Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Symfony Http-Kernel has non-constant time comparison in UriSigner CVE-2019-18887, GHSA-q8hg-pf8v-cxrv | High | 1.3% | 21 Nov, 2019 | Packagist symfony/http-kernel Packagist symfony/symfony |
Improper Input Validation in Centreon Web CVE-2019-16405, GHSA-4f26-v6fr-9hmp | High | 27.0% | 21 Nov, 2019 | Packagist centreon/centreon |
Timing attacks might allow practical recovery of the long-term private key CVE-2019-10764, GHSA-mr6r-82x4-f4jj, SNYK-PHP-SIMPLITOELLIPTICPHP-534576 | High | 1.1% | 18 Nov, 2019 | Packagist simplito/elliptic-php |
Pimcore Discloses Usernames In Use CVE-2019-18986, GHSA-8889-9g3f-73rj | High | 1.2% | 15 Nov, 2019 | Packagist pimcore/pimcore |
Moodle backs up private files CVE-2012-1156, GHSA-358r-g2xw-7c83 | High | 2.1% | 14 Nov, 2019 | Packagist moodle/moodle |
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes CVE-2019-18857, GHSA-gf8j-v8x5-h9qp | High | 1.0% | 11 Nov, 2019 | Packagist enshrined/svg-sanitize |
Signature validation bypass in XmlSecLibs CVE-2019-3465, GHSA-pqm6-cgwr-x6pf | High | 3.0% | 07 Nov, 2019 | Packagist robrichards/xmlseclibs |
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue CVE-2019-12331, GHSA-vvwv-h69m-wg6f | High | 1.4% | 07 Nov, 2019 | Packagist phpoffice/phpexcel Packagist phpoffice/phpspreadsheet |
simpleSAMLphp incorrectly handles XML encryption CVE-2011-4625, GHSA-5fj7-f8x3-q2mc | High | 0.7% | 06 Nov, 2019 | Packagist simplesamlphp/simplesamlphp |
Magento 2 Community Edition SSRF vulnerability CVE-2019-8156, GHSA-775w-gx3f-4j4f | High | 1.7% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Remote code execution through catalog attribute sets CVE-2019-8231, GHSA-qpc8-m2xm-9w75 | High | 1.4% | 06 Nov, 2019 | Packagist magento/core |
Magento Remote code execution through support/output path modification CVE-2019-8230, GHSA-qp43-2vhf-cj8g | High | 1.4% | 06 Nov, 2019 | Packagist magento/core |
Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability CVE-2019-8229, GHSA-w8vh-5v64-j3vr | High | 1.4% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8159, GHSA-47h6-hfpv-7phj | High | 3.3% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento remote code execution vulnerability CVE-2019-8154, GHSA-4v2q-hjx3-c4vr | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Server-Side Request Forgery (SSRF) CVE-2019-8151, GHSA-f73h-224c-62qr | High | 1.7% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8150, GHSA-p783-gj6m-9r88 | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8141, GHSA-9wr9-fw9v-8fgr | High | 2.4% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8137, GHSA-jrjx-8gmw-jj2q | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento SQL injection via marketing account with access to email templates variables CVE-2019-8134, GHSA-45gj-78hc-4mvc | High | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento SQL injection vulnerability CVE-2019-8130, GHSA-x42g-82pp-4v6g | High | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SQLi Vulnerability CVE-2019-8127, GHSA-2x2q-2xpv-mcf9 | High | 1.3% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8122, GHSA-5v5p-x8c2-mqxp | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8119, GHSA-j63v-wcf9-c9hm | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8114, GHSA-crv7-r357-gw3w | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento 