Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle Portfolio script allows instantiation of class chosen by user CVE-2018-1137, GHSA-vxqh-mx28-7ghw | High | 1.7% | 25 May, 2018 | Packagist moodle/moodle |
Moodle calculated question type allows remote code execution by Question authors CVE-2018-1133, GHSA-xh2j-q4mc-v522 | High | 31.3% | 25 May, 2018 | Packagist moodle/moodle |
Dolibarr arbitrary commands execution CVE-2018-10092, GHSA-6j62-m2vv-wc3m | High | 2.0% | 22 May, 2018 | Packagist dolibarr/dolibarr |
phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution CVE-2018-10188, GHSA-v6fp-h79x-9rqc | High | 4.1% | 19 Apr, 2018 | Packagist phpmyadmin/phpmyadmin |
LightSAML Incorrect Access Control vulnerability CVE-2018-1000165, GHSA-vg4f-8v9q-5c3x | High | 1.2% | 18 Apr, 2018 | Packagist lightsaml/lightsaml |
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID CVE-2018-10189, GHSA-vfxj-qg93-7wwc | High | 1.1% | 17 Apr, 2018 | Packagist mautic/core |
Dolibarr SQL injection via type parameter in product/stats/card.php CVE-2017-9839, GHSA-84gh-4m36-cgqx | High | 1.0% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability CVE-2017-18260, GHSA-9986-6m4g-25f6 | High | 1.0% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Moodle Improper Authentication CVE-2018-1082, GHSA-qh8m-6g4p-33h3 | High | 2.0% | 04 Apr, 2018 | Packagist moodle/moodle |
QuickAppsCMS Cross-Site Request Forgery (CSRF) CVE-2018-9108, GHSA-62g2-8p9f-ghjp | High | 0.8% | 28 Mar, 2018 | Packagist quickapps/cms |
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0 CVE-2018-8947, GHSA-63qj-p8gh-5xxx | High | 11.0% | 25 Mar, 2018 | Packagist rap2hpoutre/laravel-log-viewer |
Yii Framework Code Injection CVE-2018-8074, GHSA-m2p5-fwp2-qcw2 | High | 1.5% | 21 Mar, 2018 | Packagist yiisoft/yii2-dev Packagist yiisoft/yii2-elasticsearch |
SimpleSAMLphp saml2 incorrect signature validation CVE-2018-7711, GHSA-g888-g2pp-82hf | High | 1.2% | 05 Mar, 2018 | Packagist simplesamlphp/saml2 |
SimpleSAMLphp Improper Verification of Cryptographic Signature CVE-2018-7644, GHSA-923w-2xv2-7pr8 | High | 1.5% | 05 Mar, 2018 | Packagist simplesamlphp/saml2 |
Drupal access bypass vulnerability CVE-2017-6930, GHSA-3327-jr93-7hq3 | High | 1.3% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Drupal Comment reply form allows access to restricted content CVE-2017-6926, GHSA-2p28-5mvp-2j2r | High | 1.2% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability CVE-2018-1000025, GHSA-4gjj-r7w8-42cq | High | 1.3% | 09 Feb, 2018 | Packagist kreait/firebase-php |
SimpleSAMLphp Signature validation bypass CVE-2017-18122, GHSA-j4qf-3w33-8cgc | High | 1.1% | 02 Feb, 2018 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability CVE-2018-6519, GHSA-hhm8-2j4g-mpgg | High | 1.7% | 02 Feb, 2018 | Packagist simplesamlphp/saml2 |
Yii Framework reflected Cross-site Scripting CVE-2018-6010, GHSA-8gfq-c54m-3rf6 | High | 2.9% | 22 Jan, 2018 | Packagist yiisoft/yii2 |
Yii Framework Cross-Site Request Forgery (CSRF) CVE-2018-6009, GHSA-cwhm-272p-3wj9 | High | 0.6% | 22 Jan, 2018 | Packagist yiisoft/yii2 Packagist yiisoft/yii2-dev |
SQL Injection in Zenario 7.1-7.6 CVE-2018-5960, GHSA-jf5f-h3wr-j666 | High | 0.9% | 22 Jan, 2018 | Packagist tribalsystems/zenario |
OXID eShop user impersonation vulnerability CVE-2015-6926, GHSA-4c39-hj99-5h2r | High | 1.1% | 19 Jan, 2018 | Packagist oxid-esales/oxideshop-ce |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5361, GHSA-6fxc-v8wq-849g | High | 1.0% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
XXE Vulnerability in XMLBundle 0.1.7 CVE-2017-1000477, GHSA-qvwf-w35m-6r95 | High | 1.1% | 03 Jan, 2018 | Packagist desperado/xml-bundle |
