Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Ability to switch customer email address on account detail page and stay verified CVE-2020-15245, GHSA-6gw4-x63h-5499 | Medium | 0.6% | 19 Oct, 2020 | Packagist sylius/sylius |
Magento 2 Community Edition XSS Vulnerability BIT-magento-2020-24408, CVE-2020-24408, GHSA-jxjc-6xmh-h7mg | Medium | 1.7% | 16 Oct, 2020 | Packagist magento/community-edition |
phpMyAdmin Cross-site Scripting (XSS) BIT-phpmyadmin-2020-26934, CVE-2020-26934, GHSA-6349-53vr-7hcr | Medium | 1.9% | 10 Oct, 2020 | Packagist phpmyadmin/phpmyadmin |
XSS vulnerability when listing users on add & modify server pages. GHSA-5822-pw57-vv37 | Medium | Not scored | 08 Oct, 2020 | Packagist pterodactyl/panel |
Cross-Site Scripting in ternary conditional operator BIT-typo3-2020-15241, CVE-2020-15241, GHSA-7733-hjv6-4h47 | Medium | 1.0% | 08 Oct, 2020 | Packagist typo3/cms Packagist typo3/cms-core Packagist typo3fluid/fluid |
PyroCMS Vulnerable to CSRF CVE-2020-25262, GHSA-56xx-pv88-2662 | Medium | 0.5% | 08 Oct, 2020 | Packagist pyrocms/pyrocms |
Cross-site scripting (XSS) CVE-2020-17551, GHSA-j29g-g982-pwpv | Medium | 1.1% | 07 Oct, 2020 | Packagist impresscms/impresscms |
Froala WYSIWYG Editor XSS Vulnerability CVE-2020-26523, GHSA-qrhq-x7xh-2784 | Medium | 0.7% | 02 Oct, 2020 | Packagist froala/wysiwyg-editor |
MantisBT HTML Injection vulnerability CVE-2020-25830, GHSA-2pm7-q8pc-xhvq | Medium | 1.7% | 30 Sep, 2020 | Packagist mantisbt/mantisbt |
MantisBT unauthorized users able to access private files CVE-2020-25781, GHSA-xjmx-cprh-646r | Medium | 0.9% | 30 Sep, 2020 | Packagist mantisbt/mantisbt |
MantisBT XXS where a Custom Field with a crafted Regular Expression property is used CVE-2020-25288, GHSA-qgrr-f26j-87vf | Medium | 1.5% | 30 Sep, 2020 | Packagist mantisbt/mantisbt |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25828, CVE-2020-25828, GHSA-h8qx-mj6v-2934 | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25815, CVE-2020-25815, GHSA-2f58-vf6g-6p8x | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25814, CVE-2020-25814, GHSA-4vr7-m8p8-434h | Medium | 1.4% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Special:UserRights exposes the existence of hidden users BIT-mediawiki-2020-25813, CVE-2020-25813, GHSA-c4rj-wrmq-52rj | Medium | 1.3% | 27 Sep, 2020 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) vulnerability BIT-mediawiki-2020-25812, CVE-2020-25812, GHSA-rj9p-8jxj-2ch4 | Medium | 1.1% | 27 Sep, 2020 | Packagist mediawiki/core |
Contao Insert tag injection in forms CVE-2020-25768, GHSA-f7wm-x4gw-6m23 | Medium | 0.8% | 24 Sep, 2020 | Packagist contao/contao Packagist contao/core-bundle |
Drupal Core Access bypass vulnerability BIT-drupal-2020-13667, CVE-2020-13667, DRUPAL-CORE-2020-008, GHSA-x2q9-r8gm-f657 | Medium | 0.9% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor BIT-drupal-2020-13669, CVE-2020-13669, DRUPAL-CORE-2020-010, GHSA-c533-c843-67h8 | Medium | 0.7% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
Drupal Core Cross-site scripting vulnerability BIT-drupal-2020-13688, CVE-2020-13688, DRUPAL-CORE-2020-009, GHSA-qf2g-mrrx-rr5p | Medium | 0.7% | 16 Sep, 2020 | Packagist drupal/core |
Drupal Core Cross-site scripting vulnerability BIT-drupal-2020-13666, CVE-2020-13666, DRUPAL-CORE-2020-007, GHSA-8jj2-x2gc-ggm7 | Medium | 2.9% | 16 Sep, 2020 | Packagist drupal/core Packagist drupal/drupal |
silverstripe-advancedreports vulnerable to XSS CVE-2020-25102, GHSA-8f2x-hv9r-mh9r | Medium | 0.9% | 03 Sep, 2020 | Packagist silverstripe-australia/advancedreports |
Information Disclosure in TYPO3 extension sf_event_mgt CVE-2020-25026, GHSA-g8rg-7rpr-cwr2 | Medium | 0.8% | 02 Sep, 2020 | Packagist derhansen/sf_event_mgt |
Incorrect Authorization in TYPO3 extension CVE-2020-25025, GHSA-cv9j-78f7-w6v9 | Medium | 0.8% | 02 Sep, 2020 | Packagist localizationteam/l10nmgr |
Dolibarr stored Cross-Site Scripting (XSS) vulnerability BIT-dolibarr-2020-13828, CVE-2020-13828, GHSA-8r2w-phx4-mgpv | Medium | 0.8% | 31 Aug, 2020 | Packagist dolibarr/dolibarr |
