Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyAdmin SQL injection vulnerability BIT-phpmyadmin-2020-10803, CVE-2020-10803, GHSA-fcww-8wvc-38q9 | Medium | 1.4% | 22 Mar, 2020 | Packagist phpmyadmin/phpmyadmin |
MantisBT XSS when uploading an attachment CVE-2019-15539, GHSA-p495-jrpq-p66g | Medium | 1.2% | 19 Mar, 2020 | Packagist mantisbt/mantisbt |
Moodle reflected Cross-site Scripting (XSS) CVE-2019-14884, GHSA-3xh5-5v5v-mfgm | Medium | 0.9% | 18 Mar, 2020 | Packagist moodle/moodle |
Moodle Email media URL tokens were not checking for user status CVE-2019-14883, GHSA-774q-wfcp-vc2q | Medium | 1.1% | 18 Mar, 2020 | Packagist moodle/moodle |
Moodle open redirect vulnerability CVE-2019-14882, GHSA-m98q-q59p-r9fv | Medium | 1.1% | 18 Mar, 2020 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2019-14881, GHSA-9jf6-wq34-fg9w | Medium | 1.1% | 18 Mar, 2020 | Packagist moodle/moodle |
Cross-site Scripting in OpenCart CVE-2020-10596, GHSA-36fm-v9wv-56jf | Medium | 2.7% | 17 Mar, 2020 | Packagist opencart/opencart |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2019-19211, GHSA-gfhf-2xr5-2fvw | Medium | 1.7% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2019-19210, GHSA-87r3-4gc8-f897 | Medium | 0.9% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Cross-site Scripting in Contao CVE-2018-10125, GHSA-pj4j-287j-f742 | Medium | 0.8% | 16 Mar, 2020 | Packagist contao/contao Packagist contao/core Packagist contao/core-bundle |
Cross-site Scripting in yii2cmf CVE-2018-10704, GHSA-mvrg-5c4w-7qv4 | Medium | 0.9% | 12 Mar, 2020 | Packagist yidashi/yii2cmf |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-16107, GHSA-wg24-9xm9-593v | Medium | 0.4% | 11 Mar, 2020 | Packagist phpbb/phpbb |
Froxlor Exposure of Sensitive Information to an Unauthorized Actor CVE-2020-10237, GHSA-j9wr-mj69-cqmv | Medium | 0.2% | 09 Mar, 2020 | Packagist froxlor/froxlor |
Froxlor Information Disclosure CVE-2020-10236, GHSA-hvgf-2rf7-wrx9 | Medium | 0.3% | 09 Mar, 2020 | Packagist froxlor/froxlor |
SilverStripe Denial of Service on flush and development URL tools CVE-2019-12246, GHSA-5fr8-xhqq-4p3q | Medium | 0.7% | 19 Feb, 2020 | Packagist silverstripe/framework |
Reflected XSS in SilverStripe CVE-2019-19325, GHSA-qvrv-2x7x-78x2 | Medium | 0.7% | 17 Feb, 2020 | Packagist silverstripe/framework |
Cross-Site Request Forgery in Moodle BIT-moodle-2020-1692, CVE-2020-1692, GHSA-9328-7pcw-vw69 | Medium | 0.6% | 17 Feb, 2020 | Packagist moodle/moodle |
Dolibarr ERP and CRM contain XSS Vulnerability BIT-dolibarr-2020-9016, CVE-2020-9016, GHSA-jh69-6vv2-wfp5 | Medium | 0.9% | 16 Feb, 2020 | Packagist dolibarr/dolibarr |
Improper Certificate Validation in Heartland & Global Payments PHP SDK CVE-2019-20455, GHSA-pm77-c4q7-3fwj | Medium | 1.0% | 14 Feb, 2020 | Packagist globalpayments/php-sdk |
PrestaShop Stored Cross-Site Scripting Vulnerability CVE-2013-4791, GHSA-crpg-2mm2-jjqf | Medium | 0.6% | 14 Feb, 2020 | Packagist prestashop/prestashop |
Moodle Persistent Cross-site Scripting (XSS) CVE-2019-18210, GHSA-q6vw-27c6-jv9c | Medium | 0.8% | 11 Feb, 2020 | Packagist moodle/moodle |
bbPress Cross-site Scripting (XSS) vulnerability CVE-2011-1150, GHSA-483f-wxw9-3rpq | Medium | 0.9% | 05 Feb, 2020 | Packagist bbpress/bbpress |
DCE extension for Typo3 Discloses Environment Information CVE-2014-8328, GHSA-v4vm-gj2x-6qhm | Medium | 1.6% | 03 Feb, 2020 | Packagist t3/dce |
Magento stored cross-site scripting vulnerability BIT-magento-2020-3758, CVE-2020-3758, GHSA-p5q3-xg47-653m | Medium | 1.8% | 29 Jan, 2020 | Packagist magento/community-edition Packagist magneto/core |
Magento Path Traversal BIT-magento-2020-3717, CVE-2020-3717, GHSA-874g-pxqp-frqp | Medium | 3.2% | 29 Jan, 2020 | Packagist magento/community-edition |
Magento stored cross-site scripting vulnerability BIT-magento-2020-3715, CVE-2020-3715, GHSA-mgg3-v948-2vgr | Medium | 1.8% | 29 Jan, 2020 | Packagist magento/community-edition Packagist magento/core |
