Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Uvdesk vulnerable to stored cross-site scripting (XSS) CVE-2023-0325, GHSA-fwhv-9phj-wrj5 | Medium | 0.7% | 04 Apr, 2023 | Packagist uvdesk/community-skeleton |
Silverstripe Form Capture vulnerable to stored cross-site-scripting CVE-2023-28851, GHSA-38h6-gmr2-j4wx | Medium | 0.4% | 03 Apr, 2023 | Packagist andrewhaine/silverstripe-form-capture Packagist bigfork/silverstripe-form-capture |
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name CVE-2023-28850, GHSA-fq8q-55v3-2986 | Medium | 0.6% | 03 Apr, 2023 | Packagist pimcore/perspective-editor |
phpMyFAQ Code Injection vulnerability CVE-2023-1761, GHSA-6cpg-gqgq-2rrr | Medium | 0.5% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Stored Cross-site Scripting vulnerability CVE-2023-1760, GHSA-7q9c-f2v8-j8gw | Medium | 0.5% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Stored Cross-site Scripting vulnerability CVE-2023-1759, GHSA-4wfc-ghv5-2v7j | Medium | 0.5% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Cross-site Scripting vulnerability CVE-2023-1755, GHSA-hp8m-g55r-9cfq | Medium | 0.6% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ vulnerable to improper input validation CVE-2023-1754, GHSA-gvg8-r8w2-9gfj | Medium | 0.6% | 31 Mar, 2023 | Packagist thorsten/phpmyfaq |
pimcore is vulnerable to cross-site scripting in translate module CVE-2023-1704, GHSA-hfmg-g39c-5444 | Medium | 0.4% | 29 Mar, 2023 | Packagist pimcore/pimcore |
pimcore is vulnerable to cross-site scripting in Composite indices key field CVE-2023-1703, GHSA-4f25-2x2c-vg6v | Medium | 0.5% | 29 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings CVE-2023-1702, GHSA-6qjm-39vh-729w | Medium | 0.4% | 29 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings CVE-2023-1701, GHSA-7r35-chv4-xr3r | Medium | 0.4% | 29 Mar, 2023 | Packagist pimcore/pimcore |
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting CVE-2023-28604, GHSA-8648-h559-8h42 | Medium | 0.5% | 27 Mar, 2023 | Packagist sitegeist/fluid-components |
Magento Open Source allows Incorrect Authorization CVE-2023-22251, GHSA-2wm7-mmgc-qxr3 | Medium | 0.6% | 27 Mar, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Improper Access Control CVE-2023-22250, GHSA-4h7p-4vq8-g2gh | Medium | 1.0% | 27 Mar, 2023 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Open Source allows Cross-Site Scripting (XSS) CVE-2023-22249, GHSA-fxcr-gvcw-hmqm | Medium | 58.5% | 27 Mar, 2023 | Packagist magento/community-edition |
Complianz WordPress plugin vulnerable to cross-site scripting CVE-2023-1069, GHSA-7j4m-f87g-5r9r | Medium | 0.6% | 27 Mar, 2023 | Packagist really-simple-plugins/complianz-gdpr |
Moodle may allow students to bypass sequential navigation during a quiz attempt BIT-moodle-2022-40208, CVE-2022-40208, GHSA-948f-j464-rfj2 | Medium | 0.6% | 24 Mar, 2023 | Packagist moodle/moodle |
Moodle may allow teachers to access the names of users they could not otherwise access BIT-moodle-2023-28336, CVE-2023-28336, GHSA-prjm-2fj2-787f | Medium | 0.7% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle may allow authenticated users to enumerate other user's names via learning plans page BIT-moodle-2023-28334, CVE-2023-28334, GHSA-hh52-g5c4-wprh | Medium | 0.6% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional BIT-moodle-2023-28332, CVE-2023-28332, GHSA-9f45-9qrw-pp4v | Medium | 0.6% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting BIT-moodle-2023-28331, CVE-2023-28331, GHSA-77jm-f3vj-xvx2 | Medium | 0.7% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle arbitrary file read vulnerability BIT-moodle-2023-28330, CVE-2023-28330, GHSA-56r9-72vx-q989 | Medium | 1.2% | 23 Mar, 2023 | Packagist moodle/moodle |
