Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Statamic framework Incorrect Permission Assignment CVE-2017-11422, GHSA-5m64-9hq5-5pf2 | High | 0.9% | 24 Jul, 2017 | Packagist statamic/cms |
Contao Core directory traversal vulnerability CVE-2017-10993, GHSA-x5g4-crxq-qxjx | High | 2.7% | 21 Jul, 2017 | Packagist contao/contao Packagist contao/core Packagist contao/core-bundle |
MODX Revolution blind SQL injection CVE-2017-1000067, GHSA-phhm-6pgm-mxw9 | High | 1.1% | 17 Jul, 2017 | Packagist modx/revolution |
Sensitive Cookie Without HttpOnly and Secure Flag CVE-2017-1000046, GHSA-8255-qf34-44mp | High | 1.1% | 17 Jul, 2017 | Packagist mautic/core |
phpMyAdmin DoS Vulnerability CVE-2017-1000018, GHSA-47qr-f86f-3wm4 | High | 1.8% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin SSRF in replication CVE-2017-1000017, GHSA-99xj-xqc9-98hr | High | 1.3% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cookie attribute injection attack CVE-2017-1000016, GHSA-j2cq-h6v2-f875 | High | 1.1% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2017-1000014, GHSA-9hrc-rwrq-v6mh | High | 2.2% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
ViMbAdmin CSRF Vulnerabilities CVE-2017-6086, GHSA-rrmf-fpmm-jpwr | High | 2.0% | 27 Jun, 2017 | Packagist opensolutions/vimbadmin |
Dolibarr ERP and CRM Unsafe File Upload Vulnerability CVE-2017-9840, GHSA-cwgm-qw8v-hrrg | High | 1.5% | 25 Jun, 2017 | Packagist dolibarr/dolibarr |
Zend Framework CSRF Vulnerability CVE-2015-1786, GHSA-gwwq-54qp-9pgp | High | 0.7% | 08 Jun, 2017 | Packagist zendframework/zendframework |
MODX Revolution allows overwriting .htaccess CVE-2017-9069, GHSA-23gj-x27g-r34f | High | 1.9% | 18 May, 2017 | Packagist modx/revolution |
MODX Revolution Directory Traversal Vulnerability CVE-2017-9067, GHSA-cgrv-6h2h-6f7v | High | 0.8% | 18 May, 2017 | Packagist modx/revolution |
CSRF in baserCMS 3.0.10 and earlier CVE-2016-4881, GHSA-46vm-rwrf-jrxm | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
CSRF in baserCMS 3.0.10 and earlier CVE-2016-4879, GHSA-397g-4jpj-44xg | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
baserCMS Cross Site Request Forgery vulnerability CVE-2016-4878, GHSA-fg52-rc36-jp43 | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
Mautic Cross-Site Request Forgery (CSRF) CVE-2017-8874, GHSA-7vvh-xqq4-w777 | High | 0.8% | 10 May, 2017 | Packagist mautic/core |
GeniXCMS SQL Injection CVE-2017-8377, GHSA-34vw-8cjw-cwjj | High | 1.5% | 01 May, 2017 | Packagist genix/cms |
Moodle Cross-site request forgery (CSRF) vulnerability CVE-2016-3734, GHSA-r867-v437-4rrm | High | 1.1% | 20 Apr, 2017 | Packagist moodle/moodle |
Drupal access control bypass vulnerability CVE-2017-6919, GHSA-6hpj-9xj7-2jxx | High | 1.6% | 20 Apr, 2017 | Packagist drupal/core Packagist drupal/drupal |
MantisBT allows arbitrary password reset CVE-2017-7615, GHSA-252r-f55f-ff34 | High | 91.2% | 16 Apr, 2017 | Packagist mantisbt/mantisbt |
Subrion CMS vulnerable to CSRF in admin/blocks/add CVE-2017-6068, GHSA-q4h5-g3w8-f9x7 | High | 0.6% | 27 Mar, 2017 | Packagist intelliants/subrion |
Drupal Remote code execution CVE-2017-6381, GHSA-rhx9-3qf7-r3j7 | High | 3.9% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
Drupal Cross-Site Request Forgery (CSRF) CVE-2017-6379, GHSA-gxxq-fhc7-3jv9 | High | 0.8% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
Drupal editor module incorrectly checks access to inline private files CVE-2017-6377, GHSA-w7qx-vwr9-2j3r | High | 1.9% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
Unauthenticated crypto and weak IV in Magento\Framework\Encryption CVE-2016-6485, GHSA-h7qw-mxrm-c6h2 | High | 0.8% | 01 Mar, 2017 | Packagist magento/community-edition Packagist magento/project-community-edition |
