Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Path traversal in pimcore CVE-2022-0665, GHSA-gjq4-69wj-p6pr | Medium | 1.5% | 22 Feb, 2022 | Packagist pimcore/pimcore |
Open Redirect in AllTube CVE-2022-0692, GHSA-jmhf-9fj8-88gh | Medium | 3.4% | 21 Feb, 2022 | Packagist rudloff/alltube |
Business Logic Errors in microweber CVE-2022-0688, GHSA-c5gj-w4hx-gvmx | Medium | 0.9% | 20 Feb, 2022 | Packagist microweber/microweber |
Business Logic Errors in microweber CVE-2022-0689, GHSA-3p9j-442x-hjp7 | Medium | 1.0% | 19 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0678, GHSA-38m9-3vg4-rwvp | Medium | 2.3% | 19 Feb, 2022 | Packagist microweber/microweber |
Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel CVE-2022-25336, GHSA-x8xx-x82q-42q3 | Medium | 0.7% | 18 Feb, 2022 | Packagist ezsystems/ezplatform-kernel |
Cross-Site Request Forgery microweber CVE-2022-0638, GHSA-ghww-cv4v-hmxx | Medium | 0.4% | 17 Feb, 2022 | Packagist microweber/microweber |
Crypt_GPG does not prevent additional options in GPG calls CVE-2022-24953, GHSA-59x4-67mh-px54 | Medium | 0.9% | 17 Feb, 2022 | Packagist pear/crypt_gpg |
Generation of Error Message Containing Sensitive Information in Snipe-IT CVE-2022-0622, GHSA-pwwm-pwx2-2hw7 | Medium | 1.0% | 17 Feb, 2022 | Packagist snipe/snipe-it |
Incorrect authorization in Drupal core BIT-drupal-2022-25270, CVE-2022-25270, DRUPAL-CORE-2022-004, GHSA-73q4-j324-2qcc | Medium | 0.8% | 16 Feb, 2022 | Packagist drupal/core |
Cross-site Scripting in livehelperchat BIT-livehelperchat-2022-0612, CVE-2022-0612, GHSA-h2fj-77wh-fh5w | Medium | 0.6% | 16 Feb, 2022 | Packagist remdex/livehelperchat |
Open redirect in microweber CVE-2022-0597, GHSA-rw98-5846-pqhx | Medium | 2.6% | 15 Feb, 2022 | Packagist microweber/microweber |
Microweber vulnerable to Improper Validation of Specified Quantity in Input CVE-2022-0596, GHSA-vpq7-m4qm-p2gp | Medium | 0.6% | 15 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in librenms CVE-2022-0589, GHSA-gj26-g5qf-jrh7 | Medium | 0.8% | 15 Feb, 2022 | Packagist librenms/librenms |
Missing Authorization in librenms/librenms CVE-2022-0588, GHSA-254q-rqmw-vx45 | Medium | 1.1% | 15 Feb, 2022 | Packagist librenms/librenms |
Cross-site Scripting in enshrined/svg-sanitize CVE-2022-23638, GHSA-fqx8-v33p-4qcc | Medium | 0.7% | 14 Feb, 2022 | Packagist enshrined/svg-sanitize |
Improper Privilege Management in Snipe-IT CVE-2022-0579, GHSA-v6vg-pxvv-g5cq | Medium | 1.1% | 14 Feb, 2022 | Packagist snipe/snipe-it |
Cross-site Scripting in librenms CVE-2022-0576, GHSA-rp34-85x3-3764 | Medium | 1.0% | 14 Feb, 2022 | Packagist librenms/librenms |
Cross-site Scripting in librenms CVE-2022-0575, GHSA-hxmr-5gv9-6p8v | Medium | 0.8% | 14 Feb, 2022 | Packagist librenms/librenms |
Exposure of Sensitive Information in snipe/snipe-it CVE-2022-0569, GHSA-qpv2-jxc7-3638 | Medium | 1.0% | 14 Feb, 2022 | Packagist snipe/snipe-it |
Cross-site Scripting in pimcore CVE-2022-0565, GHSA-h9vc-2p9g-63gp | Medium | 1.0% | 14 Feb, 2022 | Packagist pimcore/pimcore |
Path Traversal in S-Cart CVE-2021-44111, GHSA-h676-pjr4-hgqx | Medium | 0.5% | 11 Feb, 2022 | Packagist s-cart/s-cart |
Cross-site Scripting in Drupal Core BIT-drupal-2020-13668, CVE-2020-13668, GHSA-m6q5-wv4x-fv6h | Medium | 0.8% | 11 Feb, 2022 | Packagist drupal/core Packagist drupal/drupal |
