Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site Scripting in ShowDoc CVE-2022-0956, GHSA-wg8p-w946-c482 | Medium | 0.7% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Stored Cross-site Scripting in Microweber CVE-2022-0954, GHSA-8c76-mxv5-w4g8 | Medium | 3.2% | 15 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in Pimcore CVE-2022-0894, GHSA-22hc-47cc-7x6f | Medium | 0.7% | 15 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0893, GHSA-g795-4hxx-qqwm | Medium | 0.8% | 15 Mar, 2022 | Packagist pimcore/pimcore |
File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc CVE-2022-0951, GHSA-j6jg-w79c-7p8v | Medium | 0.9% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0950, GHSA-v94v-pxqp-5qgj | Medium | 0.6% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Stored Cross-site Scripting in ShowDoc CVE-2022-0945, GHSA-vpwq-6cp4-ffqc | Medium | 0.8% | 15 Mar, 2022 | Packagist showdoc/showdoc |
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius CVE-2022-24749, GHSA-4qrp-27r3-66fj | Medium | 1.1% | 14 Mar, 2022 | Packagist Sylius/Sylius Packagist sylius/sylius |
Sensitive Information Exposure in Sylius CVE-2022-24742, GHSA-7563-75j9-6h5p | Medium | 0.8% | 14 Mar, 2022 | Packagist sylius/sylius |
Improper Restriction of Rendered UI Layers or Frames in Sylius CVE-2022-24733, GHSA-4jp3-q2qm-9fmw | Medium | 0.9% | 14 Mar, 2022 | Packagist sylius/sylius |
Cross-site Scripting in ShowDoc CVE-2022-0962, GHSA-pccm-j6vj-jwwf | Medium | 0.9% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in Zenario CMS CVE-2021-41952, GHSA-x8wj-cqmp-3wmm | Medium | 0.5% | 14 Mar, 2022 | Packagist tribalsystems/zenario |
Cross-site Scripting in ShowDoc CVE-2022-0946, GHSA-qq74-vgcf-54c3 | Medium | 0.8% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0941, GHSA-wg4r-q74r-p7c8 | Medium | 0.6% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0940, GHSA-82j4-vr25-x394 | Medium | 0.5% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0938, GHSA-mw75-qvfr-hpmr | Medium | 0.6% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in ShowDoc CVE-2022-0937, GHSA-mg5h-9rhq-4cqx | Medium | 0.5% | 14 Mar, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in microweber CVE-2022-0929, GHSA-5fxf-x22x-5q38 | Medium | 1.1% | 12 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0926, GHSA-3q55-66g3-p8xq | Medium | 0.8% | 12 Mar, 2022 | Packagist microweber/microweber |
Cross-site Scripting in ShowDoc CVE-2022-0880, GHSA-gq77-3r6x-383w | Medium | 0.7% | 12 Mar, 2022 | Packagist showdoc/showdoc |
Unrestricted Upload of File with Dangerous Type in Microweber CVE-2022-0921, GHSA-j878-43hm-8gr5 | Medium | 2.2% | 11 Mar, 2022 | Packagist microweber/microweber |
Moodle reflected XSS BIT-moodle-2021-32478, CVE-2021-32478, GHSA-78fm-qhh8-8858 | Medium | 1.1% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Exposure of Sensitive Information to an Unauthorized Actor BIT-moodle-2021-32477, CVE-2021-32477, GHSA-vrpr-2xxx-g444 | Medium | 0.7% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle stored Cross-site Scripting BIT-moodle-2021-32475, CVE-2021-32475, GHSA-5wjh-v7c8-wrhx | Medium | 0.6% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Information Disclosure vulnerability BIT-moodle-2021-32473, CVE-2021-32473, GHSA-wx87-h539-4775 | Medium | 1.0% | 11 Mar, 2022 | Packagist moodle/moodle |
Moodle Exposure of Sensitive Information to an Unauthorized Actor BIT-moodle-2021-32472, CVE-2021-32472, GHSA-454r-jccq-96q8 | Medium | 0.8% | 11 Mar, 2022 | Packagist moodle/moodle |