Codiad Cross-site Scripting Vulnerability CVE-2020-14042, GHSA-g2x4-256v-5pvx | Medium | 1.2% | 25 Aug, 2020 | Packagist codiad/codiad |
Dolibarr CRM allows Privilege Escalation CVE-2020-14201, GHSA-25h3-mw3p-w8r7 | Medium | 1.6% | 21 Aug, 2020 | Packagist dolibarr/dolibarr |
phpBB Server-Side Request Forgery Vulnerability BIT-phpbb-2020-8226, CVE-2020-8226, GHSA-jhm9-h84h-rw83 | Medium | 1.0% | 17 Aug, 2020 | Packagist phpbb/phpbb |
Reflected cross-site scripting in francoisjacquet/rosariosis CVE-2020-13278, GHSA-4cx9-7xqc-2jxm | Medium | 1.4% | 12 Aug, 2020 | Packagist francoisjacquet/rosariosis |
MantisBT XSS issue on the view_all_bug_page.php CVE-2020-16266, GHSA-4rrc-5vp6-m3f6 | Medium | 1.2% | 12 Aug, 2020 | Packagist mantisbt/mantisbt |
Reset Password / Login vulnerability in Sulu CVE-2020-15132, GHSA-wfm4-pq59-wg6r | Medium | 1.1% | 05 Aug, 2020 | Packagist sulu/sulu |
Reliance on Cookies without validation in OctoberCMS CVE-2020-15128, GHSA-55mm-5399-7r63 | Medium | 0.7% | 31 Jul, 2020 | Packagist october/rain |
Cross-site Scripting vulnerability in Kitodo.Presentation CVE-2020-16095, GHSA-fpqv-x9hm-35j9 | Medium | 0.9% | 29 Jul, 2020 | Packagist kitodo/presentation |
Magento security mitigation bypass vulnerability BIT-magento-2020-9692, CVE-2020-9692, GHSA-vqg7-8v6x-54rq | Medium | 3.8% | 29 Jul, 2020 | Packagist magento/community-edition |
Magento observable timing discrepancy vulnerability BIT-magento-2020-9690, CVE-2020-9690, GHSA-xgp9-j48h-jjf9 | Medium | 1.8% | 29 Jul, 2020 | Packagist magento/community-edition |
Magento path traversal vulnerability BIT-magento-2020-9689, CVE-2020-9689, GHSA-fr6f-xmfx-rrpq | Medium | 4.1% | 29 Jul, 2020 | Packagist magento/community-edition Packagist magento/project-community-edition |
Shopware vulnerable to Cross-site Scripting CVE-2020-13971, GHSA-fxf3-wx3c-76pf | Medium | 0.6% | 28 Jul, 2020 | Packagist shopware/platform |
MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment CVE-2020-15885, GHSA-vc4f-2g7f-pmqr | Medium | 0.9% | 23 Jul, 2020 | Packagist munkireport/comment |
MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability CVE-2020-15883, GHSA-79xr-v794-wq35 | Medium | 1.2% | 23 Jul, 2020 | Packagist munkireport/managedinstalls |
MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability CVE-2020-15881, GHSA-x9q4-5f3c-cw62 | Medium | 1.2% | 23 Jul, 2020 | Packagist munkireport/munki_facts |
Magento stored cross-site scripting vulnerability CVE-2020-9665, GHSA-xc4p-j89c-p7x5 | Medium | 1.4% | 22 Jul, 2020 | Packagist magento/core |
LibreNMS SQL Injection vulnerability CVE-2020-15873, GHSA-g5r6-vrmx-9gwj | Medium | 2.2% | 21 Jul, 2020 | Packagist librenms/librenms |
Silverstripe CMS XSS Vulnerability BIT-silverstripe-2020-9311, CVE-2020-9311, GHSA-2pw2-qpcp-m47x | Medium | 0.6% | 15 Jul, 2020 | Packagist silverstripe/cms Packagist silverstripe/framework |
Silverstripe has Incorrect Default Permissions BIT-silverstripe-2020-6165, CVE-2020-6165, GHSA-589q-75r3-mfq4 | Medium | 1.1% | 15 Jul, 2020 | Packagist silverstripe/graphql Packagist silverstripe/recipe-cms |
SilverStripe Web Cache Poisoning through HTTPRequestBuilder CVE-2019-19326, GHSA-q9ff-3q93-fm8m | Medium | 0.8% | 15 Jul, 2020 | Packagist silverstripe/framework |
Stored XSS in October CVE-2020-11083, GHSA-w4pj-7p68-3vgv | Medium | 1.1% | 14 Jul, 2020 | Packagist october/backend |
Cross-site Scripting in RosarioSIS CVE-2020-15721, GHSA-6vc5-v7hw-h5h2 | Medium | 1.5% | 14 Jul, 2020 | Packagist francoisjacquet/rosariosis |
Potentially sensitive data exposure in Symfony Web Socket Bundle GHSA-wwgf-3xp7-cxj4 | Medium | Not scored | 07 Jul, 2020 | Packagist gos/web-socket-bundle |
ke_search for Typo3 XSS Vulnerability CVE-2020-15517, GHSA-gg48-mpp8-cgqc | Medium | 0.6% | 07 Jul, 2020 | Packagist tpwd/ke_search |
jh_captcha for Typo3 XSS Vulnerability CVE-2020-15514, GHSA-23fm-v895-3qxq | Medium | 0.6% | 07 Jul, 2020 | Packagist haffner/jh_captcha |