Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config CVE-2023-1117, GHSA-qxcw-rf4v-hp26 | Medium | 0.4% | 01 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Cross Site Scripting in Email Blacklist CVE-2023-1116, GHSA-96hp-38wx-j3wc | Medium | 0.5% | 01 Mar, 2023 | Packagist pimcore/pimcore |
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable CVE-2023-1115, GHSA-97cp-8873-v2gf | Medium | 0.6% | 01 Mar, 2023 | Packagist pimcore/pimcore |
Microweber Cross-site Scripting vulnerability CVE-2023-1081, GHSA-c2rc-8m9f-g4fh | Medium | 0.4% | 28 Feb, 2023 | Packagist microweber/microweber |
Pimcore vulnerable to Cross-site Scripting CVE-2023-1067, GHSA-f2jh-mf2c-8278 | Medium | 0.4% | 27 Feb, 2023 | Packagist pimcore/pimcore |
frp_form_answers allows Cross-site Scripting CVE-2023-26091, GHSA-q3r2-23r8-wqr9 | Medium | 0.4% | 26 Feb, 2023 | Packagist frappant/frp-form-answers |
MantisBT may expose private issues' summaries to unauthorized users CVE-2023-22476, GHSA-hf4x-6h87-hm79 | Medium | 0.6% | 23 Feb, 2023 | Packagist mantisbt/mantisbt |
Microweber Cross-site Scripting vulnerability CVE-2021-32856, GHSA-mv37-xrmc-hf64 | Medium | 0.6% | 21 Feb, 2023 | Packagist microweber/microweber |
Pixelfed may allow unauthorized actor to view private posts CVE-2023-0914, GHSA-qh6w-pq52-qxxq | Medium | 0.6% | 19 Feb, 2023 | Packagist pixelfed/pixelfed |
Pixelfed allows user enumeration via reset password functionality CVE-2023-0901, GHSA-vjxx-jgcx-9fq2 | Medium | 0.6% | 18 Feb, 2023 | Packagist pixelfed/pixelfed |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-23922, CVE-2023-23922, GHSA-grmj-gpwm-98ww | Medium | 0.9% | 17 Feb, 2023 | Packagist moodle/moodle |
Moodle Cross-site Scripting vulnerability BIT-moodle-2023-23921, CVE-2023-23921, GHSA-97qf-pq7x-964m | Medium | 0.8% | 17 Feb, 2023 | Packagist moodle/moodle |
Misinterpretation of Input in thorsten/phpmyfaq CVE-2023-0880, GHSA-f9c6-4j9h-6c5r | Medium | 0.6% | 17 Feb, 2023 | Packagist thorsten/phpmyfaq |
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug GHSA-76r7-h46w-463r | Medium | Not scored | 15 Feb, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting in pimcore CVE-2023-0827, GHSA-3w96-p6vh-c298 | Medium | 3.0% | 14 Feb, 2023 | Packagist pimcore/pimcore |
Cross-site Scripting in UDX Stateless Media Plugin CVE-2022-4905, GHSA-9j2p-8qqf-h55c | Medium | 0.7% | 13 Feb, 2023 | Packagist wpcloud/wp-stateless |
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin BIT-phpmyadmin-2023-25727, CVE-2023-25727, GHSA-6hr3-44gx-g6wh | Medium | 1.2% | 13 Feb, 2023 | Packagist phpmyadmin/phpmyadmin |
Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0794, GHSA-gf34-hh5r-f74h | Medium | 0.6% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Code Injection in thorsten/phpmyfaq CVE-2023-0792, GHSA-wjrj-jc3w-ppfw | Medium | 0.6% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0791, GHSA-c38p-vw6j-qjpr | Medium | 0.6% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0787, GHSA-gxxj-x426-xj2w | Medium | 0.5% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Cross-site Scripting in thorsten/phpmyfaq CVE-2023-0786, GHSA-jfpg-jggf-rpph | Medium | 0.6% | 12 Feb, 2023 | Packagist thorsten/phpmyfaq |
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit CVE-2023-0780, GHSA-gm7m-rqf8-jx4m | Medium | 0.4% | 11 Feb, 2023 | Packagist cockpit-hq/cockpit |
Formwork Cross-site Scripting (XSS) from Page title field CVE-2023-24230, GHSA-fvrh-wrpf-6q7h | Medium | 0.5% | 10 Feb, 2023 | Packagist getformwork/formwork |
Cross-site Scripting (XSS) in wallabag/wallabag CVE-2023-0736, GHSA-3x2c-87cq-qx49 | Medium | 0.4% | 07 Feb, 2023 | Packagist wallabag/wallabag |
Cross-Site Request Forgery (CSRF) in wallabag/wallabag CVE-2023-0735, GHSA-2qxp-xmx6-cq4f | Medium | 0.3% | 07 Feb, 2023 | Packagist wallabag/wallabag |