Cross-site Scripting in microweber CVE-2022-0928, GHSA-jjp3-m93h-5jm4 | Medium | 2.4% | 11 Mar, 2022 | Packagist microweber/microweber |
Unrestricted Upload of File with Dangerous Type in microweber CVE-2022-0912, GHSA-6vx5-cg2p-7g5v | Medium | 0.5% | 11 Mar, 2022 | Packagist microweber/microweber |
Unrestricted file upload leads to stored cross-site scripting in Microweber CVE-2022-0906, GHSA-hf4q-52x6-4p57 | Medium | 0.6% | 10 Mar, 2022 | Packagist microweber/microweber |
HTTP caching is marking private HTTP headers as public in Shopware CVE-2022-24747, GHSA-6wrh-279j-6hvw | Medium | 1.1% | 09 Mar, 2022 | Packagist shopware/core Packagist shopware/platform Packagist shopware/storefront |
HTML injection possibility in voucher code form in Shopware CVE-2022-24746, GHSA-952p-fqcp-g8pc | Medium | 0.8% | 09 Mar, 2022 | Packagist shopware/core Packagist shopware/platform Packagist shopware/storefront |
Shopware guest session is shared between customers CVE-2022-24745, GHSA-jp6h-mxhx-pgqh | Medium | 0.5% | 09 Mar, 2022 | Packagist shopware/platform Packagist shopware/storefront |
Cross-site Scripting in BookStack CVE-2022-0877, GHSA-5rcc-6cmj-7728 | Medium | 0.8% | 08 Mar, 2022 | Packagist ssddanbrown/bookstack |
Cross-site Scripting in intelliants/subrion CVE-2020-18325, GHSA-pcwq-7wrw-r8jv | Medium | 1.6% | 04 Mar, 2022 | Packagist intelliants/subrion |
Cross-site Scripting in Subrion CMS CVE-2020-18324, GHSA-xj7h-g7rh-gjcw | Medium | 2.2% | 04 Mar, 2022 | Packagist intelliants/subrion |
Cross-site Scripting in Pimcore CVE-2022-0832, GHSA-6qcc-whgp-pjj2 | Medium | 66.6% | 04 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Pimcore CVE-2022-0831, GHSA-q67f-3jq4-mww2 | Medium | 1.3% | 04 Mar, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in GeniXCMS CVE-2022-24563, GHSA-5mwx-f6w6-7w5r | Medium | 0.9% | 03 Mar, 2022 | Packagist genix/cms |
Cross-site Scripting in Cipi CVE-2022-26332, GHSA-vpmw-77vm-4mjg | Medium | 0.7% | 01 Mar, 2022 | Packagist andreapollastri/cipi |
Cross site scripting in getgrav/grav CVE-2022-0743, GHSA-2p89-ppc2-mrq4 | Medium | 1.4% | 28 Feb, 2022 | Packagist getgrav/grav |
Cross site scripting in LibreNMS CVE-2022-0772, GHSA-vhm6-gw82-6f8j | Medium | 0.6% | 27 Feb, 2022 | Packagist librenms/librenms |
Cross-site Scripting in microweber CVE-2022-0723, GHSA-4p92-fv6v-fhfj | Medium | 0.9% | 26 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0763, GHSA-6m26-25q2-cq46 | Medium | 0.6% | 26 Feb, 2022 | Packagist microweber/microweber |
Exposure of Resource to Wrong Sphere in microweber CVE-2022-0762, GHSA-5875-p652-2ppm | Medium | 0.7% | 26 Feb, 2022 | Packagist microweber/microweber |
Logic error in dolibarr/dolibarr BIT-dolibarr-2022-0746, CVE-2022-0746, GHSA-8vq6-5f66-hp3r | Medium | 0.9% | 25 Feb, 2022 | Packagist dolibarr/dolibarr |
EC-CUBE improperly handles HTTP Host header values CVE-2022-25355, GHSA-pw97-6v74-9w3p | Medium | 1.2% | 24 Feb, 2022 | Packagist ec-cube/ec-cube |
Cross site scripting in francoisjacquet/rosariosis CVE-2021-44566, GHSA-3756-hwhv-qw58 | Medium | 0.7% | 24 Feb, 2022 | Packagist francoisjacquet/rosariosis |
Cross site scripting in francoisjacquet/rosariosis CVE-2021-44565, GHSA-44cg-qcpr-fwjh | Medium | 0.7% | 24 Feb, 2022 | Packagist francoisjacquet/rosariosis |
Missing server signature validation in OctoberCMS CVE-2022-23655, GHSA-53m6-44rc-h2q5 | Medium | 0.6% | 24 Feb, 2022 | Packagist october/system |
Improper Authorization in dolibarr/dolibarr BIT-dolibarr-2022-0731, CVE-2022-0731, GHSA-4xc7-x2jr-cr74 | Medium | 1.0% | 23 Feb, 2022 | Packagist dolibarr/dolibarr |