Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Shopware improper mail validation vulnerability CVE-2023-34099, GHSA-gh66-fp7j-98v5 | Medium | 0.6% | 27 Jun, 2023 | Packagist shopware/shopware |
Shopware dependency configuration exposed CVE-2023-34098, GHSA-q97c-2mh3-pgw9 | Medium | 0.6% | 27 Jun, 2023 | Packagist shopware/shopware |
Admidio Improper Access Control vulnerability CVE-2023-3304, GHSA-x3m2-3pwj-8fj4 | Medium | 0.4% | 23 Jun, 2023 | Packagist admidio/admidio |
Moodle vulnerable to SQL Injection BIT-moodle-2023-35132, CVE-2023-35132, GHSA-49mv-vfcp-8gg9 | Medium | 0.8% | 22 Jun, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting BIT-moodle-2023-35131, CVE-2023-35131, GHSA-fwfj-8p36-rc64 | Medium | 0.7% | 22 Jun, 2023 | Packagist moodle/moodle |
YiiCMS Cross Site Scripting vulnerability CVE-2020-21246, GHSA-gqr4-cvf4-3957 | Medium | 0.6% | 20 Jun, 2023 | Packagist sheng/yiicms |
NodCMS Cross Site Scripting vulnerability CVE-2020-20697, GHSA-7xqx-xwg9-jx34 | Medium | 0.5% | 20 Jun, 2023 | Packagist khodakhah/nodcms |
Craft CMS vulnerable to HTML injection CVE-2023-33495, GHSA-m3v5-gjj9-rg24 | Medium | 0.5% | 20 Jun, 2023 | Packagist craftcms/cms |
ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting CVE-2023-35783, GHSA-f4m6-x2xj-jc7w | Medium | 0.3% | 16 Jun, 2023 | Packagist tpwd/ke_search |
Magento Open Source allows Incorrect Authorization CVE-2023-29296, GHSA-3qr4-w96f-672v | Medium | 0.6% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Incorrect Authorization CVE-2023-29295, GHSA-354h-fpmq-68v7 | Medium | 0.6% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source has Business Logic Errors Vulnerability CVE-2023-29294, GHSA-28vp-39rf-3q2j | Medium | 0.7% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Server-Side Request Forgery (SSRF) CVE-2023-29292, GHSA-4588-7x48-jrgj | Medium | 1.0% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Server-Side Request Forgery (SSRF) CVE-2023-29291, GHSA-5f79-vhr4-vw2r | Medium | 1.1% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Incorrect Authorization CVE-2023-29290, GHSA-qw5m-vmp3-f553 | Medium | 0.6% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows XML Injection CVE-2023-29289, GHSA-wh42-8r2w-873x | Medium | 0.9% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Incorrect Authorization CVE-2023-29288, GHSA-f989-3fp9-q3r2 | Medium | 0.6% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Information Exposure CVE-2023-29287, GHSA-85m4-g9vq-xpxj | Medium | 0.7% | 15 Jun, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Froxlor Session Fixation vulnerability CVE-2023-3192, GHSA-jr66-9ghf-6gp3 | Medium | 0.4% | 11 Jun, 2023 | Packagist froxlor/froxlor |
Teampass Cross-site Scripting vulnerability CVE-2023-3191, GHSA-qmw8-x364-xxxm | Medium | 0.5% | 10 Jun, 2023 | Packagist nilsteampassnet/teampass |
Teampass Cross-site Scripting vulnerability CVE-2023-3190, GHSA-p7xm-g427-jxfc | Medium | 0.5% | 10 Jun, 2023 | Packagist nilsteampassnet/teampass |
Microweber Cross-site Scripting vulnerability CVE-2023-3142, GHSA-fqcv-rfp6-wv92 | Medium | 0.3% | 07 Jun, 2023 | Packagist microweber/microweber |
Admidio vulnerable to Cross-site Scripting CVE-2023-3109, GHSA-gx4r-fvwg-8678 | Medium | 0.5% | 05 Jun, 2023 | Packagist admidio/admidio |
TeamPass vulnerable to Improper Access Control CVE-2023-3095, GHSA-g3jr-6vj4-3x82 | Medium | 0.4% | 04 Jun, 2023 | Packagist nilsteampassnet/teampass |
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket' CVE-2023-54394, GHSA-42qm-8v8m-m78c | Medium | 0.5% | 01 Jun, 2023 | Packagist pocketmine/pocketmine-mp |