Open redirect in microweber CVE-2022-0560, GHSA-r992-xph6-h7x2 | Medium | 1.0% | 11 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0558, GHSA-wmj9-xh24-j4gx | Medium | 0.9% | 10 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in Beanstalk console CVE-2022-0539, GHSA-2cjf-w7c4-fhf6 | Medium | 0.6% | 09 Feb, 2022 | Packagist ptrofimov/beanstalk_console |
Studio 42 elFinder allows stored XSS CVE-2021-45919, GHSA-c3j8-q5x6-2855 | Medium | 0.6% | 08 Feb, 2022 | Packagist studio-42/elfinder |
Cross-site Scripting pimcore CVE-2022-0510, GHSA-mxh3-2699-98g9 | Medium | 0.6% | 08 Feb, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in pimcore CVE-2022-0509, GHSA-cg3h-rc9q-g8v9 | Medium | 1.4% | 08 Feb, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in microweber CVE-2022-0506, GHSA-jjvm-3mfq-7gc7 | Medium | 0.6% | 08 Feb, 2022 | Packagist microweber/microweber |
Cross-Site Request Forgery in microweber CVE-2022-0505, GHSA-7x2h-3v2v-24p9 | Medium | 0.7% | 08 Feb, 2022 | Packagist microweber/microweber |
Generation of Error Message Containing Sensitive Information in microweber CVE-2022-0504, GHSA-xxq4-3742-3h28 | Medium | 1.2% | 08 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0502, CVE-2022-0502, GHSA-57qf-82hh-2hmc | Medium | 0.6% | 06 Feb, 2022 | Packagist remdex/livehelperchat |
Business Logic Errors in SilverStripe Framework CVE-2022-0227, GHSA-32m2-9f76-4gv8 | Medium | Not scored | 06 Feb, 2022 | Packagist silverstripe/framework |
Cross-site Scripting in Beanstalk console CVE-2022-0501, GHSA-gj85-pvp5-mvf9 | Medium | 0.9% | 05 Feb, 2022 | Packagist ptrofimov/beanstalk_console |
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom CVE-2022-0472, GHSA-5q5w-mqp6-g2gh | Medium | 0.8% | 04 Feb, 2022 | Packagist jsdecena/laracom |
RosarioSIS XSS Vulnerability CVE-2021-45416, GHSA-287r-574x-f4h4 | Medium | 2.3% | 01 Feb, 2022 | Packagist francoisjacquet/rosariosis |
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input BIT-dolibarr-2022-0414, CVE-2022-0414, GHSA-f768-8pvq-mm6r | Medium | 1.0% | 31 Jan, 2022 | Packagist dolibarr/dolibarr |
Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS CVE-2022-23409, GHSA-9chx-2vqw-8vq5 | Medium | 13.8% | 31 Jan, 2022 | Packagist ether/logs |
Cross-site Scripting when rendering error messages in laminas-form CVE-2022-23598, GHSA-jq4p-mq33-w375 | Medium | 1.0% | 28 Jan, 2022 | Packagist laminas/laminas-form |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0395, CVE-2022-0395, GHSA-54qq-9chj-rxhv | Medium | 0.6% | 28 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0394, CVE-2022-0394, GHSA-vwxp-9qmf-w299 | Medium | 0.5% | 28 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in pimcore CVE-2022-0348, GHSA-8x44-pwr2-rgc6 | Medium | 0.6% | 27 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Crater Invoice CVE-2022-0372, GHSA-6vfw-74wr-3chh | Medium | 0.6% | 27 Jan, 2022 | Packagist bytefury/crater |
Cross-site Scripting in livehelperchat CVE-2022-0387, GHSA-w4hp-pcp8-qhf3 | Medium | 0.6% | 27 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in livehelperchat CVE-2022-0370, GHSA-8wcc-f2vq-h4gx | Medium | 0.8% | 27 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in microweber CVE-2022-0379, GHSA-prff-6j8q-vrv7 | Medium | 0.9% | 26 Jan, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0378, GHSA-3j58-p785-f27x | Medium | 3.9% | 26 Jan, 2022 | Packagist microweber/microweber |
Missing Authorization in Crater Invoice CVE-2022-0203, GHSA-xh9g-cp3v-p8q4 | Medium | 1.2% | 26 Jan, 2022 | Packagist bytefury/crater |
Cross-site Scripting in Pimcore CVE-2022-0251, GHSA-f7q6-xxph-mfm8 | Medium | 0.7% | 26 Jan, 2022 | Packagist pimcore/pimcore |