Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Known vulnerable to code execution via SVG file in v1.3.1 CVE-2022-32115, GHSA-5jgj-h9wp-53fr | Medium | 1.4% | 08 Jul, 2022 | Packagist idno/known |
Known v1.3.1 Cross-site Scripting CVE-2022-31290, GHSA-g688-7j3c-h9f3 | Medium | 0.9% | 08 Jul, 2022 | Packagist idno/known |
Known v1.3.1 contains Insecure Direct Object Reference CVE-2022-30852, GHSA-4v4p-87m3-5423 | Medium | 1.0% | 08 Jul, 2022 | Packagist idno/known |
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting CVE-2022-32061, GHSA-xwqx-x38c-cw95 | Medium | 0.7% | 07 Jul, 2022 | Packagist snipe/snipe-it |
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings CVE-2022-32060, GHSA-w82x-xjjr-cjr5 | Medium | 1.2% | 07 Jul, 2022 | Packagist snipe/snipe-it |
Cross-site Scripting in microweber CVE-2022-2300, GHSA-q6mp-562x-ggvv | Medium | 0.5% | 04 Jul, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-2280, GHSA-5pg2-qg87-vmj7 | Medium | 0.6% | 01 Jul, 2022 | Packagist microweber/microweber |
Open Redirect in microweber CVE-2022-2252, GHSA-437j-5qc3-c589 | Medium | 0.9% | 29 Jun, 2022 | Packagist microweber/microweber |
Stored XSS in link tags added via XHR in SilverStripe Framework BIT-silverstripe-2022-28803, CVE-2022-28803, GHSA-rppc-655v-7j3c | Medium | 0.5% | 29 Jun, 2022 | Packagist silverstripe/framework |
Unpublished, protected files can be published via shortcode CVE-2022-29858, GHSA-v68g-62v9-39w5 | Medium | 1.2% | 28 Jun, 2022 | Packagist silverstripe/assets |
Stored XSS via HTML fields in SilverStripe Framework CVE-2022-25238, GHSA-jx34-gqqq-r6gm | Medium | 0.7% | 28 Jun, 2022 | Packagist silverstripe/framework |
Hybridsessions does not expire session id on logout BIT-silverstripe-2022-24444, CVE-2022-24444, GHSA-c7q8-m4xw-c674 | Medium | 0.9% | 28 Jun, 2022 | Packagist silverstripe/hybridsessions |
Quadratic blowup in Convert::xml2array() BIT-silverstripe-2021-41559, CVE-2021-41559, GHSA-9fmg-89fx-r33w | Medium | 1.1% | 28 Jun, 2022 | Packagist silverstripe/framework |
Server-Side Request Forgery in dompdf/dompdf CVE-2022-0085, GHSA-pf6p-25r2-fx45 | Medium | 1.0% | 28 Jun, 2022 | Packagist dompdf/dompdf |
Cross-site Scripting in admidio CVE-2022-23896, GHSA-qr6m-f3gv-8678 | Medium | 0.6% | 28 Jun, 2022 | Packagist admidio/admidio |
MantisBT XSS through crafted SVG documents in file_download.php CVE-2022-33910, GHSA-qghg-v7xv-q98q | Medium | 0.9% | 24 Jun, 2022 | Packagist mantisbt/mantisbt |
Cross site scripting in Concrete CMS CVE-2022-30120, GHSA-m2ww-6wv6-vw3c | Medium | 1.0% | 24 Jun, 2022 | Packagist concrete5/core |
Authenticated Stored Cross-site Scripting in Shopware CVE-2022-31057, GHSA-q754-vwc4-p6qj | Medium | 0.7% | 22 Jun, 2022 | Packagist shopware/shopware |
Cross-site Scripting in Microweber CVE-2022-2174, GHSA-3x96-m42v-hvh5 | Medium | 2.6% | 22 Jun, 2022 | Packagist microweber/microweber |
Cross-site Scripting in NukeViet CMS CVE-2022-30874, GHSA-pm37-5j5m-6cvw | Medium | 0.8% | 21 Jun, 2022 | Packagist nukeviet/nukeviet |
Cross-site Scripting in krayin/laravel-crm CVE-2021-41924, GHSA-v829-j9rr-85v9 | Medium | 0.6% | 21 Jun, 2022 | Packagist krayin/laravel-crm |
Cross-site Scripting in Microweber CVE-2022-2130, GHSA-27g3-58v4-fg9w | Medium | 3.1% | 20 Jun, 2022 | Packagist microweber/microweber |
Cross site scripting in Elefant CMS CVE-2017-20061, GHSA-hgm9-pww2-93pc | Medium | 0.5% | 20 Jun, 2022 | Packagist elefant/cms |
Cross site scripting in Elefant CMS CVE-2017-20060, GHSA-4453-g295-24mh | Medium | 0.5% | 20 Jun, 2022 | Packagist elefant/cms |
Cross site scripting in Elefant CMS CVE-2017-20059, GHSA-7f7g-8q3x-jpx9 | Medium | 0.5% | 20 Jun, 2022 | Packagist elefant/cms |
Cross site scripting in Elefant CMS CVE-2017-20058, GHSA-5hfm-g799-wjw6 | Medium | 0.8% | 20 Jun, 2022 | Packagist elefant/cms |
