross-site Scripting vulnerability CVE-2023-4981, GHSA-5jjm-qp48-qp86 | Medium | 0.7% | 15 Sep, 2023 | Packagist librenms/librenms |
LibreNMS Cross-site Scripting vulnerability CVE-2023-4980, GHSA-qxrq-376q-p39h | Medium | 0.7% | 15 Sep, 2023 | Packagist librenms/librenms |
LibreNMS Cross-site Scripting vulnerability CVE-2023-4979, GHSA-jp3c-g46v-jg2c | Medium | 0.7% | 15 Sep, 2023 | Packagist librenms/librenms |
LibreNMS Cross-site Scripting vulnerability CVE-2023-4978, GHSA-qjpw-rg56-jh8v | Medium | 0.7% | 15 Sep, 2023 | Packagist librenms/librenms |
LibreNMS Code Injection vulnerability CVE-2023-4977, GHSA-57m2-mpc7-gwgx | Medium | 0.5% | 15 Sep, 2023 | Packagist librenms/librenms |
Froala Editor Cross-site Scripting vulnerability CVE-2023-41592, GHSA-hvpq-7vcc-5hj5 | Medium | 1.0% | 14 Sep, 2023 | Packagist froala/wysiwyg-editor npm froala-editor |
Cecil Cross-site Scripting vulnerability CVE-2023-4913, GHSA-p9q8-7x22-5x77 | Medium | 0.5% | 12 Sep, 2023 | Packagist cecil/cecil |
Prevent injection of invalid entity ids for "autocomplete" fields CVE-2023-41336, GHSA-4cpv-669c-r79x | Medium | 0.6% | 11 Sep, 2023 | Packagist symfony/ux-autocomplete |
Cockpit CMS arbitrary file upload vulnerability CVE-2023-41564, GHSA-38vf-35cg-m73w | Medium | 1.0% | 08 Sep, 2023 | Packagist cockpit-hq/cockpit |
Badaso vulnerable to cross-site scripting CVE-2023-38970, GHSA-7422-7rq6-j4qv | Medium | 0.7% | 30 Aug, 2023 | Packagist uasoft-indonesia/badaso |
Spipu HTML2PDF vulnerable to cross-site scripting CVE-2023-39062, GHSA-99fg-2h75-m92h | Medium | 1.5% | 28 Aug, 2023 | Packagist spipu/html2pdf |
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE GHSA-jxcx-3h54-qqxx | Medium | Not scored | 23 Aug, 2023 | Packagist silverstripe/admin |
hCaptcha for EXT:form Broken Access Control vulnerability CVE-2023-41100, GHSA-93wx-j2qv-49fg | Medium | 0.7% | 23 Aug, 2023 | Packagist waldhacker/hcaptcha |
Wallabag user can delete own API client unintentionally CVE-2023-4455, GHSA-gjvc-55fw-v6vq | Medium | 0.3% | 21 Aug, 2023 | Packagist wallabag/wallabag |
Wallabag user can reset data unintentionally CVE-2023-4454, GHSA-p8gp-899c-jvq9 | Medium | 0.3% | 21 Aug, 2023 | Packagist wallabag/wallabag |
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields CVE-2023-4453, GHSA-599v-h3q5-g6r9 | Medium | 0.6% | 21 Aug, 2023 | Packagist pimcore/pimcore |
Cockpit Cross-site Scripting vulnerability CVE-2023-4451, GHSA-g3mv-64h3-h482 | Medium | 2.5% | 20 Aug, 2023 | Packagist cockpit-hq/cockpit |
Cockpit Cross-site Scripting vulnerability CVE-2023-4422, GHSA-8m65-qq6g-43rr | Medium | 0.6% | 18 Aug, 2023 | Packagist cockpit-hq/cockpit |
ThinkCMF Cross-site Scripting Vulnerability CVE-2020-25915, GHSA-4847-gqxx-v9xp | Medium | 0.4% | 11 Aug, 2023 | Packagist thinkcmf/thinkcmf |
Gila CMS Cross-site Scripting Vulnerability CVE-2020-20523, GHSA-rvjp-j5j4-c9j5 | Medium | 0.7% | 11 Aug, 2023 | Packagist gilacms/gila |
Magento Open Source allows Incorrect Authorization CVE-2023-38209, GHSA-3vg2-v639-6ch9 | Medium | 1.0% | 09 Aug, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Admidio Insufficient Session Expiration vulnerability CVE-2023-4190, GHSA-qq8m-9rpx-w2fm | Medium | 0.6% | 06 Aug, 2023 | Packagist admidio/admidio |
omeka/omeka-s Improper Input Validation vulnerability CVE-2023-4157, GHSA-fxc5-pr68-2px3 | Medium | 0.5% | 04 Aug, 2023 | Packagist omeka/omeka-s |
Sulu Observable Response Discrepancy on Admin Login CVE-2023-39343, GHSA-wmwf-49vv-p3mr | Medium | 0.6% | 03 Aug, 2023 | Packagist sulu/sulu |
pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name CVE-2023-4145, GHSA-735f-w79p-282x | Medium | 0.6% | 03 Aug, 2023 | Packagist pimcore/customer-management-framework-bundle |
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE GHSA-4q66-g4mm-8rg5 | Medium | Not scored | 31 Jul, 2023 | Packagist silverstripe/admin |
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files CVE-2023-38491, GHSA-8fv7-wq38-f5c9 | Medium | 0.6% | 27 Jul, 2023 | Packagist getkirby/cms |
Stored Cross-Site Scripting October CMS CVE-2023-37692, GHSA-r47v-rxcg-p28j | Medium | 0.5% | 26 Jul, 2023 | Packagist october/october |
Cross-Site Scripting in CKEditor4 WordCount Plugin GHSA-m8fw-p3cr-6jqc | Medium | Not scored | 25 Jul, 2023 | Packagist typo3/cms-rte-ckeditor |
By-passing Cross-Site Scripting Protection in HTML Sanitizer CVE-2023-38500, GHSA-59jf-3q9v-rh6g | Medium | 0.5% | 25 Jul, 2023 | Packagist typo3/html-sanitizer |
Information Disclosure due to Out-of-scope Site Resolution BIT-typo3-2023-38499, CVE-2023-38499, GHSA-jq6g-4v5m-wm9r | Medium | 1.1% | 25 Jul, 2023 | Packagist typo3/cms-core |
Cross site scripting via input unit widget CVE-2023-36806, GHSA-4gpr-p634-922x | Medium | 0.6% | 25 Jul, 2023 | Packagist contao/core-bundle |
Pimcore Cross-site Scripting vulnerability CVE-2023-3822, GHSA-vmpv-qjhq-r463 | Medium | 0.5% | 21 Jul, 2023 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting vulnerability CVE-2023-3821, GHSA-78q2-cv3p-x9fm | Medium | 0.6% | 21 Jul, 2023 | Packagist pimcore/pimcore |
Easy!Appointments Improper Access Control vulnerability CVE-2023-3700, GHSA-8c6q-26w6-qwhg | Medium | 0.4% | 17 Jul, 2023 | Packagist alextselegidis/easyappointments |
ImpressCMS Cross-site Scripting vulnerability CVE-2023-37785, GHSA-667r-p4gg-7m2q | Medium | 0.5% | 13 Jul, 2023 | Packagist impresscms/impresscms |
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page CVE-2023-37280, GHSA-hqv9-6jqw-9g8m | Medium | 0.6% | 11 Jul, 2023 | Packagist pimcore/admin-ui-classic-bundle |
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller CVE-2023-3574, GHSA-vx35-f379-4q49 | Medium | 0.5% | 10 Jul, 2023 | Packagist pimcore/customer-management-framework-bundle |
Wallabag vulnerable to Allocation of Resources Without Limits or Throttling CVE-2023-3566, GHSA-6qq7-3hqc-p5w4 | Medium | 1.4% | 10 Jul, 2023 | Packagist wallabag/wallabag |
TeamPass Cross-site Scripting vulnerability CVE-2023-3565, GHSA-524r-w8fx-hqg3 | Medium | 0.6% | 10 Jul, 2023 | Packagist nilsteampassnet/teampass |
Winter CMS stored XSS through privileged upload of SVG file CVE-2023-37269, GHSA-wjw2-4j7j-6gc3 | Medium | 2.7% | 07 Jul, 2023 | Packagist wintercms/winter |
Connect-CMS Privilege Escalation Vulnerability GHSA-qxh3-jgvh-x55j | Medium | Not scored | 05 Jul, 2023 | Packagist opensource-workshop/connect-cms |
Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG CVE-2023-36828, GHSA-6r5g-cq4q-327g | Medium | 0.7% | 05 Jul, 2023 | Packagist statamic/cms |
WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF) CVE-2023-23684, GHSA-cfh4-7wq9-6pgg | Medium | 0.4% | 30 Jun, 2023 | Packagist wp-graphql/wp-graphql |
MediaWiki Cross-site Scripting vulnerability BIT-mediawiki-2023-37302, CVE-2023-37302, GHSA-fmrf-p77g-vv5c | Medium | 0.7% | 30 Jun, 2023 | Packagist wikibase/wikibase |
phpMyFAQ Cross-site Scripting CVE-2023-3469, GHSA-v6g2-jwrm-h5r5 | Medium | 0.6% | 30 Jun, 2023 | Packagist thorsten/phpmyfaq |