Typo3 Cross-Site Scripting in Flash component (ELTS) BIT-typo3-2020-8091, CVE-2020-8091, GHSA-qvhv-pwww-53jj | Medium | 5.2% | 27 Jan, 2020 | Packagist typo3/cms |
Ability to expose data in Sylius by using an unintended serialisation group CVE-2020-5218, CVE-2020-5220, GHSA-8vp7-j5cj-vvm2, GHSA-prg5-hg25-8grq | Medium | 0.7% | 27 Jan, 2020 | Packagist sylius/resource-bundle Packagist sylius/sylius |
Zenario CMS vulnerable to CRLF injection CVE-2015-3154, GHSA-5957-5crx-79jx | Medium | 1.0% | 27 Jan, 2020 | Packagist zendframework/zend-http Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
XSS in Dolibarr ERP & CRM BIT-dolibarr-2020-7996, CVE-2020-7996, GHSA-v384-jqmq-fc74 | Medium | 1.2% | 26 Jan, 2020 | Packagist dolibarr/dolibarr |
Dolibarr cross-site scripting (XSS) vulnerability BIT-dolibarr-2020-7994, CVE-2020-7994, GHSA-4hf3-229w-6h8r | Medium | 1.5% | 26 Jan, 2020 | Packagist dolibarr/dolibarr |
Cross-site scripting in SimpleSAMLphp CVE-2020-5226, GHSA-mj9p-v2r8-wf8w | Medium | 0.5% | 24 Jan, 2020 | Packagist simplesamlphp/simplesamlphp |
Log injection in SimpleSAMLphp CVE-2020-5225, GHSA-6gc6-m364-85ww | Medium | 0.7% | 24 Jan, 2020 | Packagist simplesamlphp/simplesamlphp |
phpBB allows CSRF BIT-phpbb-2020-5502, CVE-2020-5502, GHSA-69q7-hww4-8pjq | Medium | 0.4% | 15 Jan, 2020 | Packagist phpbb/phpbb |
phpBB Cross-Site Request Forgery (CSRF) BIT-phpbb-2020-5501, CVE-2020-5501, GHSA-cpqc-g4r8-6hxg | Medium | 0.4% | 15 Jan, 2020 | Packagist phpbb/phpbb |
Drupal Cross-Site Scripting vulnerability CVE-2011-2714, GHSA-qp8q-gwf5-hqh2 | Medium | 1.2% | 14 Jan, 2020 | Packagist drupal/core |
Persistent XSS vulnerability in filename of attached file in PrivateBin CVE-2020-5223, GHSA-8j72-p2wm-6738 | Medium | 0.7% | 14 Jan, 2020 | Packagist privatebin/privatebin |
DOMPDF denial of service vulnerability CVE-2014-5012, GHSA-q83c-64c9-c42m | Medium | 1.2% | 10 Jan, 2020 | Packagist dompdf/dompdf |
DOMPDF Information Disclosure CVE-2014-5011, GHSA-jwf8-mjj8-r8hq | Medium | 1.5% | 10 Jan, 2020 | Packagist dompdf/dompdf |
Moodle does not revoke role capabilities correctly CVE-2019-14879, GHSA-g9m2-c2x5-fr2v | Medium | 0.7% | 07 Jan, 2020 | Packagist moodle/moodle |
Symfony Host Header Injection vulnerability in the HttpFoundation component CVE-2013-4752, GHSA-22pv-7v9j-hqxp | Medium | 2.3% | 02 Jan, 2020 | Packagist symfony/http-foundation Packagist symfony/symfony |
Bolt Cross-site Scripting via the slug, teaser or title parameters CVE-2019-9553, GHSA-2g23-qmmp-fvmr | Medium | 1.8% | 31 Dec, 2019 | Packagist bolt/bolt |
XSS injection in the Grid component of Sylius CVE-2019-12186, GHSA-rc5r-697f-28x6 | Medium | 0.6% | 31 Dec, 2019 | Packagist sylius/grid Packagist sylius/grid-bundle Packagist sylius/sylius |
Insert tag injection in the Contao login module CVE-2019-19714, GHSA-jc43-qrrp-98f5 | Medium | 0.8% | 17 Dec, 2019 | Packagist contao/contao Packagist contao/core-bundle |
Information disclosure in the Contao backend CVE-2019-19712, GHSA-4mvc-qc5w-v5qr | Medium | 0.9% | 17 Dec, 2019 | Packagist contao/contao Packagist contao/core-bundle |
Sanitizer bypass in svg-sanitizer CVE-2019-10772, GHSA-8rc5-hx3v-2jg7, SNYK-PHP-ENSHRINEDSVGSANITIZE-536969 | Medium | 0.7% | 11 Dec, 2019 | Packagist enshrined/svg-sanitize |
Possible to circumvent title-blacklist CVE-2019-19709, GHSA-pjv5-vv93-p648 | Medium | 1.6% | 11 Dec, 2019 | Packagist mediawiki/core |
Internal exception message exposure for login action in Sylius CVE-2019-16768, GHSA-3r8j-pmch-5j2h | Medium | 0.7% | 05 Dec, 2019 | Packagist sylius/sylius |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2019-19206, GHSA-f6h3-66xr-hqr2 | Medium | 0.9% | 26 Nov, 2019 | Packagist dolibarr/dolibarr |
User enumeration leak using switch user functionality in Symfony CVE-2019-18886, GHSA-4vpc-5jx4-cfqg | Medium | 1.6% | 21 Nov, 2019 | Packagist symfony/security-http Packagist symfony/symfony |