Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpxmlrpc vulnerable to argument injection GHSA-q7qq-9gx2-ggxv | Medium | Not scored | 02 Dec, 2022 | Packagist phpxmlrpc/phpxmlrpc |
ThinkCMF Stored Cross-Site Scripting (XSS) CVE-2022-40849, GHSA-m9mf-rqx6-2xpc | Medium | 0.4% | 01 Dec, 2022 | Packagist thinkcmf/thinkcmf |
Tribal Systems Zenario CMS vulnerable to Session Fixation CVE-2022-4231, GHSA-6657-9743-4mc6 | Medium | 0.5% | 30 Nov, 2022 | Packagist tribalsystems/zenario |
baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability CVE-2022-39325, GHSA-395x-wv32-44v5 | Medium | 0.6% | 25 Nov, 2022 | Packagist baserproject/basercms |
Microweber vulnerable to cross-site scripting (XSS) CVE-2022-0698, GHSA-79gx-3fm8-qxqq | Medium | 0.7% | 25 Nov, 2022 | Packagist microweber/microweber |
Moodle stored-XSS vulnerability in some "social" user profile fields BIT-moodle-2022-45151, CVE-2022-45151, GHSA-xv72-6pgh-cjj8 | Medium | 0.7% | 23 Nov, 2022 | Packagist moodle/moodle |
Moodle reflected cross-site scripting vulnerability in policy tool BIT-moodle-2022-45150, CVE-2022-45150, GHSA-6gx2-g773-hv9h | Medium | 0.7% | 23 Nov, 2022 | Packagist moodle/moodle |
Cross-Site Request Forgery in Moodle BIT-moodle-2022-45149, CVE-2022-45149, GHSA-8v23-w4w5-w83c | Medium | 0.4% | 23 Nov, 2022 | Packagist moodle/moodle |
Cross-site Scripting in Backdrop CMS CVE-2022-42095, GHSA-58rj-w2qf-qjg7 | Medium | 2.2% | 23 Nov, 2022 | Packagist backdrop/backdrop |
Cross-site Scripting in Backdrop CMS CVE-2022-42097, GHSA-g9cp-9fw3-56cf | Medium | 0.9% | 22 Nov, 2022 | Packagist backdrop/backdrop |
Cross-site Scripting in Backdrop CMS CVE-2022-42094, GHSA-vcvg-g8p2-3hqr | Medium | 2.8% | 22 Nov, 2022 | Packagist backdrop/backdrop |
Stored XSS in Compare Mode CVE-2022-38145, GHSA-66jf-xm2m-7m8r | Medium | 0.7% | 22 Nov, 2022 | Packagist silverstripe/versioned-admin |
Reflected XSS in querystring parameters CVE-2022-38462, GHSA-vvxf-r4vm-2vm6 | Medium | 0.5% | 21 Nov, 2022 | Packagist silverstripe/framework |
Stored XSS using HTMLEditor CVE-2022-37429, GHSA-wc6r-4ggc-79w5 | Medium | 0.5% | 21 Nov, 2022 | Packagist silverstripe/framework |
Stored XSS using uppercase characters in HTMLEditor CVE-2022-37430, GHSA-qw4w-vq8v-2wcv | Medium | 0.6% | 21 Nov, 2022 | Packagist silverstripe/framework |
Silverstipe CMS Stored XSS in custom meta tags BIT-silverstripe-2022-37421, CVE-2022-37421, GHSA-pp74-g2q5-j4jf | Medium | 0.6% | 21 Nov, 2022 | Packagist silverstripe/cms |
Silverstripe XSS in shortcodes CVE-2022-38724, GHSA-9cx2-hj6m-fv58 | Medium | 0.7% | 21 Nov, 2022 | Packagist silverstripe/assets Packagist silverstripe/framework |
XSS via uploaded gpx file CVE-2022-38147, GHSA-vv3r-fxqp-vr3f | Medium | 0.6% | 21 Nov, 2022 | Packagist silverstripe/assets |
Cross-site Scripting in Backdrop CMS CVE-2022-42096, GHSA-g8jw-8vpv-pv5q | Medium | 2.2% | 21 Nov, 2022 | Packagist backdrop/backdrop |
URL XSS vulnerability due to outdated jquery in CMS CVE-2022-38146, GHSA-44xv-v98g-v79f | Medium | 0.6% | 21 Nov, 2022 | Packagist silverstripe/admin |
Cross-site Scripting in librenms/librenms CVE-2022-4069, GHSA-p55m-g4m3-qmrp | Medium | 93.3% | 20 Nov, 2022 | Packagist librenms/librenms |
Cross-site Scripting in librenms/librenms CVE-2022-4067, GHSA-qch4-jmf8-xvp7 | Medium | 93.7% | 20 Nov, 2022 | Packagist librenms/librenms |
Cross-site Scripting in librenms/librenms CVE-2022-3562, GHSA-5h77-4245-pg5p | Medium | 94.2% | 20 Nov, 2022 | Packagist librenms/librenms |
