Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
DOMPDF Remote File Inclusion Vulnerability CVE-2010-4879, GHSA-48r9-4v93-x4wh | High | 5.2% | 07 Oct, 2011 | Packagist dompdf/dompdf |
Drupal Access Control Bypass CVE-2011-2687, GHSA-96vx-qf28-6f8m | High | 3.1% | 27 Jul, 2011 | Packagist drupal/core |
phpMyAdmin Directory Traversal vulnerability CVE-2011-2508, GHSA-q6vw-39cg-wjjf | High | 1.9% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to static code injection CVE-2011-2506, GHSA-p6h7-29r2-g88f | High | 9.6% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
Smarty Does Not Consider Umask Values When Setting Permissions CVE-2009-5054, GHSA-6m9f-8vwq-97pm | High | 1.6% | 03 Feb, 2011 | Packagist smarty/smarty |
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code CVE-2010-4335, GHSA-g2vx-8v47-4vhh | High | 55.2% | 14 Jan, 2011 | Packagist cakephp/cakephp |
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information CVE-2010-4481, GHSA-gmc7-jvv7-w245 | High | 2.0% | 17 Dec, 2010 | Packagist phpmyadmin/phpmyadmin |
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism CVE-2010-3714, GHSA-w736-qv86-vq94 | High | 24.1% | 25 Oct, 2010 | Packagist typo3/cms |
powermail extension for TYPO3 vulnerable to SQL Injection CVE-2010-3604, GHSA-rp53-fw29-rxg3 | High | 1.1% | 24 Sep, 2010 | Packagist in2code/powermail |
EGroupware Code Injection vulnerability CVE-2010-3313, GHSA-5gx6-f2qq-475f | High | 8.5% | 22 Sep, 2010 | Packagist egroupware/egroupware |
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement." CVE-2010-1630, GHSA-5cvh-xqhr-5g87 | High | 1.2% | 19 May, 2010 | Packagist phpbb/phpbb |
phpBB 3.0.7 allows remote attackers to bypass intended access restrictions CVE-2010-1627, GHSA-8h9c-rcwj-jg8p | High | 1.1% | 19 May, 2010 | Packagist phpbb/phpbb |
Moodle vulnerable to SQL injection CVE-2010-1615, GHSA-9xp2-5fr9-7mwm | High | 1.7% | 29 Apr, 2010 | Packagist moodle/moodle |
Accessibility Glossary (a21glossary) SQL injection vulnerability CVE-2009-4803, GHSA-mp9g-4rg9-8rcm | High | 1.0% | 23 Apr, 2010 | Packagist svewap/a21glossary Packagist wapplersystems/a21glossary |
TYPO3 PHP remote file inclusion vulnerability CVE-2010-1153, GHSA-4h9j-f98m-p4hg | High | 1.2% | 20 Apr, 2010 | Packagist typo3/cms |
TYPO3 Authentication Bypass via Salted user password hashes extension CVE-2010-1022, GHSA-cgr9-h9qq-x9fx | High | 1.5% | 19 Mar, 2010 | Packagist typo3/cms-saltedpasswords |
phpMyAdmin unsafely handles temporary files CVE-2008-7252, GHSA-9645-6g72-2pv8 | High | 2.7% | 19 Jan, 2010 | Packagist phpmyadmin/phpmyadmin |
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors CVE-2010-0329, GHSA-mgw4-gv3f-g57j | High | 1.1% | 15 Jan, 2010 | Packagist in2code/powermail |
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name CVE-2009-3631, GHSA-3cqw-pxgr-jhrm | High | 2.9% | 02 Nov, 2009 | Packagist typo3/cms-backend |
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature CVE-2009-3818, GHSA-m8c5-5g3h-jjfg | High | 1.2% | 28 Oct, 2009 | Packagist sjbr/sr-freecap |
Frontend User Registration extension for TYPO3 does not properly verify access rights CVE-2009-1264, GHSA-rjrq-93hp-22ww | High | 1.2% | 07 Apr, 2009 | Packagist sjbr/sr-feuser-register |
phpMyAdmin HTTP Response Splitting Vulnerability CVE-2009-1149, GHSA-xrpq-63mp-9vcw | High | 1.4% | 26 Mar, 2009 | Packagist phpmyadmin/phpmyadmin |
phpBB vulnerable to sensitive information disclosure CVE-2008-6507, GHSA-jw8f-q84g-r3vm | High | 1.1% | 23 Mar, 2009 | Packagist phpbb/phpbb |
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection CVE-2009-0258, GHSA-74w6-ww7w-45j9 | High | 3.3% | 22 Jan, 2009 | Packagist typo3/cms |
Authentication library in TYPO3 vulnerable to session fixation CVE-2009-0256, GHSA-q45q-5233-229p | High | 1.8% | 22 Jan, 2009 | Packagist typo3/cms |
PHPMailer susceptible to arbitrary code execution CVE-2008-5619, GHSA-v5c9-mmw9-829q | High | 58.6% | 17 Dec, 2008 | Packagist phpmailer/phpmailer |
Drupal Node Validation Bypass in the node module API CVE-2008-4793, GHSA-ph2j-5hxq-gxrr | High | 2.2% | 29 Oct, 2008 | Packagist drupal/drupal |
AdaptCMS SQL Injection vulnerability CVE-2008-4524, GHSA-qrw3-mq8r-cq7q | High | 1.3% | 09 Oct, 2008 | Packagist adaptcms/adaptcms |
Joomla! Open Redirect vulnerability CVE-2008-3227, GHSA-gm5q-2cx5-wr2j | High | 1.1% | 18 Jul, 2008 | Packagist joomla/framework |
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs CVE-2008-3228, GHSA-mxr8-pcpg-m23j | High | 1.2% | 18 Jul, 2008 | Packagist joomla/joomla-platform |
PHPMailer Shell command injection CVE-2007-3215, GHSA-6h78-85v2-mmch | High | 2.4% | 14 Jun, 2007 | Packagist phpmailer/phpmailer |
PHPMailer Local file inclusion CVE-2006-5734, GHSA-8jc3-5p29-qgjx | High | 1.5% | 06 Nov, 2006 | Packagist phpmailer/phpmailer |
Moodle does not properly validate module instance id CVE-2006-4936, GHSA-h9w8-4376-j344 | High | 1.5% | 23 Sep, 2006 | Packagist moodle/moodle |
PEAR::Auth potential authentication bypass vulnerability CVE-2006-0868, GHSA-76rh-xv36-9mrc | High | 2.5% | 23 Feb, 2006 | Packagist pear/auth |
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/` CVE-2005-4875, GHSA-xj84-6q8f-qg2r | High | 1.4% | 31 Dec, 2005 | Packagist typo3/cms |