Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Incorrect access control in typo3_forum CVE-2020-15513, GHSA-57gr-jvqr-3hwm | Medium | 0.8% | 07 Jul, 2020 | Packagist mittwald/typo3_forum |
Cross-site Scripting in October CVE-2020-4061, GHSA-3pc2-fm7p-q2vg | Medium | 0.8% | 02 Jul, 2020 | Packagist october/backend |
Cross-Site Request Forgery in CakePHP CVE-2020-15400, GHSA-j33j-fg2g-mcv2 | Medium | 0.4% | 30 Jun, 2020 | Packagist cakephp/cakephp |
Magento Stored cross-site scripting BIT-magento-2020-9584, CVE-2020-9584, GHSA-45h4-6gcj-6hwv | Medium | 1.2% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento stored cross-site scripting vulnerability BIT-magento-2020-9581, CVE-2020-9581, GHSA-2w2x-7qgj-4x78 | Medium | 1.5% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento stored cross-site scripting vulnerability BIT-magento-2020-9577, CVE-2020-9577, GHSA-689w-2f93-2x67 | Medium | 1.5% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
img_auth.php may leak private extension images into the public cache BIT-mediawiki-2020-15005, CVE-2020-15005, GHSA-xpv7-93cm-4mxv | Medium | 1.3% | 24 Jun, 2020 | Packagist mediawiki/core |
NukeViet Cross-Site Request Forgery (CSRF) CVE-2020-13157, GHSA-g3xf-85wc-45gq | Medium | 0.6% | 23 Jun, 2020 | Packagist nukeviet/nukeviet |
NukeViet Cross-Site Request Forgery (CSRF) CVE-2020-13156, GHSA-c2px-jcgw-9x57 | Medium | 0.6% | 23 Jun, 2020 | Packagist nukeviet/nukeviet |
Unrestricted Uploads in Concrete5 CVE-2020-14961, GHSA-g4gm-pxh3-29fq | Medium | 0.9% | 22 Jun, 2020 | Packagist concrete5/concrete5 |
Dolibarr reflected cross-site scripting (XSS) vulnerability BIT-dolibarr-2020-14475, CVE-2020-14475, GHSA-m396-2x3h-v3v4 | Medium | 0.8% | 19 Jun, 2020 | Packagist dolibarr/dolibarr |
KumbiaPHP Cross-site Scripting CVE-2020-14146, GHSA-x6gq-vr59-4q5q | Medium | 0.6% | 15 Jun, 2020 | Packagist kumbiaphp/kumbiapp |
OpenCart Cross-site Scripting CVE-2020-13980, GHSA-p9qw-fh38-x37f | Medium | 0.7% | 09 Jun, 2020 | Packagist opencart/opencart |
Use of insecure jQuery version in OctoberCMS GHSA-v73w-r9xg-7cr9 | Medium | Not scored | 05 Jun, 2020 | Packagist october/october Packagist october/system |
Comments plugin stored Cross-site Scripting (XSS) via an asset volume name CVE-2020-13870, GHSA-69ww-wv3j-mhg4 | Medium | 0.5% | 05 Jun, 2020 | Packagist verbb/comments |
Comments plugin stored Cross-site Scripting via a guest name CVE-2020-13869, GHSA-jhhf-c849-3rh2 | Medium | 0.5% | 05 Jun, 2020 | Packagist verbb/comments |
Comments plugin Cross-Site Request Forgery (CSRF) CVE-2020-13868, GHSA-4r8c-pj7x-m5jx | Medium | 0.4% | 05 Jun, 2020 | Packagist verbb/comments |
Potential CSV Injection vector in OctoberCMS CVE-2020-5299, GHSA-4rhm-m2fp-hx7q | Medium | 1.0% | 03 Jun, 2020 | Packagist october/backend |
Reflected XSS when importing CSV in OctoberCMS CVE-2020-5298, GHSA-gg6x-xx78-448c | Medium | 0.9% | 03 Jun, 2020 | Packagist october/backend |
Arbitrary File Deletion vulnerability in OctoberCMS CVE-2020-5296, GHSA-jv6v-fvvx-4932 | Medium | 1.4% | 03 Jun, 2020 | Packagist october/cms |
Local File read vulnerability in OctoberCMS CVE-2020-5295, GHSA-r23f-c2j5-rx2f | Medium | 7.4% | 03 Jun, 2020 | Packagist october/cms |
MediaWiki Open Redirect vulnerability BIT-mediawiki-2020-10959, CVE-2020-10959, GHSA-mqhw-wq8p-vf5r | Medium | 1.4% | 02 Jun, 2020 | Packagist mediawiki/core |
Fork CMS Cross-site Scripting Vulnerability CVE-2020-13633, GHSA-74gc-hf33-5353 | Medium | 0.7% | 27 May, 2020 | Packagist forkcms/forkcms |
Centreon Sensitive Data Exposure vulnerability CVE-2020-10945, GHSA-h5qv-p378-3hhr | Medium | 0.6% | 27 May, 2020 | Packagist centreon/centreon |
bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section CVE-2020-13487, GHSA-p9xp-xghp-gqvp | Medium | 1.6% | 26 May, 2020 | Packagist bbpress/bbpress |