nilsteampassnet/teampass vulnerable to cross-site scripting CVE-2023-3009, GHSA-h5g9-2p35-54c7 | Medium | 0.7% | 31 May, 2023 | Packagist nilsteampassnet/teampass |
Dcat-Admin vulnerable to Stored Cross-site Scripting CVE-2023-33736, GHSA-p74v-mwvg-8ghp | Medium | 0.4% | 31 May, 2023 | Packagist dcat/laravel-admin |
thorsten/phpmyfaq vulnerable to cross-site scripting CVE-2023-2999, GHSA-94r7-63g8-c4jw | Medium | 0.5% | 31 May, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq vulnerable to cross-site scripting CVE-2023-2998, GHSA-974q-4vvr-vg9c | Medium | 0.5% | 31 May, 2023 | Packagist thorsten/phpmyfaq |
Stored cross site scripting in Craft CMS CVE-2023-2817, GHSA-7x94-jx75-3gh6 | Medium | 0.4% | 26 May, 2023 | Packagist craftcms/cms |
Craft CMS stored XSS in indexedVolumes CVE-2023-33197, GHSA-6qjx-787v-6pxr | Medium | 0.7% | 26 May, 2023 | Packagist craftcms/cms |
Craft CMS stored XSS in review volume CVE-2023-33196, GHSA-cjmm-x9x9-m2w5 | Medium | 0.7% | 26 May, 2023 | Packagist craftcms/cms |
Craft CMS XSS in RSS widget feed CVE-2023-33195, GHSA-qpgm-gjgf-8c2x | Medium | 0.7% | 26 May, 2023 | Packagist craftcms/cms |
CraftCMS stored XSS in Quick Post widget error message CVE-2023-33194, GHSA-3wxg-w96j-8hq9 | Medium | 0.6% | 26 May, 2023 | Packagist craftcms/cms |
Pimcore customers' list user password hash is disclosed CVE-2023-2881, GHSA-j65r-g7q2-f8v3 | Medium | 0.5% | 25 May, 2023 | Packagist pimcore/customer-management-framework-bundle |
LavaLite vulnerable to Cross Site Scripting CVE-2023-30124, GHSA-h538-r9x6-rcmc | Medium | 0.4% | 18 May, 2023 | Packagist lavalite/cms |
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits CVE-2023-26044, GHSA-95x4-j7vc-h8mf | Medium | 0.7% | 17 May, 2023 | Packagist react/http |
phpMyFAQ vulnerable to stored Cross-site Scripting CVE-2023-2753, GHSA-vppq-6ff8-2m8w | Medium | 0.6% | 17 May, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ vulnerable to stored Cross-site Scripting CVE-2023-2752, GHSA-j657-pjgc-c4h6 | Medium | 0.5% | 17 May, 2023 | Packagist thorsten/phpmyfaq |
Moodle vulnerable to stored Cross-site Scripting BIT-moodle-2021-27131, CVE-2021-27131, GHSA-w2pm-fr62-jgv4 | Medium | 0.7% | 16 May, 2023 | Packagist moodle/moodle |
Pimcore Cross-site Scripting vulnerability CVE-2023-2730, GHSA-q3p4-v2cm-q945 | Medium | 0.5% | 16 May, 2023 | Packagist pimcore/pimcore |
LavaLite CMS vulnerable to host header injection attack CVE-2023-27237, GHSA-94q4-v5g6-qp7x | Medium | 0.6% | 12 May, 2023 | Packagist lavalite/cms |
Pimcore vulnerable to Business Logic Errors via Customer automation rules CVE-2023-32075, GHSA-x99j-r8vv-gwwj | Medium | 0.8% | 11 May, 2023 | Packagist pimcore/customer-management-framework-bundle |
Ibexa User Settings are accessible on the front-end for anonymous user GHSA-r3fg-3r88-6x3f | Medium | Not scored | 10 May, 2023 | Packagist ibexa/user |
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations CVE-2023-2630, GHSA-w766-3572-f2hv | Medium | 0.6% | 10 May, 2023 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete CVE-2023-2615, GHSA-q7cc-m6jw-m262 | Medium | 0.5% | 10 May, 2023 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports CVE-2023-2614, GHSA-m6m9-gr85-79vm | Medium | 0.5% | 10 May, 2023 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting (XSS) in Static Routes name field CVE-2023-2616, GHSA-mhpj-7m7h-8p6x | Medium | 0.5% | 10 May, 2023 | Packagist pimcore/pimcore |
craftcms/cms vulnerable to cross site scripting in RSS feed widget CVE-2023-31144, GHSA-j4mx-98hw-6rv6 | Medium | 0.4% | 05 May, 2023 | Packagist craftcms/cms |
Cross Site Scripting in nilsteampassnet/teampass CVE-2023-2516, GHSA-2ffp-w665-9mgx | Medium | 0.6% | 05 May, 2023 | Packagist nilsteampassnet/teampass |