Cross-site Scripting in librenms/librenms CVE-2022-3561, GHSA-264w-gw9g-fhgj | Medium | 0.6% | 20 Nov, 2022 | Packagist librenms/librenms |
Cross-site Scripting in librenms/librenms CVE-2022-3516, GHSA-r4gq-hv2r-mrf5 | Medium | 0.5% | 20 Nov, 2022 | Packagist librenms/librenms |
Cross-site Scripting in Zenario CVE-2022-44073, GHSA-gmf5-q34v-vwvp | Medium | 0.5% | 16 Nov, 2022 | Packagist tribalsystems/zenario |
Cross-site Scripting in Zenario CVE-2022-44071, GHSA-j43m-4pxc-hmqj | Medium | 0.5% | 16 Nov, 2022 | Packagist tribalsystems/zenario |
Cross-site Scripting in Zenario CVE-2022-44070, GHSA-f454-jm6x-56q6 | Medium | 0.5% | 16 Nov, 2022 | Packagist tribalsystems/zenario |
Cross-site Scripting in Zenario CVE-2022-44069, GHSA-r9xx-4cmv-856x | Medium | 0.5% | 16 Nov, 2022 | Packagist tribalsystems/zenario |
Cross-Site Request Forgery in feehi/feehicms CVE-2022-4014, GHSA-cjp8-vv38-p3g2 | Medium | 0.2% | 16 Nov, 2022 | Packagist feehi/feehicms |
PHPServerMon PRNG has Insufficient Entropy CVE-2021-4241, GHSA-hc4j-7mqg-cxjj | Medium | 0.9% | 15 Nov, 2022 | Packagist phpservermon/phpservermon |
Insufficient Entropy in PHPServerMon PRNG CVE-2021-4240, GHSA-97w9-gcc7-vr8g | Medium | 0.9% | 15 Nov, 2022 | Packagist phpservermon/phpservermon |
Concrete CMS Cross-site Scripting vulnerability CVE-2022-43695, GHSA-8699-h45g-7hm8 | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information CVE-2022-43691, GHSA-q3hq-hm5h-qrx3 | Medium | 0.5% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Improper Authentication CVE-2022-43690, GHSA-q56r-mw39-944g | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to XML External Entity CVE-2022-43689, GHSA-q48r-xg9h-78m8 | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Cross-site Scripting CVE-2022-43688, GHSA-9jc5-9wh5-mc36 | Medium | 0.6% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Session Fixation CVE-2022-43687, GHSA-m53v-5x5x-5m2p | Medium | 0.6% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons CVE-2022-43968, GHSA-8782-xgh5-r7mv | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Cross-site Scripting via multilingual report CVE-2022-43967, GHSA-vq39-q549-g786 | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS CVE-2022-43686, GHSA-3cxx-3f53-m92c | Medium | 1.1% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library CVE-2022-43694, GHSA-jfmc-3975-fv5f | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
Concrete CMS vulnerable to Reflected Cross-site Scripting CVE-2022-43692, GHSA-rg6w-c352-p8pg | Medium | 0.7% | 14 Nov, 2022 | Packagist concrete5/concrete5 |
NukeView CMS vulnerable to Cross-site Scripting CVE-2022-3975, GHSA-x45f-j34v-75xm | Medium | 0.6% | 13 Nov, 2022 | Packagist nukeviet/nukeviet |
Subrion CMS is vulnerable to Cross-Site Scripting (XSS) CVE-2022-43121, GHSA-jrvr-gmqv-hgrh | Medium | 0.6% | 09 Nov, 2022 | Packagist intelliants/subrion |
Subrion CMS is vulnerable to Cross-Site Scripting (XSS) CVE-2022-43120, GHSA-3wmg-28v9-8hf6 | Medium | 0.5% | 09 Nov, 2022 | Packagist intelliants/subrion |
FeehiCMS is vulnerable to Cross-Site Scripting (XSS) CVE-2022-43320, GHSA-3ppm-fwhm-qqg6 | Medium | 0.4% | 09 Nov, 2022 | Packagist feehi/cms |
Froxlor vulnerable to code injection CVE-2022-3869, GHSA-6rjv-xxgr-v57x | Medium | 1.4% | 05 Nov, 2022 | Packagist froxlor/froxlor |
Froxlor vulnerable to Code Injection CVE-2022-3721, GHSA-h95w-p3x6-wwj6 | Medium | 0.9% | 04 Nov, 2022 | Packagist froxlor/froxlor |
TYPO3 Extension femanager vulnerable to Broken Access Control CVE-2022-44543, GHSA-59m9-p6cm-94q5 | Medium | 0.6% | 03 Nov, 2022 | Packagist in2code/femanager |