Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site Scripting in the yoast_seo TYPO3 extension CVE-2021-36788, GHSA-28w5-j8xj-2xwc | Medium | 0.5% | 13 Aug, 2021 | Packagist yoast-seo-for-typo3/yoast_seo |
Cross-site Scripting in the femanager TYPO3 extension CVE-2021-36787, GHSA-f3rf-v9qm-9c89 | Medium | 1.3% | 13 Aug, 2021 | Packagist in2code/femanager |
Cross-site Scripting in TYPO3 extension CVE-2021-36785, GHSA-jj8r-p9f5-fmvv | Medium | 0.5% | 13 Aug, 2021 | Packagist miniorange/miniorange-saml |
Exposed phpinfo() leadked via documentation files CVE-2021-37704, GHSA-cvh5-p6r6-g2qc | Medium | 5.9% | 12 Aug, 2021 | Packagist phpfastcache/phpfastcache |
Cross site scripting via HTML attributes in the back end CVE-2021-35955, GHSA-hr3h-x6gq-rqcp | Medium | 0.6% | 12 Aug, 2021 | Packagist contao/contao Packagist contao/core-bundle |
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev CVE-2021-3692, GHSA-wwvv-x5mq-h3jj | Medium | 1.7% | 10 Aug, 2021 | Packagist yiisoft/yii2-dev |
Cross-Site Scripting via Rich-Text Content BIT-typo3-2021-32768, CVE-2021-32768, GHSA-c5c9-8c6m-727v | Medium | 0.7% | 10 Aug, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Improper Access Control in Dolibarr CVE-2021-25954, GHSA-vxhc-c4qm-647p | Medium | 0.7% | 09 Aug, 2021 | Packagist dolibarr/dolibarr |
Subrion Cross-Site Scripting (XSS) vulnerability CVE-2020-22330, GHSA-jj94-j4r3-5gr4 | Medium | 0.6% | 06 Aug, 2021 | Packagist intelliants/subrion |
Cross Site Scripting in Subrion CMS CVE-2020-22392, GHSA-hxj6-v58r-cqv3 | Medium | 0.6% | 05 Aug, 2021 | Packagist intelliants/subrion |
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc CVE-2021-3678, GHSA-j85q-whc9-g4p9 | Medium | 1.1% | 04 Aug, 2021 | Packagist showdoc/showdoc |
Inadequate Encryption Strength in showdoc CVE-2021-3680, GHSA-8vh3-29mr-m9xg | Medium | 0.5% | 04 Aug, 2021 | Packagist showdoc/showdoc |
NukeViet Cross-site Scripting via the editor in the News module CVE-2020-22765, GHSA-6j4j-22qg-9ffm | Medium | 0.6% | 30 Jul, 2021 | Packagist nukeviet/nukeviet |
Cross Site Scripting in LavaLite CMS CVE-2020-23234, GHSA-v2f3-f8x4-m3w8 | Medium | 0.6% | 26 Jul, 2021 | Packagist lavalite/cms |
Information Disclosure in User Authentication BIT-typo3-2021-32767, CVE-2021-32767, GHSA-34fr-fhqr-7235 | Medium | 0.8% | 20 Jul, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in Backend Grid View BIT-typo3-2021-32669, CVE-2021-32669, GHSA-rgcg-28xm-8mmw | Medium | 0.6% | 20 Jul, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in Query Generator & Query View BIT-typo3-2021-32668, CVE-2021-32668, GHSA-6mh3-j5r5-2379 | Medium | 0.6% | 20 Jul, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in Page Preview BIT-typo3-2021-32667, CVE-2021-32667, GHSA-8mq9-fqv8-59wf | Medium | 0.6% | 20 Jul, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-site Scripting in Froala WYSIWYG Editor CVE-2021-28114, GHSA-rr6v-h7m8-wc9f | Medium | 52.0% | 16 Jul, 2021 | Packagist froala/wysiwyg-editor |
ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability CVE-2020-18151, GHSA-842m-vp3r-qwwr | Medium | 0.5% | 14 Jul, 2021 | Packagist thinkcmf/thinkcmf |
Cross-site scripting in LavaLite-CMS CVE-2020-23700, GHSA-592v-7frm-h44q | Medium | 0.6% | 07 Jul, 2021 | Packagist lavalite/cms |
XSS Injection in Media Collection Title was possible CVE-2021-32737, GHSA-gm2x-6475-g9r8 | Medium | 0.7% | 02 Jul, 2021 | Packagist sulu/sulu |
LavaLite Stored Cross-site Scripting vulnerability CVE-2020-36397, GHSA-3cfg-rxh6-h2rh | Medium | 0.5% | 02 Jul, 2021 | Packagist lavalite/cms |
Stored XSS in LavaLite 5.8.0 CVE-2020-36396, GHSA-gjf5-j475-p4g6 | Medium | 0.5% | 02 Jul, 2021 | Packagist lavalite/cms |
Stored XSS in LavaLite 5.8.0 CVE-2020-36395, GHSA-vv33-27jm-cvxq | Medium | 0.5% | 02 Jul, 2021 | Packagist lavalite/cms |
Craft CMS Cross-site Scripting Vulnerability CVE-2021-27902, GHSA-3jxh-789f-p7m6 | Medium | 1.0% | 30 Jun, 2021 | Packagist craftcms/cms |
List of order ids, number, items total and token value exposed for unauthorized uses via new API CVE-2021-32720, GHSA-rpxh-vg2x-526v | Medium | 0.9% | 28 Jun, 2021 | Packagist sylius/sylius |
non-admin users can create integration role with administrator role GHSA-243q-g9j3-qf6r | Medium | Not scored | 28 Jun, 2021 | Packagist shopware/core Packagist shopware/platform |
Canceling of orders not related to the logged-in user GHSA-wq3r-jwrq-xg6w | Medium | Not scored | 28 Jun, 2021 | Packagist shopware/core Packagist shopware/platform |
Magento Improper input validation vulnerability BIT-magento-2021-28585, CVE-2021-28585, GHSA-c38m-9668-6j2w | Medium | 1.6% | 28 Jun, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento Unauthorized access to restricted resources BIT-magento-2021-28563, CVE-2021-28563, GHSA-q9xx-4689-gvv5 | Medium | 1.4% | 28 Jun, 2021 | Packagist magento/community-edition |
Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies BIT-magento-2021-28556, CVE-2021-28556, GHSA-39ch-rg26-gmq5 | Medium | 1.4% | 28 Jun, 2021 | Packagist magento/community-edition Packagist magento/project-community-edition |
EC-CUBE Cross-site scripting vulnerability CVE-2021-20751, GHSA-r6qq-qc9m-98w2 | Medium | 1.1% | 28 Jun, 2021 | Packagist ec-cube/ec-cube |
EC-CUBE Cross-site scripting vulnerability CVE-2021-20750, GHSA-vrpv-26fm-7vf7 | Medium | 1.6% | 28 Jun, 2021 | Packagist ec-cube/ec-cube |
Exposure of Sensitive Information to an Unauthorized Actor CVE-2021-32716, GHSA-68v9-3jjq-rvp4, GHSA-gpmh-g94g-qrhr | Medium | 1.1% | 24 Jun, 2021 | Packagist shopware/core Packagist shopware/platform |
Cross-site scripting CVE-2021-32713, GHSA-7vmw-7x57-q6jw | Medium | 0.7% | 24 Jun, 2021 | Packagist shopware/shopware |
Exposure of Sensitive Information to an Unauthorized Actor CVE-2021-32712, GHSA-qwpp-fgrj-h78q | Medium | 1.1% | 24 Jun, 2021 | Packagist shopware/shopware |
Missing Authentication for Critical Function CVE-2021-32709, GHSA-g7w8-pp9w-7p32, GHSA-p696-gf58-9w97 | Medium | 0.6% | 24 Jun, 2021 | Packagist shopware/core Packagist shopware/platform |
Cross site scripting in the system log CVE-2021-35210, GHSA-h58v-c6rf-g9f7 | Medium | 0.7% | 23 Jun, 2021 | Packagist contao/contao Packagist contao/core-bundle |
JetPack Exposure of Resource to Wrong Sphere CVE-2021-24374, GHSA-5hr6-r8h6-wh22 | Medium | 1.5% | 21 Jun, 2021 | Packagist automattic/jetpack |
Form validation can be skipped CVE-2021-32697, GHSA-m5vx-8chx-qvmm | Medium | 1.1% | 21 Jun, 2021 | Packagist neos/form |
MantisBT allows XSS in manage_custom_field_edit_page.php CVE-2021-33557, GHSA-52cx-vphc-jmjm | Medium | 1.8% | 17 Jun, 2021 | Packagist mantisbt/mantisbt |
Cross-site scripting in PageKit CVE-2021-32245, GHSA-mrwr-2945-fr22 | Medium | 0.5% | 16 Jun, 2021 | Packagist pagekit/pagekit |
Moodle Cross Site Scripting (XSS) BIT-moodle-2021-32244, CVE-2021-32244, GHSA-g5m5-j48g-fr24 | Medium | 0.9% | 16 Jun, 2021 | Packagist moodle/moodle |
Authentication bypass in SilverStripe GraphQL BIT-silverstripe-2020-26136, CVE-2020-26136, GHSA-mg2g-8pwj-r2j2 | Medium | 1.2% | 08 Jun, 2021 | Packagist silverstripe/graphql |
FormField with square brackets in field name skips validation BIT-silverstripe-2020-26138, CVE-2020-26138, GHSA-7mv4-4xpg-xq44 | Medium | 1.3% | 08 Jun, 2021 | Packagist silverstripe/framework |
SilverStripe XXE Vulnerability in CSSContentParser BIT-silverstripe-2020-25817, CVE-2020-25817, GHSA-3vjc-5x79-m9r8 | Medium | 0.8% | 08 Jun, 2021 | Packagist silverstripe/framework |
Cross-site scripting in ICEcoder CVE-2021-32106, GHSA-jf9v-q8vh-3fmc | Medium | 0.9% | 08 Jun, 2021 | Packagist icecoder/icecoder |
Open Redirect CVE-2021-32645, GHSA-4r8q-gv9j-3xx6 | Medium | 1.0% | 27 May, 2021 | Packagist hyn/multi-tenant |
ckeditor4 vulnerable to cross-site scripting BIT-drupal-2021-33829, CVE-2021-33829, DRUPAL-CORE-2021-003, GHSA-rgx6-rjj4-c388 | Medium | 3.2% | 26 May, 2021 | Packagist drupal/core Packagist drupal/drupal npm ckeditor4 |