PEAR core file overwrite vulnerability CVE-2017-5630, GHSA-xxv8-pv43-57x5 | High | 12.5% | 01 Feb, 2017 | Packagist pear/pear |
phpMyAdmin server-side request forgery (SSRF) CVE-2016-6621, GHSA-44vv-mm86-7cg6 | High | 1.9% | 31 Jan, 2017 | Packagist phpmyadmin/phpmyadmin |
Pagekit Weak Password Recovery Mechanism for Forgotten Password CVE-2017-5594, GHSA-rp89-32rp-qpq2 | High | 7.0% | 25 Jan, 2017 | Packagist pagekit/pagekit |
Extbase for TYPO3 allows RCE CVE-2016-5091, GHSA-jxg5-35fj-ccwf | High | 3.4% | 23 Jan, 2017 | Packagist typo3/cms-extbase |
CakePHP allows remote attackers to spoof their IP CVE-2016-4793, GHSA-j8p3-8m69-2hqq | High | 5.1% | 23 Jan, 2017 | Packagist cakephp/cakephp |
Moodle Weak Password Recovery Mechanism for Forgotten Password CVE-2016-7038, GHSA-2phx-w35g-x9vm | High | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
GeniXCMS SQL injection vulnerability CVE-2017-5346, GHSA-2ppw-6xvg-rwgw | High | 1.6% | 12 Jan, 2017 | Packagist genix/cms |
GeniXCMS SQL injection vulnerability CVE-2016-10096, GHSA-gjcj-fj23-5j5v | High | 1.6% | 01 Jan, 2017 | Packagist genix/cms |
phpMyAdmin DoS Vulnerability CVE-2016-9863, GHSA-qgrq-64g6-mmh6 | High | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Bypass white-list protection for URL redirection CVE-2016-9861, GHSA-r326-mp8g-6xfc | High | 1.8% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension CVE-2016-6633, GHSA-p849-vf5f-f3x7 | High | 4.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin PHP code injection CVE-2016-6609, GHSA-wpww-hx7x-xfjh | High | 2.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
Drupal Incorrect cache context on password reset page CVE-2016-9450, GHSA-98w5-wqp9-w466 | High | 1.0% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
Moodle Unrestricted file upload vulnerability CVE-2016-9187, GHSA-58fm-v4pr-jh8p | High | 4.0% | 04 Nov, 2016 | Packagist moodle/moodle |
Drupal Saving user accounts can sometimes grant the user all roles CVE-2016-6211, GHSA-frqf-9qr4-6vxf | High | 2.8% | 09 Sep, 2016 | Packagist drupal/core Packagist drupal/drupal |
HTTP Proxy header vulnerability CVE-2016-5385, GHSA-m6ch-gg5f-wxx3 | High | 50.4% | 19 Jul, 2016 | Packagist amphp/artax Packagist bugsnag/bugsnag-laravel Packagist drupal/core Packagist drupal/drupal +3 more |
phpMyAdmin vulnerable to Cross-Site Request Forgery CVE-2016-5739, GHSA-2p7v-jm8m-g3qq | High | 2.9% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial Of Service (DOS) attack CVE-2016-5706, GHSA-9rmm-8fp4-26hv | High | 2.8% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
Doctrine Security Misconfiguration Vulnerability CVE-2015-5723, GHSA-pw5c-xqf2-6xc2 | High | 0.4% | 07 Jun, 2016 | Packagist aws/aws-sdk-php Packagist doctrine/annotations Packagist doctrine/cache Packagist doctrine/common +7 more |
Symphony Denial of Service Via Overlong Usernames CVE-2016-4423, GHSA-whgv-8cg3-7hcm | High | 1.9% | 01 Jun, 2016 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Symfony Cryptographic Vulnerability CVE-2016-1902, GHSA-jjx5-fq5g-8xpc | High | 1.9% | 01 Jun, 2016 | Packagist symfony/security Packagist symfony/security-core Packagist symfony/symfony |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2016-2157, GHSA-f5pm-c4cw-563p | High | 1.0% | 22 May, 2016 | Packagist moodle/moodle |
Drupal arbitrary code execution CVE-2016-3171, GHSA-69g8-g9jq-74v7 | High | 3.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal saving user accounts can sometimes grant the user all roles CVE-2016-3169, GHSA-q3p9-8728-wq7x | High | 2.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |