Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Authenticated Server Side Request Forgery GHSA-8pfh-mm2g-hmc3 | Low | Not scored | 21 Dec, 2020 | Packagist shopware/core Packagist shopware/platform |
Information exposure via query strings in URL GHSA-cq6h-w3mc-57f4 | Low | Not scored | 21 Dec, 2020 | Packagist shopware/core Packagist shopware/platform |
Authenticated Privilege Escalation GHSA-5q58-x5h2-v5rx | Low | Not scored | 21 Dec, 2020 | Packagist shopware/core Packagist shopware/platform |
OpenCart Cross-Site Request Forgery (CSRF) CVE-2020-28838, GHSA-3j6m-m5v5-9785 | Low | 0.4% | 11 Dec, 2020 | Packagist opencart/opencart |
XML External Entity in Dashboard Widget BIT-typo3-2020-26229, CVE-2020-26229, GHSA-q9cp-mc96-m4w2 | Low | 0.6% | 23 Nov, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Persistent XSS in newsletter module in Shopware GHSA-hrfh-fp4x-crrq | Low | Not scored | 13 Nov, 2020 | Packagist shopware/shopware |
Persistent XSS in shopping worlds GHSA-28fw-88hq-6jmm | Low | Not scored | 13 Nov, 2020 | Packagist shopware/shopware |
Persistent XSS in customer module in Shopware GHSA-6gv9-7q4g-pmvm | Low | Not scored | 13 Nov, 2020 | Packagist shopware/shopware |
Magento information disclosure vulnerability BIT-magento-2020-24406, CVE-2020-24406, GHSA-mr8q-7f5j-wc79 | Low | 2.1% | 09 Nov, 2020 | Packagist magento/community-edition |
Magento 2 Community Edition vulnerable to Improper Authorization BIT-magento-2020-24404, CVE-2020-24404, GHSA-rwf7-652f-76mv | Low | 1.9% | 09 Nov, 2020 | Packagist magento/community-edition |
Magento incorrect user permissions vulnerability within the Inventory component BIT-magento-2020-24403, CVE-2020-24403, GHSA-39rw-4m66-82gf | Low | 1.6% | 09 Nov, 2020 | Packagist magento/community-edition Packagist magento/project-community-edition |
Denial of Service via Cache Flooding GHSA-p68v-frgx-4rjp | Low | Not scored | 19 Oct, 2020 | Packagist shopware/core Packagist shopware/platform |
Non-persistent XSS in the Storefront in Shopware GHSA-qvhr-55hg-3qwv | Low | Not scored | 23 Sep, 2020 | Packagist shopware/core Packagist shopware/platform |
RCE in Third Party Library in Shopware GHSA-qvc5-cfrr-384v | Low | Not scored | 23 Sep, 2020 | Packagist shopware/core Packagist shopware/platform |
personnummer/php vulnerable to Improper Input Validation GHSA-2p6g-gjp8-ggg9 | Low | Not scored | 09 Sep, 2020 | Packagist personnummer/personnummer |
Upload whitelisted files to any directory in OctoberCMS CVE-2020-5297, GHSA-9722-rr68-rfpg | Low | 1.2% | 03 Jun, 2020 | Packagist october/cms |
Information Disclosure in Password Reset BIT-typo3-2020-11063, CVE-2020-11063, GHSA-347x-877p-hcwx | Low | 1.2% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Information disclosure of source code in SimpleSAMLphp CVE-2020-5301, GHSA-24m3-w8g9-jwpq | Low | 0.9% | 21 Apr, 2020 | Packagist simplesamlphp/simplesamlphp |
Link injection in SimpleSAMLphp GHSA-2r3v-q9x3-7g46 | Low | Not scored | 24 Jan, 2020 | Packagist simplesamlphp/simplesamlphp |
SilverStripe Priviledge escalation through cache pollution CVE-2019-12617, GHSA-6r58-4xgr-gm6m | Low | 0.9% | 26 Sep, 2019 | Packagist silverstripe/framework |
Improper Input Validation in Firefly III CVE-2019-14671, GHSA-jjcx-999m-35hc | Low | 0.5% | 05 Aug, 2019 | Packagist grumpydictator/firefly-iii |
Twig Sandbox Information Disclosure CVE-2019-9942, GHSA-vxrc-68xx-x48g | Low | 1.4% | 23 Mar, 2019 | Packagist twig/twig |
phpMyAdmin cookie-attribute injection CVE-2016-5702, GHSA-xqw9-ffx7-g998 | Low | 1.7% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
TYPO3 cross-site scripting (XSS) CVE-2015-5956, GHSA-989h-wv8x-933p | Low | 2.0% | 16 Sep, 2015 | Packagist typo3/cms |
Moodle allows attackers to bypass intended login restrictions CVE-2015-3179, GHSA-4ppg-2mx6-fqx9 | Low | 1.5% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-3178, GHSA-9fmw-m4qx-6cq8 | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not set the RISK_XSS bit for graders CVE-2015-3174, GHSA-6r7x-6q98-qcqp | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-2273, GHSA-w77v-xpxr-c6pv | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2015-2269, GHSA-cp39-43xr-2wrp | Low | 3.3% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not set the RISK_XSS bit for graders CVE-2015-0216, GHSA-2jcw-r79x-4r5v | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-0212, GHSA-jj3j-mhgc-g4m4 | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
phpMyAdmin Multiple XSS Vulnerabilities CVE-2011-3592, GHSA-5p69-rmx8-7gw7 | Low | 1.4% | 26 Dec, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save CVE-2011-3591, GHSA-3p87-w3c5-27gf | Low | 1.4% | 26 Dec, 2014 | Packagist phpmyadmin/phpmyadmin |
Moodle allows attackers to upload files containing JavaScript CVE-2014-7835, GHSA-vrf6-q7qj-69v5 | Low | 1.4% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-7830, GHSA-j4mr-vc54-h5pc | Low | 1.5% | 24 Nov, 2014 | Packagist moodle/moodle |
phpMyAdmin cross-site scripting Vulnerability via ENUM value CVE-2014-7217, GHSA-wv8g-fx9j-q2jg | Low | 1.6% | 03 Oct, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin cross-site scripting vulnerability in crafted view name CVE-2014-5274, GHSA-q586-xpwr-jc3j | Low | 1.0% | 22 Aug, 2014 | Packagist phpmyadmin/phpmyadmin |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3551, GHSA-m8f5-9wg8-2c3h | Low | 1.7% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-3544, GHSA-c9jp-244j-vh78 | Low | 4.7% | 29 Jul, 2014 | Packagist moodle/moodle |
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names CVE-2014-4986, GHSA-jqmr-wqgp-8mh2 | Low | 1.6% | 20 Jul, 2014 | Packagist phpmyadmin/phpmyadmin |
Typo3 XSS Vulnerabilities CVE-2014-3943, GHSA-qqh2-h6gw-6x8x | Low | 1.4% | 03 Jun, 2014 | Packagist typo3/cms |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-2571, GHSA-75c6-xqwr-v2r9 | Low | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework CVE-2013-7078, GHSA-qj69-chjp-g4f5 | Low | 1.6% | 19 Jan, 2014 | Packagist typo3/cms-core |
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component CVE-2013-7074, GHSA-r8m7-792j-5jvq | Low | 1.1% | 21 Dec, 2013 | Packagist typo3/cms |
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value CVE-2013-5002, GHSA-p632-5w74-x8xx | Low | 1.0% | 31 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
Typo3 Function Menu API XSS Vulnerability CVE-2012-6148, GHSA-rgf6-9q7g-55qg | Low | 1.2% | 01 Jul, 2013 | Packagist typo3/cms |
Typo3 Backend API XSS Vulnerability CVE-2012-6147, GHSA-qmmw-ch2q-j6xx | Low | 1.8% | 01 Jul, 2013 | Packagist typo3/cms |
Typo3 Backend History Module Vulnerable to XSS CVE-2012-6145, GHSA-w563-rq37-cvq5 | Low | 1.2% | 01 Jul, 2013 | Packagist typo3/cms |
Moodle's login_as feature leaks information from external repositories CVE-2013-1835, GHSA-cc94-hwj3-rf65 | Low | 1.7% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module CVE-2013-1833, GHSA-89f3-74m6-g27g | Low | 1.5% | 25 Mar, 2013 | Packagist moodle/moodle |