Moodle may display roles to users who don't have access to them BIT-moodle-2023-1402, CVE-2023-1402, GHSA-vj5p-fp42-774p | Medium | 0.7% | 23 Mar, 2023 | Packagist moodle/moodle |
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents CVE-2023-1517, GHSA-42x8-2v53-pqmj | Medium | 0.4% | 20 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field CVE-2023-28429, GHSA-rcg9-hrhx-6q69 | Medium | 0.5% | 20 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects CVE-2023-1515, GHSA-66cm-c7ch-5j8q | Medium | 0.3% | 20 Mar, 2023 | Packagist pimcore/pimcore |
Improper Authorization in nilsteampassnet/teampass CVE-2023-1463, GHSA-86jq-pwgx-6vrq | Medium | 0.5% | 17 Mar, 2023 | Packagist nilsteampassnet/teampass |
Reflected XSS in Application Logger module GHSA-2xpm-cmvw-3jcc | Medium | Not scored | 16 Mar, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting (XSS) - stored in Print Documents GHSA-rrwm-8wqm-gwgv | Medium | Not scored | 16 Mar, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting (XSS) in UrlSlug Data type CVE-2023-28106, GHSA-x5j3-mq9g-8jc8 | Medium | 0.7% | 16 Mar, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting (XSS) in Document Types CVE-2023-1429, GHSA-3223-w774-99fq | Medium | 0.4% | 16 Mar, 2023 | Packagist pimcore/pimcore |
Password Shucking Vulnerability CVE-2023-27580, GHSA-c5vj-f36q-p9vg | Medium | 0.5% | 13 Mar, 2023 | Packagist codeigniter4/shield |
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files CVE-2023-27577, GHSA-vhm8-wwrf-3gcw | Medium | 0.9% | 10 Mar, 2023 | Packagist flarum/core |
pimcore is vulnerable to cross-site scripting CVE-2023-1312, GHSA-gh4g-65f6-84g5 | Medium | 0.4% | 10 Mar, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting (XSS) in pimcore/pimcore CVE-2023-1286, GHSA-8jv7-vwrc-mv4g | Medium | 0.4% | 09 Mar, 2023 | Packagist pimcore/pimcore |
Moodle has a Hidden Functionality vulnerability BIT-moodle-2021-36403, CVE-2021-36403, GHSA-j9cw-5cpj-9qj5 | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Improper Input Validation vulnerability BIT-moodle-2021-36402, CVE-2021-36402, GHSA-gv8f-43pg-c5qw | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle vulnerable to Stored Cross-site Scripting BIT-moodle-2021-36401, CVE-2021-36401, GHSA-g6h6-4fp6-w33w | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle has Incorrect Default Permissions BIT-moodle-2021-36400, CVE-2021-36400, GHSA-35wf-3wq2-r3hx | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2021-36399, CVE-2021-36399, GHSA-79jp-m64f-pgrc | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2021-36398, CVE-2021-36398, GHSA-786g-xv8v-9h93 | Medium | 0.5% | 06 Mar, 2023 | Packagist moodle/moodle |
Moodle has Incorrect Default Permissions BIT-moodle-2021-36397, CVE-2021-36397, GHSA-2wmj-8mqg-r9q8 | Medium | 0.6% | 06 Mar, 2023 | Packagist moodle/moodle |
uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting CVE-2023-1197, GHSA-hfxp-j95j-cwrp | Medium | 0.4% | 06 Mar, 2023 | Packagist uvdesk/community-skeleton |
Wallabag Improper Authorization vulnerability CVE-2023-0734, GHSA-8ccw-f83g-v7g3 | Medium | 0.5% | 05 Mar, 2023 | Packagist wallabag/wallabag |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36665, GHSA-w2x5-hpmg-j98h | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36664, GHSA-w745-xjqx-7wp8 | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Artesãos SEOTools Open Redirect vulnerability CVE-2020-36663, GHSA-wjg8-pxqj-c3c7 | Medium | 0.6% | 04 Mar, 2023 | Packagist artesaos/seotools |
Craft CMS Stored Cross-site Scripting Injection Vulnerability CVE-2023-23927, GHSA-qcrj-6ffc-v7hq | Medium | 0.8% | 03 Mar, 2023 | Packagist craftcms/cms |
Cockpit Uses Platform-Dependent Third Party Components CVE-2023-1160, GHSA-p8cq-pv6w-6rwx | Medium | 0.3% | 03 Mar, 2023 | Packagist cockpit-hq/cockpit |