Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site Scripting in livehelperchat BIT-livehelperchat-2022-0375, CVE-2022-0375, GHSA-x3g3-jh26-76cf | Medium | 0.7% | 26 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in livehelperchat BIT-livehelperchat-2022-0374, CVE-2022-0374, GHSA-59qh-g7m4-j9m9 | Medium | 0.7% | 26 Jan, 2022 | Packagist remdex/livehelperchat |
Insufficient user authorization in Moodle BIT-moodle-2022-0334, CVE-2022-0334, GHSA-93pj-4p65-qmr9 | Medium | 0.7% | 25 Jan, 2022 | Packagist moodle/moodle |
Cross-site Scripting in grav CVE-2022-0268, GHSA-735v-wx75-xmmm | Medium | 1.4% | 25 Jan, 2022 | Packagist getgrav/grav |
Cross-site Scripting Vulnerability in CodeIgniter4 BIT-codeigniter-2022-21715, CVE-2022-21715, GHSA-7528-7jg5-6g62 | Medium | 1.0% | 24 Jan, 2022 | Packagist codeigniter4/framework |
Cross-site Scripting in showdoc CVE-2021-4172, GHSA-7x22-pmw5-66mq | Medium | 0.6% | 22 Jan, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in phpmyadmin BIT-phpmyadmin-2022-23808, CVE-2022-23808, GHSA-vcwc-6mr9-8m7c | Medium | 7.9% | 22 Jan, 2022 | Packagist phpmyadmin/phpmyadmin |
Improper Authentication in phpmyadmin BIT-phpmyadmin-2022-23807, CVE-2022-23807, GHSA-8wf2-3ggj-78q9 | Medium | 0.7% | 22 Jan, 2022 | Packagist phpmyadmin/phpmyadmin |
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP CVE-2022-51016, GHSA-h79x-98r2-g6qc | Medium | 0.2% | 21 Jan, 2022 | Packagist pocketmine/pocketmine-mp |
Insufficient Session Expiration in Pterodactyl API GHSA-7v3x-h7r2-34jv | Medium | Not scored | 21 Jan, 2022 | Packagist pterodactyl/panel |
Cross-site Scripting in pimcore CVE-2022-0285, GHSA-pm3v-qxf6-fgxv | Medium | 1.5% | 20 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in microweber CVE-2022-0278, GHSA-m8rp-q82r-c5mf | Medium | 0.7% | 20 Jan, 2022 | Packagist microweber/microweber |
Microweber Incorrect Permission Assignment for Critical Resource vulnerability CVE-2022-0277, GHSA-vcgf-vmpc-ph79 | Medium | 1.1% | 20 Jan, 2022 | Packagist microweber/microweber |
Authorization Bypass Through User-Controlled Key in LiveHelperChat BIT-livehelperchat-2022-0266, CVE-2022-0266, GHSA-c7fm-jx59-wjf6 | Medium | 1.1% | 19 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in pimcore CVE-2022-0262, GHSA-4f5x-q4jc-xfcf | Medium | 1.5% | 18 Jan, 2022 | Packagist pimcore/pimcore |
Business Logic Errors in pimcore CVE-2021-4146, GHSA-54hw-mhgh-x4vc | Medium | 0.8% | 18 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in pimcore CVE-2022-0260, GHSA-455w-gv5p-wgg3 | Medium | 0.7% | 18 Jan, 2022 | Packagist pimcore/pimcore |
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat CVE-2022-0245, GHSA-vxh4-x6gv-mphf | Medium | 0.4% | 18 Jan, 2022 | Packagist livehelperchat/livehelperchat |
pimcore is vulnerable to Cross-site Scripting CVE-2022-0257, GHSA-v567-q267-phpg | Medium | 1.5% | 17 Jan, 2022 | Packagist pimcore/pimcore |
pimcore is vulnerable to Cross-site Scripting CVE-2022-0256, GHSA-57hg-26h7-9qgv | Medium | 0.6% | 17 Jan, 2022 | Packagist pimcore/pimcore |
livehelperchat is vulnerable to Cross-site Scripting CVE-2022-0253, GHSA-5r9v-8w62-r26j | Medium | 0.8% | 17 Jan, 2022 | Packagist remdex/livehelperchat |
icecoder is vulnerable to Cross-site Scripting CVE-2021-3862, GHSA-73q9-7pwj-gm46 | Medium | 0.7% | 17 Jan, 2022 | Packagist icecoder/icecoder |
Cross-Site Request Forgery (CSRF) in livehelperchat BIT-livehelperchat-2022-0226, CVE-2022-0226, GHSA-6jmh-9gqm-5xrx | Medium | 0.4% | 14 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-Site Request Forgery (CSRF) in livehelperchat BIT-livehelperchat-2022-0231, CVE-2022-0231, GHSA-8m28-w6xg-35hw | Medium | 0.5% | 14 Jan, 2022 | Packagist remdex/livehelperchat |
Improper Access Control in snipe-it CVE-2022-0178, GHSA-xc47-3rch-cv57 | Medium | 0.6% | 13 Jan, 2022 | Packagist snipe/snipe-it |