Cross-site Scripting in DaSchTour matomo-mediawiki-extension CVE-2017-20175, GHSA-hc67-v29c-7g78 | Medium | 0.6% | 05 Feb, 2023 | Packagist mediawiki/matomo |
Cross-site Scripting in MobileDetect CVE-2018-25080, GHSA-r77c-qv68-j3pp | Medium | 2.7% | 04 Feb, 2023 | Packagist mobiledetect/mobiledetectlib |
Cross site scripting in automad/automad CVE-2021-37502, GHSA-q3c8-65q7-9v78 | Medium | 0.5% | 03 Feb, 2023 | Packagist automad/automad |
Pimcore contains Unrestricted Upload of File with Dangerous Type CVE-2023-23937, GHSA-8xv4-jj4h-qww6 | Medium | 0.5% | 02 Feb, 2023 | Packagist pimcore/pimcore |
wallabag subject to Improper Authorization via annotations CVE-2023-0610, GHSA-mrqx-mjc4-vfh3 | Medium | 0.4% | 01 Feb, 2023 | Packagist wallabag/wallabag |
wallabag contains Improper Authorization via export feature CVE-2023-0609, GHSA-qwx8-mxxx-mg96 | Medium | 0.6% | 01 Feb, 2023 | Packagist wallabag/wallabag |
Microweber contains Cross-site Scripting CVE-2023-0608, GHSA-pj97-r83v-vj7f | Medium | 0.5% | 01 Feb, 2023 | Packagist microweber/microweber |
Froxlor contains Unchecked Error Condition CVE-2023-0572, GHSA-3chw-8jq2-w769 | Medium | 0.7% | 29 Jan, 2023 | Packagist froxlor/froxlor |
Froxlor contains Static Code Injection CVE-2023-0566, GHSA-w7w4-qjgg-372x | Medium | 0.4% | 29 Jan, 2023 | Packagist froxlor/froxlor |
Froxlor contains Business Logic Errors CVE-2023-0565, GHSA-vqqm-c9gx-773q | Medium | 0.6% | 29 Jan, 2023 | Packagist froxlor/froxlor |
CImage Cross-site Scripting vulnerability CVE-2016-15022, GHSA-6hv3-9fqx-8pg5 | Medium | 0.5% | 29 Jan, 2023 | Packagist mos/cimage |
magento-lts Reset Password not protected against well-timed CSRF CVE-2021-21395, GHSA-r3c9-9j5q-pwv4 | Medium | 0.4% | 26 Jan, 2023 | Packagist openmage/magento-lts |
CakePHP vulnerable to Cross-site Scripting in some development error pages GHSA-xwhj-pqcg-8rcr | Medium | Not scored | 20 Jan, 2023 | Packagist cakephp/cakephp |
CakePHP vulnerable to Remote File Inclusion through View template name manipulation GHSA-p76f-wr22-4rv6 | Medium | Not scored | 20 Jan, 2023 | Packagist cakephp/cakephp |
CakePHP allows direct access of prefixed controller actions GHSA-6hg4-vp5q-47mw | Medium | Not scored | 20 Jan, 2023 | Packagist cakephp/cakephp |
CakePHP SecurityComponent cross form submission issue GHSA-j9q2-f9q7-jhgq | Medium | Not scored | 20 Jan, 2023 | Packagist cakephp/cakephp |
CakePHP has incorrect Cross-Site Request Forgery validation GHSA-829q-v5g8-hhxc | Medium | Not scored | 20 Jan, 2023 | Packagist cakephp/cakephp |
Shopware's log module vulnerable to Improper Output Neutralization CVE-2023-22733, GHSA-7cp7-jfp6-jh4f | Medium | 0.7% | 17 Jan, 2023 | Packagist shopware/core Packagist shopware/platform |
simplesamlphp-module-openidprovider Cross Site Scripting vulnerability CVE-2010-10008, GHSA-chgc-rqjr-46gg | Medium | 0.6% | 17 Jan, 2023 | Packagist simplesamlphp/simplesamlphp-module-openidprovider |
pimcore is vulnerable to cross-site scripting via "title field " in data objects CVE-2023-0323, GHSA-6vf6-g3pr-j83h | Medium | 0.5% | 16 Jan, 2023 | Packagist pimcore/pimcore |
Froxlor is vulnerable to path traversal CVE-2023-0316, GHSA-xp3g-2729-rxm3 | Medium | 0.8% | 16 Jan, 2023 | Packagist froxlor/froxlor |
phpMyFAQ Reflected Cross-site Scripting vulnerability CVE-2023-0314, GHSA-m9xr-8cx7-53pj | Medium | 0.5% | 15 Jan, 2023 | Packagist thorsten/phpmyfaq |
phpMyFAQ Stored Cross-site Scripting vulnerability CVE-2023-0313, GHSA-x2h8-4mhh-5hwh | Medium | 0.4% | 15 Jan, 2023 | Packagist thorsten/phpmyfaq |
thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS) CVE-2023-0312, GHSA-6449-vf6p-9hfp | Medium | 0.6% | 15 Jan, 2023 | Packagist thorsten/phpmyfaq |