2 Community Edition Security Bypass CVE-2019-8112, GHSA-p9vf-4jx2-5hpp | High | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8111, GHSA-2crc-5vq6-386r | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8110, GHSA-gfcq-wh3g-c6h4 | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability via CSRF CVE-2019-8109, GHSA-x72m-p4qc-p7rv | High | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento Information Disclosure via File upload functionality CVE-2019-8093, GHSA-32x5-6p4q-q8jh | High | 1.3% | 05 Nov, 2019 | Packagist magento/community-edition |
TYPO3 Arbitrary Code Execution vulnerability on the backend CVE-2010-3663, GHSA-wjpc-gjf7-9938 | High | 2.4% | 04 Nov, 2019 | Packagist typo3/cms-backend |
TYPO3 SQL injection vulnerability on the backend CVE-2010-3662, GHSA-4rvc-5hrh-qmwf | High | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-backend |
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass CVE-2013-4751, GHSA-q8j7-fjh7-25v5 | High | 1.4% | 01 Nov, 2019 | Packagist symfony/symfony Packagist symfony/validator |
url_redirect for Typo3 SQLi Vulnerability CVE-2019-16682, GHSA-hcpv-xh8q-f3vq | High | 0.8% | 16 Oct, 2019 | Packagist sfroemken/url_redirect |
MantisBT Remote Code Execution CVE-2019-15715, GHSA-v23g-wjvq-2fpf | High | 30.0% | 09 Oct, 2019 | Packagist mantisbt/mantisbt |
Centreon Does Not Set HTTPOnly Flag CVE-2019-17104, GHSA-j224-7qr4-8646 | High | 1.9% | 08 Oct, 2019 | Packagist centreon/centreon |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-16993, GHSA-vj3x-vfm4-hvxc | High | 0.8% | 30 Sep, 2019 | Packagist phpbb/phpbb |
Authorization Bypass Through User-Controlled Key in Bagisto CVE-2019-16403, GHSA-pwrf-q7h8-jjr7 | High | 1.4% | 18 Sep, 2019 | Packagist bagisto/bagisto |
Pimcore Unrestricted Upload of File with Dangerous Type CVE-2019-16318, GHSA-cxj7-4jpj-2q38, SNYK-PHP-PIMCOREPIMCORE-451598 | High | 1.4% | 14 Sep, 2019 | Packagist pimcore/pimcore |
Pimcore RCE via PHAR upload CVE-2019-16317, GHSA-352x-hc2f-fwff, SNYK-PHP-PIMCOREPIMCORE-451599 | High | 1.7% | 14 Sep, 2019 | Packagist pimcore/pimcore |
SQL Injection in LibreNMS CVE-2019-12465, GHSA-878x-85hc-gc4g | High | 1.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Path Traversal in LibreNMS CVE-2019-12464, GHSA-r336-jxfr-4c3c | High | 2.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Improper Encoding or Escaping of Output and Injection in LibreNMS CVE-2019-12463, GHSA-w5r2-gvgf-mpm8 | High | 1.4% | 09 Sep, 2019 | Packagist librenms/librenms |
SQL Injection in LibreNMS CVE-2019-10671, GHSA-g9xh-3w5g-229r | High | 1.3% | 09 Sep, 2019 | Packagist librenms/librenms |
Dolibarr Cross-Site Request Forgery (CSRF) CVE-2019-15062, GHSA-4qq9-qg7j-fcm9 | High | 0.6% | 14 Aug, 2019 | Packagist dolibarr/dolibarr |
Bagisto CSRF Vulnerability CVE-2019-14933, GHSA-pgwp-f3xh-m24g | High | 0.6% | 11 Aug, 2019 | Packagist bagisto/bagisto |
PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm CVE-2016-5431, GHSA-xm5f-hc9r-76f3 | High | 1.0% | 07 Aug, 2019 | Packagist gree/jose |
Magento 2 Community Edition Information Leak CVE-2019-7951, GHSA-5j25-5hjr-w7m2 | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Access Control Bypass CVE-2019-7950, GHSA-2fhr-f6q6-c4p2 | High | 2.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE CVE-2019-7942, GHSA-vvf9-fxhv-4rgj | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |