Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Bolt Unrestricted Upload of File with Dangerous Type CVE-2019-9185, GHSA-gmg5-f2gm-p3h7 | High | 2.7% | 07 Mar, 2019 | Packagist bolt/bolt |
Drupal Core Remote Code Execution Vulnerability CVE-2019-6340, DRUPAL-CORE-2019-003, GHSA-3gx6-h57h-rm27 | HighExploited | 92.0% | 20 Feb, 2019 | Packagist drupal/core Packagist drupal/drupal |
mPDF Unsafe Deserialization CVE-2019-1000005, GHSA-3cwc-m7c2-qr86 | High | 2.1% | 04 Feb, 2019 | Packagist mpdf/mpdf |
Drupal core third-party PEAR Archive_Tar library is vulnerable to Deserialization of Untrusted Data CVE-2019-6338, DRUPAL-CORE-2019-001, GHSA-6rmq-x2hv-vxpp | High | 2.1% | 16 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
Drupal REST API can bypass comment approval CVE-2017-6924, GHSA-p8g6-5mg7-9r5q | High | 2.1% | 15 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
PrestaShop PHP Object Injection CVE-2018-20717, GHSA-xx67-2j3v-h76p | High | 2.7% | 15 Jan, 2019 | Packagist prestashop/prestashop |
Shopware SQL Injection CVE-2018-20713, GHSA-42gv-77f4-r3j9 | High | 1.1% | 15 Jan, 2019 | Packagist shopware/shopware |
elFinder Server Side Request Forgery (SSRF) CVE-2019-6257, GHSA-3qhm-qfj3-4rrx | High | 1.1% | 14 Jan, 2019 | Packagist studio-42/elfinder |
Dolibarr SQL injection vulnerability in user/card.php CVE-2018-19998, GHSA-97jv-2hp6-3frj | High | 2.2% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
Dolibarr error-based SQL injection vulnerability in product/card.php CVE-2018-19994, GHSA-78hj-952q-99rw | High | 2.0% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
Archive_Tar contains Potential RCE if filename starts with phar:// CVE-2018-1000888, GHSA-3q76-jq6m-573p | High | 19.1% | 28 Dec, 2018 | Packagist pear/archive_tar |
Craft CMS Vulnerable to Server-Side Template Injection CVE-2018-20465, GHSA-j7fx-v37j-v3w7 | High | 1.5% | 25 Dec, 2018 | Packagist craftcms/cms |
phpMyAdmin CSRF Vulnerability CVE-2018-19969, GHSA-xwf2-53mc-r8hx | High | 1.1% | 11 Dec, 2018 | Packagist phpmyadmin/phpmyadmin |
Weak Cryptography in PHP-Proxy CVE-2018-19784, GHSA-4wgf-9x5r-p938 | High | 1.1% | 01 Dec, 2018 | Packagist athlon1600/php-proxy |
Moodle Login CSRF vulnerability in login form CVE-2018-16854, GHSA-xj5f-qv37-r9jc | High | 2.3% | 26 Nov, 2018 | Packagist moodle/moodle |
Unauthenticated File Read in PHP Proxy CVE-2018-19458, GHSA-3x3m-p2wx-g7cw | High | 32.9% | 22 Nov, 2018 | Packagist athlon1600/php-proxy-app |
Subrion CMS RCE Vulnerability CVE-2018-19422, GHSA-73xj-v6gc-g5p5 | High | 64.5% | 21 Nov, 2018 | Packagist intelliants/subrion |
phpBB Remote Code Execution CVE-2018-19274, GHSA-h3mr-q96r-37v4 | High | 5.2% | 17 Nov, 2018 | Packagist phpbb/phpbb |
Centreon SQL Injection CVE-2018-19312, GHSA-5jxp-4x68-mhqc | High | 1.9% | 16 Nov, 2018 | Packagist centreon/centreon |
Phar object injection in PHPMailer CVE-2018-19296, GHSA-7w4p-72j7-v7c2 | High | 2.2% | 16 Nov, 2018 | Packagist phpmailer/phpmailer |
XXE in PHPSpreadsheet due to encoding issue CVE-2018-19277, GHSA-xcrg-29h7-h4cj | High | 7.8% | 14 Nov, 2018 | Packagist phpoffice/phpexcel Packagist phpoffice/phpspreadsheet |
Centreon SQL Injection CVE-2018-19271, GHSA-79hg-357g-rrgv | High | 2.1% | 14 Nov, 2018 | Packagist centreon/centreon |
LFI in PHP-Proxy 5.1.0 CVE-2018-19246, GHSA-pc5h-m95g-v6rh | High | 22.0% | 13 Nov, 2018 | Packagist athlon1600/php-proxy |
RCE in baserCMS before 4.1.4 CVE-2018-18942, GHSA-rjc2-x53r-6c9r | High | 2.4% | 05 Nov, 2018 | Packagist baserproject/basercms |