Cross site scripting in Elefant CMS CVE-2017-20057, GHSA-xwj7-29j7-rw76 | Medium | 0.6% | 20 Jun, 2022 | Packagist elefant/cms |
brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting BIT-matomo-2022-33156, CVE-2022-33156, GHSA-gvxv-p9rv-gmcg | Medium | 0.6% | 17 Jun, 2022 | Packagist brotkrueml/typo3-matomo-integration |
brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS CVE-2022-33154, GHSA-374w-gwqr-fmxg | Medium | 0.5% | 17 Jun, 2022 | Packagist brotkrueml/schema |
Cross-Site Scripting in TYPO3's Frontend Login Mailer BIT-typo3-2022-31049, CVE-2022-31049, GHSA-h4mx-xv96-2jgm | Medium | 0.8% | 14 Jun, 2022 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in TYPO3's Form Framework BIT-typo3-2022-31048, CVE-2022-31048, GHSA-3r95-23jp-mhvg | Medium | 0.8% | 14 Jun, 2022 | Packagist typo3/cms Packagist typo3/cms-core |
Insertion of Sensitive Information into Log File in typo3/cms-core BIT-typo3-2022-31047, CVE-2022-31047, GHSA-fh99-4pgr-8j99 | Medium | 1.1% | 14 Jun, 2022 | Packagist typo3/cms Packagist typo3/cms-core |
Information Disclosure via Export Module BIT-typo3-2022-31046, CVE-2022-31046, GHSA-8gmv-9hwg-w89g | Medium | 0.6% | 14 Jun, 2022 | Packagist typo3/cms Packagist typo3/cms-core |
Incorrect Authorization in thinkcmf CVE-2021-40616, GHSA-v25c-8349-v2q3 | Medium | 0.8% | 14 Jun, 2022 | Packagist thinkcmf/thinkcmf |
Cross site scripting in facturascripts CVE-2022-2066, GHSA-h6wm-mr85-4h9g | Medium | 1.0% | 13 Jun, 2022 | Packagist facturascripts/facturascripts |
Cross-site Scripting in FacturaScripts CVE-2022-2065, GHSA-fp76-f299-v3hj | Medium | 0.7% | 13 Jun, 2022 | Packagist facturascripts/facturascripts |
Cross site scripting in dolibarr BIT-dolibarr-2022-2060, CVE-2022-2060, GHSA-8fvr-7945-mg7w | Medium | 0.9% | 13 Jun, 2022 | Packagist dolibarr/dolibarr |
Cross-site Scripting in SEOmatic plugin CVE-2021-41750, GHSA-6hjc-m38h-7jhh | Medium | 1.1% | 12 Jun, 2022 | Packagist nystudio107/craft-seomatic |
Cross site scripting in intelliants/subrion CVE-2021-41502, GHSA-jvq4-cgfw-jgf4 | Medium | 0.6% | 11 Jun, 2022 | Packagist intelliants/subrion |
Cross site scripting in francoisjacquet/rosariosis CVE-2022-2036, GHSA-4hpr-hh77-6q9p | Medium | 0.9% | 09 Jun, 2022 | Packagist francoisjacquet/rosariosis |
Cross-site Scripting in FacturaScripts CVE-2022-2016, GHSA-j8c7-3jpq-8985 | Medium | 0.7% | 09 Jun, 2022 | Packagist facturascripts/facturascripts |
Cross-site Scripting in Dolibarr BIT-dolibarr-2022-30875, CVE-2022-30875, GHSA-f2g5-426f-353q | Medium | 0.7% | 08 Jun, 2022 | Packagist dolibarr/dolibarr |
Cross-site Scripting in RosarioSIS CVE-2022-1997, GHSA-wjh9-344g-vc49 | Medium | 0.7% | 08 Jun, 2022 | Packagist francoisjacquet/rosariosis |
Cross-Site Request Forgery in easyii CMS CVE-2020-36534, GHSA-3x3w-vcjx-7796 | Medium | 0.5% | 07 Jun, 2022 | Packagist noumo/easyii |
Failed payment recorded has completed in Silverstripe Omnipay CVE-2022-29254, GHSA-48f2-m7jg-866x | Medium | 0.7% | 06 Jun, 2022 | Packagist silverstripe/silverstripe-omnipay |
Cross-site Scripting in FacturaScripts CVE-2022-1988, GHSA-r7jw-mg27-j839 | Medium | 0.8% | 03 Jun, 2022 | Packagist facturascripts/facturascripts |
Neos CMS vulnerable to XSS in various backend modules BIT-neos-2022-30429, CVE-2022-30429, GHSA-7m9h-v68w-pfw3 | Medium | 0.6% | 02 Jun, 2022 | Packagist neos/neos |
Cross site scripting in librenms CVE-2022-29711, GHSA-2gqg-2rg7-gh33 | Medium | 0.7% | 02 Jun, 2022 | Packagist librenms/librenms |
Denial-of-service vulnerability processing large chat messages containing many newlines CVE-2022-51011, GHSA-gj94-v4p9-w672 | Medium | 0.5% | 25 May, 2022 | Packagist pocketmine/pocketmine-mp |
XSS in various backend modules due to (un)escaping in JS notification module GHSA-jfxf-4frr-9j3q | Medium | Not scored | 25 May, 2022 | Packagist neos/neos |