Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Magento 2 Community Edition RCE Vulnerability CVE-2019-7932, GHSA-969v-mwp3-4mr3 | High | 2.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Unrestricted File Upload CVE-2019-7930, GHSA-3h69-4frw-g2jm | High | 2.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition DoS vulnerability CVE-2019-7928, GHSA-hrg3-4q56-p2q5 | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SSRF vulnerability CVE-2019-7923, GHSA-hvcp-jvx5-4pmp | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition DoS vulnerability CVE-2019-7915, GHSA-prw8-gqwp-f7fh | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SSRF vulnerability CVE-2019-7913, GHSA-hppc-rpfp-r8qw | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Filter extension bypass via crafted store configuration keys CVE-2019-7912, GHSA-f8h9-7rpq-7qcc | High | 1.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Server-Side Request Forgery vulnerability CVE-2019-7911, GHSA-33cj-w75f-49m2 | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7903, GHSA-jhvh-mjfg-5m99 | High | 2.1% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7896, GHSA-2x55-mg9r-24f7 | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7895, GHSA-mw5w-cf76-73m8 | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability via SSRF CVE-2019-7892, GHSA-w3r8-fxv5-58pp | High | 1.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition IDOR Vulnerability CVE-2019-7890, GHSA-3pgc-7jf3-5x5g | High | 0.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cryptographic Flaw CVE-2019-7886, GHSA-c2gg-rrhc-fvvg | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7885, GHSA-mp9r-rh95-f8f8 | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7876, GHSA-6qh6-v99h-vh4c | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition Packagist magento/product-community-edition |
Magento 2 Community Edition Unsafe File Upload CVE-2019-7871, GHSA-v527-6h5r-cfg8 | High | 1.3% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition CSRF Vulnerability CVE-2019-7865, GHSA-wmrg-w9vg-7jqx | High | 0.5% | 02 Aug, 2019 | Packagist magento/community-edition Packagist magento/product-community-edition |
Magento 2 Community Edition Unsafe File Upload CVE-2019-7861, GHSA-j837-vm6w-6qcv | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Weak PRNG CVE-2019-7860, GHSA-8v9h-m7pj-hx7c | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Path Traversal Vulnerability CVE-2019-7859, GHSA-hqhf-8jgc-h5hx | High | 1.5% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cryptographic Flaw CVE-2019-7858, GHSA-7h8v-f2g9-39fx | High | 0.7% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition IDOR Vulnerability CVE-2019-7854, GHSA-hpxv-vpfv-7jc9 | High | 1.1% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Session Fixation Check CVE-2019-7849, GHSA-v797-hfv8-v2xm | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Moodle CSRF Vulnerability CVE-2019-10186, GHSA-wv9c-pfpm-4wc5 | High | 1.1% | 31 Jul, 2019 | Packagist moodle/moodle |
Dolibarr ERP and CRM Code Injection CVE-2019-11201, GHSA-jwg3-v9xm-v6q9 | High | 2.2% | 29 Jul, 2019 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM malicious executable loading CVE-2019-11200, GHSA-2rwh-262r-r85j | High | 2.1% | 29 Jul, 2019 | Packagist dolibarr/dolibarr |
