Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Data leakage via SQL Injection in Pimcore CVE-2019-10763, GHSA-fpff-384j-vxq7, SNYK-PHP-PIMCOREPIMCORE-480391 | Medium | 0.9% | 18 Nov, 2019 | Packagist pimcore/pimcore |
Pimcore Cross-site Scripting (XSS) vulnerability CVE-2019-18982, GHSA-m4x3-xmjv-r778 | Medium | 1.1% | 15 Nov, 2019 | Packagist pimcore/pimcore |
Moodle included private user files in course backups CVE-2012-1159, GHSA-p9hr-f4xj-8w8r | Medium | 1.4% | 14 Nov, 2019 | Packagist moodle/moodle |
Moodle default permissions too permissive CVE-2012-1157, GHSA-2x36-7xfm-pgm7 | Medium | 1.2% | 14 Nov, 2019 | Packagist moodle/moodle |
Elgg Reflected XSS Vulnerability CVE-2011-2935, GHSA-mcfm-j5g6-w26f | Medium | 1.1% | 12 Nov, 2019 | Packagist elgg/elgg |
Typo3 Improper Access Control CVE-2011-4904, GHSA-qf79-34j4-54m6 | Medium | 1.1% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 XSS in RemoveXSS function CVE-2011-4903, GHSA-q22w-r5qq-v3wf | Medium | 0.8% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 Arbitrary File Delete CVE-2011-4902, GHSA-9vxq-mxw5-mcgp | Medium | 1.0% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 Arbitrary Information Disclosure CVE-2011-4901, GHSA-8grp-3j5v-543g | Medium | 1.1% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 Information Disclosure CVE-2011-4900, GHSA-rwx5-7x5r-jgrm | Medium | 1.0% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 XSS Vulnerabilities CVE-2011-4632, GHSA-h86g-796f-hhfq | Medium | 0.7% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 XSS Vulnerability CVE-2011-4630, GHSA-29wr-24h5-95r5 | Medium | 0.7% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 Information Disclosure CVE-2011-4627, GHSA-frf4-5p2c-c3ff | Medium | 1.0% | 06 Nov, 2019 | Packagist typo3/cms |
Magento Cross-Site Scripting via admin panel CVE-2019-8157, GHSA-vrw4-34p5-pjg5 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via Attribute Set Name CVE-2019-8145, GHSA-xv69-f7x5-r4qw | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8132, GHSA-g378-6fg4-gx3v | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Composer JavaScript injection possible via html comments CVE-2019-8233, GHSA-fm68-89m8-4gjj | Medium | 0.7% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8232, GHSA-6vc8-3xf2-qrxx | Medium | 0.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability CVE-2019-8228, GHSA-988g-wfwf-5666 | Medium | 0.5% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento XSS Vulnerability CVE-2019-8227, GHSA-j49x-jjmj-9fqj | Medium | 0.5% | 06 Nov, 2019 | Packagist magento/core |
Magento Cross-site Scripting (XSS) CVE-2019-8153, GHSA-273r-v888-vgc6 | Medium | 1.5% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8152, GHSA-jjmg-xmq2-g6ff | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8148, GHSA-86pc-6mm8-542r | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8147, GHSA-v8fg-p27h-mxjp | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8146, GHSA-6m27-3r8q-c7f7 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Injection vulnerability via email templates CVE-2019-8143, GHSA-94q8-gx29-6mqv | Medium | 0.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8142, GHSA-298q-wv2h-v5vw | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Unrestricted file upload vulnerability CVE-2019-8140, GHSA-7pr3-34rg-g53m | Medium | 0.8% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8139, GHSA-gjjm-4x3g-3h33 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8138, GHSA-85xw-3hp5-6fmc | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Bypass of sitemp access restrictions CVE-2019-8133, GHSA-62fx-3v4f-mwxm | Medium | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8131, GHSA-vx7m-v8v2-fhwm | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via Signifyd Guarantee Option Translation Override CVE-2019-8129, GHSA-wg25-j79r-v5wp | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via store name CVE-2019-8128, GHSA-mhwc-4w67-xq2c | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Information disclosure through processing of external XML entities CVE-2019-8126, GHSA-427g-2r83-3ccm | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Insufficient Logging CVE-2019-8124, GHSA-x5q5-6wvf-2fpq | Medium | 1.0% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Insufficient Logging CVE-2019-8123, GHSA-fp5m-4mqh-849p | Medium | 0.8% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8120, GHSA-985w-mqqp-7287 | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Weak Cryptography CVE-2019-8118, GHSA-hmch-9947-82rj | Medium | 0.7% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8117, GHSA-v99w-jxr4-w6mc | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8115, GHSA-29mr-gr4c-vf9c | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Weak PRNG CVE-2019-8113, GHSA-c4r2-3f9r-rwp8 | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento Broken authentication and session managememt CVE-2019-8108, GHSA-92ph-xm9v-cg3j | Medium | 1.2% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Arbitrary File Deletion CVE-2019-8107, GHSA-2cg3-w597-rjfv | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8092, GHSA-56hf-w8gm-448q | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Arbitrary File Deletion CVE-2019-8090, GHSA-653q-vqm6-gmjm | Medium | 0.8% | 05 Nov, 2019 | Packagist magento/community-edition |
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API CVE-2010-3673, GHSA-5f2f-hr23-j59j | Medium | 1.2% | 05 Nov, 2019 | Packagist typo3/cms-core |
TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper CVE-2010-3672, GHSA-p78x-93mq-qwqh | Medium | 1.0% | 05 Nov, 2019 | Packagist typo3/cms-fluid |
TYPO3 is vulnerable to Session Fixation CVE-2010-3671, GHSA-gqmh-5xmq-3fhg | Medium | 1.6% | 05 Nov, 2019 | Packagist typo3/cms-install |
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function CVE-2010-3670, GHSA-3276-p9f2-8q89 | Medium | 0.5% | 05 Nov, 2019 | Packagist typo3/cms-frontend |