XSS vulnerability in translations GHSA-rrgw-3hg3-9x8c | Medium | Not scored | 12 Jan, 2022 | Packagist oro/platform |
Incorrect Default Permissions and Improper Access Control in snipe-it CVE-2022-0179, GHSA-w3v3-cxq5-9vr4 | Medium | 0.6% | 12 Jan, 2022 | Packagist snipe/snipe-it |
Logic error in dolibarr BIT-dolibarr-2022-0174, CVE-2022-0174, GHSA-8qvx-f5gf-g43v | Medium | 1.0% | 10 Jan, 2022 | Packagist dolibarr/dolibarr |
bookstack is vulnerable to Improper Access Control CVE-2021-4194, GHSA-ghhm-xrwp-75m9 | Medium | 0.7% | 06 Jan, 2022 | Packagist ssddanbrown/bookstack |
Open redirect in shopware CVE-2022-21651, GHSA-c53v-qmrx-93hg | Medium | 0.8% | 05 Jan, 2022 | Packagist shopware/shopware |
Cross-site Scripting in DayByDay CRM CVE-2022-22109, GHSA-jr37-66pj-36v7 | Medium | 0.5% | 05 Jan, 2022 | Packagist bottelet/flarepoint |
Missing Authorization in DayByDay CRM CVE-2022-22108, GHSA-frxp-xxx8-hrg6 | Medium | 0.7% | 05 Jan, 2022 | Packagist bottelet/flarepoint |
Missing Authorization in DayByDay CRM CVE-2022-22107, GHSA-44gv-fgcj-w546 | Medium | 0.7% | 05 Jan, 2022 | Packagist bottelet/flarepoint |
XSS vulnerability on email template preview page CVE-2021-41236, GHSA-qv7g-j98v-8pp7 | Medium | 0.7% | 04 Jan, 2022 | Packagist oro/platform |
User enumeration in livehelperchat BIT-livehelperchat-2022-0083, CVE-2022-0083, GHSA-4xww-6h7v-29jg | Medium | 0.9% | 04 Jan, 2022 | Packagist remdex/livehelperchat |
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information CVE-2022-0079, GHSA-5mj6-3cmq-fh34 | Medium | 1.0% | 03 Jan, 2022 | Packagist showdoc/showdoc |
Cross site scripting in dolibarr BIT-dolibarr-2022-22293, CVE-2022-22293, GHSA-g5jm-xhwm-9xp9 | Medium | 0.8% | 02 Jan, 2022 | Packagist dolibarr/dolibarr |
Cross-site Scripting in Netgen Tags Bundle CVE-2021-45895, GHSA-xvvv-wj7j-r9jm | Medium | 0.7% | 27 Dec, 2021 | Packagist netgen/tagsbundle |
invoiceninja is vulnerable to Cross-site Scripting CVE-2021-3977, GHSA-xg6r-5gx4-qxjm | Medium | 0.6% | 24 Dec, 2021 | Packagist hillelcoren/invoice-ninja |
elgg is vulnerable to Cross-site Scripting CVE-2021-4072, GHSA-2xw8-j43j-5vxp | Medium | 0.7% | 24 Dec, 2021 | Packagist elgg/elgg |
PrestaShop XSS Vulnerability CVE-2012-20001, GHSA-j33m-2537-86jm | Medium | 0.8% | 21 Dec, 2021 | Packagist prestashop/prestashop |
livehelperchat is vulnerable to Cross-site Scripting BIT-livehelperchat-2021-4132, CVE-2021-4132, GHSA-f7xw-46vh-5jw2 | Medium | 0.7% | 17 Dec, 2021 | Packagist remdex/livehelperchat |
Wechat-php-sdk is affected by a Cross Site Scripting vulnerability. CVE-2021-43678, GHSA-rwqq-p4p9-5wpq | Medium | 0.8% | 17 Dec, 2021 | Packagist gaoming13/wechat-php-sdk |
Inability to de-op players if listed in ops.txt with non-lowercase letters CVE-2021-48006, GHSA-j5qg-w9jg-3wg3 | Medium | 0.2% | 16 Dec, 2021 | Packagist pocketmine/pocketmine-mp |
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) BIT-livehelperchat-2021-4123, CVE-2021-4123, GHSA-rpg7-q4cv-p466 | Medium | 0.5% | 16 Dec, 2021 | Packagist remdex/livehelperchat |
yetiforcecrm is vulnerable to Cross-site Scripting CVE-2021-4121, GHSA-j85f-xw9x-ffwp | Medium | 0.8% | 16 Dec, 2021 | Packagist yetiforce/yetiforce-crm |
Cross-site Scripting in Anchor CMS CVE-2021-44116, GHSA-7mq6-cp5m-f4j5 | Medium | 0.8% | 15 Dec, 2021 | Packagist anchorcms/anchor-cms |
YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product CVE-2021-4117, GHSA-cxg7-84wp-8pcq | Medium | 0.7% | 15 Dec, 2021 | Packagist yetiforce/yetiforce-crm |
yetiforcecrm is vulnerable to Cross-site Scripting CVE-2021-4116, GHSA-fwh7-v4gf-xv7w | Medium | 0.5% | 15 Dec, 2021 | Packagist yetiforce/yetiforce-crm |
Dolibarr Cross Site Scripting (XSS) vulnerability CVE-2021-42220, GHSA-jqfp-m5f8-vg28 | Medium | 1.0% | 15 Dec, 2021 | Packagist dolibarr/dolibarr |