Pterodactyl vulnerable to 2FA Sniffing CVE-2019-1020002, GHSA-fg52-xjfc-9rh8, GHSA-vcm9-hx3q-qwj8 | High | 1.5% | 29 Jul, 2019 | Packagist pterodactyl/panel |
Dolibarr Cross Site Request Forgery (CSRF) CVE-2019-1010054, GHSA-hwmc-v6j6-gc2p | High | 2.2% | 18 Jul, 2019 | Packagist dolibarr/dolibarr |
Wikimedia information leak vulnerability CVE-2019-12474, GHSA-2qrr-c2gh-pr35 | High | 2.0% | 10 Jul, 2019 | Packagist mediawiki/core |
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple CVE-2019-12473, GHSA-33xw-x3pr-rvqj | High | 2.3% | 10 Jul, 2019 | Packagist mediawiki/core |
MediaWiki Incorrect Access Control vulnerability CVE-2019-12472, GHSA-7mqg-5fgh-xh4r | High | 1.3% | 10 Jul, 2019 | Packagist mediawiki/core |
Wikimedia MediaWiki allows CSRF CVE-2019-12466, GHSA-27fw-r78j-h898 | High | 0.8% | 10 Jul, 2019 | Packagist mediawiki/core |
TYPO3 Vulnerable to Insecure Deserialization CVE-2019-12747, GHSA-86hp-xrhj-fhpq | High | 1.5% | 09 Jul, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
Moodle all messaging conversations could be viewed CVE-2019-10154, GHSA-ww45-x87c-wgff | High | 1.3% | 26 Jun, 2019 | Packagist moodle/moodle |
Shopware Insecure Deserialization Vulnerability CVE-2019-12799, GHSA-rf8f-hqjv-986p | High | 54.1% | 13 Jun, 2019 | Packagist shopware/shopware |
Deserialization of untrusted data in Symfony CVE-2019-10912, GHSA-w2fr-65vp-mxw3 | High | 2.3% | 16 May, 2019 | Packagist symfony/cache Packagist symfony/phpunit-bridge Packagist symfony/symfony Packagist typo3/cms +1 more |
Improper authentication in Symfony CVE-2019-10911, GHSA-cchx-mfrc-fwqr | High | 1.2% | 16 May, 2019 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
TYPO3 Image Processing susceptible to Code Execution CVE-2019-11832, GHSA-3w4h-r27h-4r2w | High | 3.9% | 09 May, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
Unsafe deserialization in SmtpTransport in CakePHP CVE-2019-11458, GHSA-qhrx-hcm6-pmrw | High | 2.0% | 08 May, 2019 | Packagist cakephp/cakephp |
phpBB Denial of Service CVE-2019-9826, GHSA-6pgr-x867-h7jx | High | 2.0% | 02 May, 2019 | Packagist phpbb/phpbb |
Flarum mishandles invalidation of user email tokens CVE-2019-11514, GHSA-g6w5-439m-jhwv | High | 1.3% | 25 Apr, 2019 | Packagist flarum/flarum |
Contao CSRF Token Bypass CVE-2019-10642, GHSA-hwmh-9jj9-8c9c | High | 0.5% | 17 Apr, 2019 | Packagist contao/contao Packagist contao/core-bundle |
Subrion CMS vulnerable to CSRF in blog/delete CVE-2017-18366, GHSA-c939-g732-48r8 | High | 0.7% | 15 Apr, 2019 | Packagist intelliants/subrion |
Parsedown Class-Name Injection CVE-2019-10905, GHSA-62m3-fc7f-jpp8 | High | 1.5% | 06 Apr, 2019 | Packagist erusev/parsedown |
Bolt Cross Site Request Forgery (CSRF) CVE-2019-10874, GHSA-3g6c-88pf-m46f | High | 4.5% | 05 Apr, 2019 | Packagist bolt/bolt |
Pimcore Unserialize Remote Code Execution CVE-2019-10867, GHSA-7hqr-j26m-gmwp, SNYK-PHP-PIMCOREPIMCORE-173998 | High | 68.9% | 04 Apr, 2019 | Packagist pimcore/pimcore |
LibreNMS SQL Injection CVE-2018-20678, GHSA-4fwh-r866-pvh9 | High | 1.4% | 28 Mar, 2019 | Packagist librenms/librenms |
Moodle Users could elevate their role when accessing the LTI tool on a provider site CVE-2019-3849, GHSA-5wg9-5w3f-hxmh | High | 1.0% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle SSRF Vulnerability CVE-2019-6970, GHSA-vjxx-54vw-q59f | High | 1.4% | 21 Mar, 2019 | Packagist moodle/moodle |