Knock Knock plugin Open redirection vulnerability CVE-2020-13486, GHSA-m69r-4h68-xq7j | Medium | 0.7% | 25 May, 2020 | Packagist verbb/knock-knock |
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action CVE-2020-13459, GHSA-p7rm-gh9g-5fr8 | Medium | 0.5% | 25 May, 2020 | Packagist verbb/image-resizer |
Dolibarr Stored Cross-site Scripting BIT-dolibarr-2020-13240, CVE-2020-13240, GHSA-f848-r5g6-6gpf | Medium | 0.7% | 20 May, 2020 | Packagist dolibarr/dolibarr |
Dolibarr Stored Cross-site Scripting via file upload BIT-dolibarr-2020-13239, CVE-2020-13239, GHSA-fvf9-2hjp-w936 | Medium | 0.7% | 20 May, 2020 | Packagist dolibarr/dolibarr |
XSS in Dolibarr CVE-2020-13094, GHSA-cxvr-r92m-q9hw | Medium | 1.1% | 18 May, 2020 | Packagist dolibarr/dolibarr |
Subrion CMS XSS CVE-2019-20389, GHSA-xvgx-668j-f67p | Medium | 0.9% | 15 May, 2020 | Packagist intelliants/subrion |
Cross-Site Scripting in TYPO3 CMS Link Handling BIT-typo3-2020-11065, CVE-2020-11065, GHSA-4j77-gg36-9864 | Medium | 0.5% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in TYPO3 CMS Form Engine BIT-typo3-2020-11064, CVE-2020-11064, GHSA-43gj-mj2w-wh46 | Medium | 0.5% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in SVG Sanitizer CVE-2020-11070, GHSA-59cf-m7v5-wh5w | Medium | 0.5% | 13 May, 2020 | Packagist t3g/svg-sanitizer |
Missing Authorization in TYPO3 extension CVE-2020-12700, GHSA-qwmj-72mp-q3m2 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Open redirect in direct_mail CVE-2020-12699, GHSA-952m-m83c-3xm6 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Missing Authorization in TYPO3 extension CVE-2020-12698, GHSA-9pm8-xcj6-2m33 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Denial of service in direct_mail CVE-2020-12697, GHSA-5gm6-r79q-hfgw | Medium | 1.3% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Cross-Site Scripting in BookStack CVE-2020-11055, GHSA-5vf7-q87h-pg6w | Medium | 0.8% | 07 May, 2020 | Packagist ssddanbrown/bookstack |
Potential XSS vulnerability in jQuery BIT-drupal-2020-11022, CVE-2020-11022, GHSA-gxr4-xjj5-5px2 | Medium | 99.2% | 29 Apr, 2020 | Maven org.webjars.npm:jquery NuGet jquery Packagist athlon1600/youtube-downloader Packagist components/jquery +3 more |
Subrion CMS PHP Object Injection CVE-2020-12469, GHSA-fmqq-hw9m-448q | Medium | 0.9% | 29 Apr, 2020 | Packagist intelliants/subrion |
Session Fixation in Subrion CMS CVE-2020-12467, GHSA-qpxw-6473-ppww | Medium | 0.9% | 29 Apr, 2020 | Packagist intelliants/subrion |
Potential XSS vulnerability in jQuery BIT-drupal-2020-11023, CVE-2020-11023, GHSA-jpcq-cgw6-v4j6 | MediumExploited | 84.9% | 29 Apr, 2020 | Maven org.webjars.npm:jquery NuGet jQuery Packagist components/jquery RubyGems jquery-rails +1 more |
Croos-site scripting in Croogo CVE-2019-20789, GHSA-jfvf-rfmq-qwf8 | Medium | 0.7% | 26 Apr, 2020 | Packagist croogo/croogo |
Stored XSS with custom URLs in PrestaShop module ps_linklist CVE-2020-5273, GHSA-cx2r-mf6x-55rx | Medium | 0.7% | 16 Apr, 2020 | Packagist prestashop/ps_linklist |
Dolibarr stored Cross-site Scripting vulnerability BIT-dolibarr-2020-11823, CVE-2020-11823, GHSA-q938-82fw-wfcf | Medium | 0.7% | 16 Apr, 2020 | Packagist dolibarr/dolibarr |
Open Redirect in Grav CVE-2020-11529, GHSA-wrxc-mr2w-cjpv | Medium | 10.9% | 04 Apr, 2020 | Packagist getgrav/grav |
MediaWiki makeCollapsible allows applying event handler to any CSS selector BIT-mediawiki-2020-10960, CVE-2020-10960, GHSA-pfm2-mqwj-ggm5 | Medium | 1.2% | 03 Apr, 2020 | Packagist mediawiki/core |
Exceptions displayed in non-debug configurations in Symfony BIT-symfony-2020-5274, CVE-2020-5274, GHSA-m884-279h-32v2 | Medium | 1.2% | 30 Mar, 2020 | Packagist symfony/error-handler Packagist symfony/symfony |
Prevent cache poisoning via a Response Content-Type header in Symfony BIT-symfony-2020-5255, CVE-2020-5255, GHSA-mcx4-f5f5-4859 | Medium | 1.3% | 30 Mar, 2020 | Packagist symfony/http-foundation Packagist symfony/symfony |