Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
snipe-it is vulnerable to Cross-site Scripting CVE-2021-4108, GHSA-rxch-gp62-574w | Medium | 0.8% | 14 Dec, 2021 | Packagist snipe/snipe-it |
yetiforcecrm is vulnerable to Cross-site Scripting CVE-2021-4107, GHSA-rp42-c45j-g46x | Medium | 0.8% | 14 Dec, 2021 | Packagist yetiforce/yetiforce-crm |
phpservermon is vulnerable to CRLF Injection CVE-2021-4097, GHSA-8qv8-fq5w-p966 | Medium | 0.9% | 12 Dec, 2021 | Packagist phpservermon/phpservermon |
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4092, GHSA-v4cr-m5f8-gxw8 | Medium | 0.4% | 11 Dec, 2021 | Packagist yetiforce/yetiforce-crm |
snipe-it is vulnerable to Improper Access Control CVE-2021-4089, GHSA-9vwf-54m9-gc4f | Medium | 0.7% | 10 Dec, 2021 | Packagist snipe/snipe-it |
Cross-site Scripting in pimcore CVE-2021-4084, GHSA-8w3x-r6x7-c5r5 | Medium | 1.6% | 10 Dec, 2021 | Packagist pimcore/pimcore |
pimcore is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4082, GHSA-2v2v-fx7r-f2fh | Medium | 0.4% | 10 Dec, 2021 | Packagist pimcore/pimcore |
pimcore is vulnerable to Cross-site Scripting CVE-2021-4081, GHSA-3p85-p4qg-hcrp | Medium | 0.8% | 10 Dec, 2021 | Packagist pimcore/pimcore |
Cross-Site Request Forgery in kimai2 CVE-2021-4033, GHSA-4jwx-78vx-gm6g | Medium | 0.5% | 09 Dec, 2021 | Packagist kevinpapst/kimai2 |
Cross site scripting in remdex/livehelperchat BIT-livehelperchat-2021-4050, CVE-2021-4050, GHSA-97cc-825c-399g | Medium | 0.9% | 08 Dec, 2021 | Packagist remdex/livehelperchat |
Laravel Framework XSS in Blade templating engine CVE-2021-43808, GHSA-66hf-2p6w-jqfw | Medium | 0.8% | 08 Dec, 2021 | Packagist illuminate/view Packagist laravel/framework |
Cross-Site Request Forgery in remdex/livehelperchat BIT-livehelperchat-2021-4049, CVE-2021-4049, GHSA-h86j-6h6m-qjqw | Medium | 0.4% | 07 Dec, 2021 | Packagist remdex/livehelperchat |
Cross Site Request Forgery in firefly-iii CVE-2021-4005, GHSA-hjhp-hwfj-hwf3 | Medium | 0.4% | 04 Dec, 2021 | Packagist grumpydictator/firefly-iii |
Open Redirect in showdoc CVE-2021-4000, GHSA-8c9x-wfgj-v78w | Medium | 0.8% | 03 Dec, 2021 | Packagist showdoc/showdoc |
bookstack is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3944, GHSA-wc7v-77jr-5c3m | Medium | 0.6% | 02 Dec, 2021 | Packagist ssddanbrown/bookstack |
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext GHSA-9jp8-cwwx-p64q | Medium | Not scored | 01 Dec, 2021 | Packagist ezsystems/ezplatform-admin-ui |
XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext GHSA-fxwm-rx68-p5vx | Medium | Not scored | 01 Dec, 2021 | Packagist ezsystems/ezplatform-richtext |
Cross-site Scripting in LibreNMS CVE-2021-44279, GHSA-5vr6-hm68-5j9p | Medium | 0.6% | 01 Dec, 2021 | Packagist librenms/librenms |
Cross-site Scripting in LibreNMS CVE-2021-44277, GHSA-4gwh-2pqx-f5cc | Medium | 0.6% | 01 Dec, 2021 | Packagist librenms/librenms |
Cross-site Scripting in kimai2 CVE-2021-3983, GHSA-67c7-5v9j-227r | Medium | 0.8% | 01 Dec, 2021 | Packagist kevinpapst/kimai2 |
elgg is vulnerable to Authorization Bypass Through User-Controlled Key CVE-2021-3964, GHSA-gwpx-q2h9-wxgx | Medium | 0.8% | 01 Dec, 2021 | Packagist elgg/elgg |
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-4015, GHSA-g6vq-wc8w-4g69 | Medium | 0.4% | 01 Dec, 2021 | Packagist grumpydictator/firefly-iii |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3993, GHSA-6pqm-xvfc-w7p4 | Medium | 0.5% | 01 Dec, 2021 | Packagist showdoc/showdoc |
kimai2 is vulnerable to Improper Access Control CVE-2021-3992, GHSA-9w8f-7wgr-2h7g | Medium | 1.1% | 01 Dec, 2021 | Packagist kevinpapst/kimai2 |
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2021-3990, GHSA-vrgh-5w3c-ggf8 | Medium | 0.9% | 01 Dec, 2021 | Packagist showdoc/showdoc |