Zenario CMS vulnerable to CSRF CVE-2018-18420, GHSA-22cq-xxr9-jrrv | High | 0.8% | 19 Oct, 2018 | Packagist tribalsystems/zenario |
Joomla RCE Vulnerability CVE-2018-17856, GHSA-9m72-pw47-292w | High | 2.7% | 09 Oct, 2018 | Packagist joomla/framework |
Smarty Path Traversal Vulnerability CVE-2018-13982, GHSA-7gfx-wxfh-7rvm | High | 3.5% | 18 Sep, 2018 | Packagist smarty/smarty |
Moodle XML import of ddwtos could lead to intentional remote code execution CVE-2018-14630, GHSA-c3pr-h96w-2jjg | High | 4.6% | 17 Sep, 2018 | Packagist moodle/moodle |
QuickAppsCMS Cross-Site Request Forgery (CSRF) CVE-2018-17102, GHSA-3p9v-xp6w-wcmc | High | 0.7% | 16 Sep, 2018 | Packagist quickapps/cms |
phpMyFAQ CSRF CVE-2018-16650, GHSA-p57w-9q28-j6v7 | High | 0.5% | 07 Sep, 2018 | Packagist thorsten/phpmyfaq |
Elefant CMS CSRF Vulnerability CVE-2018-16387, GHSA-79m2-h67v-35q7 | High | 0.7% | 03 Sep, 2018 | Packagist elefant/cms |
Gleez CMS CSRF Allows Adding of Administrator Accounts CVE-2018-15845, GHSA-g644-x4hj-cmhq | High | 2.3% | 25 Aug, 2018 | Packagist gleez/cms |
Pimcore CSRF Vulnerability CVE-2018-14057, GHSA-gmff-vcv6-mmfr | High | 3.3% | 17 Aug, 2018 | Packagist pimcore/pimcore |
Laravel Framework RCE Vulnerability CVE-2018-15133, GHSA-qvqm-h22r-4cp9 | HighExploited | 76.6% | 09 Aug, 2018 | Packagist laravel/framework |
Symfony Directory Traversal CVE-2017-16654, GHSA-c49r-8gj6-768r | High | 2.7% | 06 Aug, 2018 | Packagist symfony/intl Packagist symfony/symfony |
SEOmatic plugin for Craft CMS SSTI Vulnerability CVE-2018-14716, GHSA-6j9m-rp7m-3gfg | High | 32.7% | 06 Aug, 2018 | Packagist nystudio107/craft-seomatic |
Symfony Host Header Injection CVE-2018-14774, GHSA-66p6-7p29-55p9 | High | 1.1% | 03 Aug, 2018 | Packagist symfony/symfony |
Wizkunde SAMLBase SAML Bypass CVE-2018-5387, GHSA-7gh2-8q93-87hp | High | 1.7% | 24 Jul, 2018 | Packagist gogentooss/samlbase |
October CMS Local File Inclusion CVE-2018-1999009, GHSA-v7cr-w5v6-6659 | High | 2.4% | 23 Jul, 2018 | Packagist october/october |
MODX Revolution Incorrect Access Control vulnerability CVE-2018-1000207, GHSA-m899-6mh4-mpc5 | High | 64.1% | 13 Jul, 2018 | Packagist modx/revolution |
Moodle XSS Vulnerability CVE-2018-10891, GHSA-p7v9-gjrh-563x | High | 2.1% | 10 Jul, 2018 | Packagist moodle/moodle |
OpenCart Cross-Site Request Forgery (CSRF) CVE-2018-13067, GHSA-jwqr-jcwp-445w | High | 0.7% | 02 Jul, 2018 | Packagist opencart/opencart |
Froxlor PHP Object Injection vulnerability CVE-2018-1000527, GHSA-g77v-m226-3f7g | High | 2.6% | 26 Jun, 2018 | Packagist froxlor/froxlor |
baserCMS vulnerable to Access Control Bypass CVE-2018-0572, GHSA-mjj9-33j8-pfwh | High | 1.6% | 26 Jun, 2018 | Packagist baserproject/basercms |
OS Command Injection in baserCMS CVE-2018-0569, GHSA-6j3p-vrph-j7qq | High | 1.5% | 26 Jun, 2018 | Packagist baserproject/basercms |
Froxlor Incorrect Access Control CVE-2018-12642, GHSA-r6g8-mq9v-cgp4 | High | 1.4% | 22 Jun, 2018 | Packagist froxlor/froxlor |
phpMyAdmin Improper Authentication CVE-2018-12613, GHSA-x394-g9j8-x7mf | High | 98.4% | 21 Jun, 2018 | Packagist phpmyadmin/phpmyadmin |
Symfony CSRF Token Fixation CVE-2018-11406, GHSA-g4g7-q726-v5hg | High | 0.7% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-bundle Packagist symfony/security-http Packagist symfony/symfony |
Symfony Session Fixation Vulnerability CVE-2018-11385, GHSA-g4rg-rw65-8hfg | High | 2.0% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
OpenCart Path Traversal CVE-2018-11494, GHSA-wx3q-f5f2-4q8v | High | 2.3% | 26 May, 2018 | Packagist opencart/opencart |