Disabled users able to log in with third party SSO plugin CVE-2017-1000489, GHSA-6x98-fx9j-7c78 | High | 1.1% | 03 Jan, 2018 | Packagist mautic/core |
phpMyAdmin CSRF Vulnerability CVE-2017-1000499, GHSA-f9hx-5jq4-fgjm | High | 8.5% | 03 Jan, 2018 | Packagist phpmyadmin/phpmyadmin |
phpBB Server-Side Request Forgery (SSRF) CVE-2017-1000419, GHSA-9jm4-rg99-566c | High | 1.3% | 02 Jan, 2018 | Packagist phpbb/phpbb |
Craft CMS PHP Code Injection Vulnerability CVE-2018-3814, GHSA-r342-vjc4-wrmj | High | 1.9% | 01 Jan, 2018 | Packagist craftcms/cms |
The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information CVE-2013-7400, GHSA-4mh5-jj5w-3f9q | High | 1.6% | 29 Dec, 2017 | Packagist directmailteam/direct-mail |
Dolibarr sensitive information disclosure CVE-2017-17898, GHSA-jm38-vmgp-j7rx | High | 2.1% | 27 Dec, 2017 | Packagist dolibarr/dolibarr |
TeamPass Improper Privilege Management CVE-2017-15055, GHSA-7ghm-6p42-h226 | High | 1.1% | 27 Nov, 2017 | Packagist nilsteampassnet/teampass |
TeamPass arbitrary file upload vulnerability CVE-2017-15054, GHSA-rm3q-qfrm-frrv | High | 3.5% | 27 Nov, 2017 | Packagist nilsteampassnet/teampass |
CodeIgniter HTTP Header Injection CVE-2017-1000247, GHSA-j9f9-8j39-4g97 | High | 0.9% | 17 Nov, 2017 | Packagist codeigniter4/framework |
Zeta Components Mail Arbitrary code execution via a crafted email address CVE-2017-15806, GHSA-hgr8-g756-vmg9 | High | 10.7% | 15 Nov, 2017 | Packagist zetacomponents/mail |
October CMS CSRF CVE-2017-16244, GHSA-vm6r-4p4v-232x | High | 2.0% | 01 Nov, 2017 | Packagist october/october |
Luracast Restler directory traversal vulnerability CVE-2017-15363, GHSA-rvmg-xc29-rvxf | High | 15.3% | 15 Oct, 2017 | Packagist aoe/restler Packagist luracast/restler |
Zend Framework Information Disclosure CVE-2015-7503, GHSA-pm9m-w23q-5967 | High | 1.4% | 10 Oct, 2017 | Packagist zendframework/zend-crypt Packagist zendframework/zendframework |
Subrion CMS CSRF Vulnerability CVE-2017-15063, GHSA-rc94-7v55-wmg6 | High | 0.5% | 06 Oct, 2017 | Packagist intelliants/subrion |
October CMS PHP Code Execution CVE-2017-1000119, GHSA-q263-j3q9-g964 | High | 61.3% | 05 Oct, 2017 | Packagist october/cms |
GeniXCMS arbitrary PHP code execution CVE-2017-14764, GHSA-5cmg-8m8p-whmj | High | 1.5% | 27 Sep, 2017 | Packagist genix/cms |
GeniXCMS arbitrary PHP code execution CVE-2017-14763, GHSA-2f6r-892p-69g5 | High | 1.4% | 27 Sep, 2017 | Packagist genix/cms |
protobuf susceptible to buffer overflow CVE-2015-5237, GHSA-jwvw-v7c5-m82h, PYSEC-2017-150, PYSEC-2017-65 | High | 5.0% | 25 Sep, 2017 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-parent NuGet Google.Protobuf Packagist google/protobuf +1 more |
TYPO3 Arbitrary Code Execution CVE-2017-14251, GHSA-fh4q-hxrw-cjqq | High | 2.3% | 11 Sep, 2017 | Packagist typo3/cms |
Dolibarr ERP and CRM Sensitive Data Disclosure CVE-2017-14240, GHSA-p9wf-x8h5-44fr | High | 1.2% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
SimpleSAMLphp InfoCard module Incorrect signature verification CVE-2017-12874, GHSA-fj28-869x-vv5g | High | 1.3% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp-module-infocard |
SimpleSAMLphp Authentication context bypass in the multiauth module CVE-2017-12869, GHSA-qc43-78vj-vg7p | High | 2.4% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
Code Injection in baserCMS CVE-2017-10844, GHSA-69gw-v5ph-6vxq | High | 1.5% | 29 Aug, 2017 | Packagist baserproject/basercms |
Arbitrary file delete in baserCMS CVE-2017-10843, GHSA-x73x-7gmx-w835 | High | 1.4% | 29 Aug, 2017 | Packagist baserproject/basercms |
Authenticated RCE in Zen Cart 1.5.5e CVE-2017-11675, GHSA-c9r9-3h38-r7vj | High | 2.9% | 27 Jul, 2017 | Packagist zencart/zencart |