showdoc is vulnerable to URL Redirection to Untrusted Site CVE-2021-3989, GHSA-f545-vpwp-r9j7 | Medium | 0.8% | 01 Dec, 2021 | Packagist showdoc/showdoc |
snipe-it is vulnerable to Cross-site Scripting CVE-2021-4018, GHSA-5fh3-25xr-g85h | Medium | 0.7% | 01 Dec, 2021 | Packagist snipe/snipe-it |
bookstack is vulnerable to Improper Access Control CVE-2021-4026, GHSA-jm6p-wfjg-xm7x | Medium | 0.9% | 30 Nov, 2021 | Packagist ssddanbrown/bookstack |
CSV Injection in symfony/serializer BIT-symfony-2021-41270, CVE-2021-41270, GHSA-2xhg-w2g5-w95x | Medium | 1.4% | 24 Nov, 2021 | Packagist symfony/serializer Packagist symfony/symfony |
Webcache Poisoning in symfony/http-kernel BIT-symfony-2021-41267, CVE-2021-41267, GHSA-q3j3-w37x-hq2q | Medium | 1.3% | 24 Nov, 2021 | Packagist symfony/http-kernel Packagist symfony/symfony |
EC-CUBE Cross-site request forgery (CSRF) vulnerability CVE-2021-20842, GHSA-m9hv-qmqh-33qh | Medium | 0.6% | 24 Nov, 2021 | Packagist ec-cube/ec-cube |
EC-CUBE Improper access control in Management screen CVE-2021-20841, GHSA-jc55-crg7-pr35 | Medium | 1.3% | 24 Nov, 2021 | Packagist ec-cube/ec-cube |
Moodle Insecure direct object reference (IDOR) in a calendar web service BIT-moodle-2021-43560, CVE-2021-43560, GHSA-g39c-mccf-rxjv | Medium | 1.1% | 22 Nov, 2021 | Packagist moodle/moodle |
Cross-site Scripting in moodle BIT-moodle-2021-43558, CVE-2021-43558, GHSA-wpfp-q843-v772 | Medium | 0.9% | 22 Nov, 2021 | Packagist moodle/moodle |
The disqualify lead action may be executed without CSRF token check CVE-2021-39198, GHSA-vf7h-6246-hm43 | Medium | 0.3% | 19 Nov, 2021 | Packagist oro/crm |
Server-Side Request Forgery in Concrete CMS CVE-2021-22969, GHSA-mcxr-fx5f-96qq | Medium | 0.9% | 19 Nov, 2021 | Packagist concrete5/core |
Cross-site Scripting in kimai2 CVE-2021-3963, GHSA-gf2c-93hm-r9j5 | Medium | 0.4% | 19 Nov, 2021 | Packagist kevinpapst/kimai2 |
Cross-site Scripting in kimai2 CVE-2021-3957, GHSA-2xwq-h7r9-6w27 | Medium | 0.4% | 19 Nov, 2021 | Packagist kevinpapst/kimai2 |
Cross-site Scripting in kimai2 CVE-2021-3976, GHSA-427q-jp8v-ww95 | Medium | 0.4% | 19 Nov, 2021 | Packagist kevinpapst/kimai2 |
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys CVE-2021-41273, GHSA-wwgq-9jhf-qgw6 | Medium | 0.4% | 17 Nov, 2021 | Packagist pterodactyl/panel |
Cross-site scripting (XSS) from image block content in the site frontend CVE-2021-41258, GHSA-cq58-r77c-5jjw | Medium | 0.8% | 16 Nov, 2021 | Packagist getkirby/cms |
Cross-site scripting (XSS) from writer field content in the site frontend CVE-2021-41252, GHSA-x7j7-qp7j-hw3q | Medium | 0.9% | 16 Nov, 2021 | Packagist getkirby/cms |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3776, GHSA-m4hj-wg2r-qpcr | Medium | 0.4% | 13 Nov, 2021 | Packagist showdoc/showdoc |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3775, GHSA-pjjf-hc4q-g298 | Medium | 0.4% | 13 Nov, 2021 | Packagist showdoc/showdoc |
showdoc is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3683, GHSA-x5jp-9fmm-m9pf | Medium | 0.4% | 13 Nov, 2021 | Packagist showdoc/showdoc |
snipe-it is vulnerable to Cross-site Scripting CVE-2021-3938, GHSA-2cqg-q7jm-j35c | Medium | 0.5% | 13 Nov, 2021 | Packagist snipe/snipe-it |
twill is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3932, GHSA-f99g-pg48-wrfc | Medium | 0.4% | 13 Nov, 2021 | Packagist area17/twill |
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3931, GHSA-533p-cp2g-99wp | Medium | 0.4% | 13 Nov, 2021 | Packagist snipe/snipe-it |
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) CVE-2021-3921, GHSA-q2cv-94xm-qvg4 | Medium | 0.4% | 13 Nov, 2021 | Packagist grumpydictator/firefly-iii |
Dolibarr ERP and CRM contain XSS Vulnerability BIT-dolibarr-2021-33618, CVE-2021-33618, GHSA-fc6h-769x-gff5 | Medium | 79.3% | 10 Nov, 2021 | Packagist dolibarr/dolibarr |