Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TYPO3 is vulnerable to Spam Abuse in the native form content element CVE-2010-3667, GHSA-48ww-8h7g-4hwq | Medium | 1.1% | 04 Nov, 2019 | Packagist typo3/cms-frontend |
TYPO3 is vulnerable to Insecure randomness in uniqid function CVE-2010-3666, GHSA-c7xr-736p-29j3 | Medium | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-install |
TYPO3 is vulnerable to Information Disclosure on the backend CVE-2010-3664, GHSA-8xp9-99h5-4vcg | Medium | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-backend |
TYPO3 Open Redirection vulnerability on the backend CVE-2010-3661, GHSA-j628-384g-rmgc | Medium | 0.9% | 01 Nov, 2019 | Packagist typo3/cms-backend |
TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend CVE-2010-3660, GHSA-cg45-qgcf-hf9x | Medium | 0.8% | 01 Nov, 2019 | Packagist typo3/cms-backend |
Pimcore XSS Vulnerability CVE-2019-18656, GHSA-65p8-5423-fw3x | Medium | 0.7% | 31 Oct, 2019 | Packagist pimcore/pimcore |
direct_mail for Typo3 sensitive data exposure CVE-2019-16698, GHSA-j2w4-45qm-r674 | Medium | 0.7% | 16 Oct, 2019 | Packagist directmailteam/direct-mail |
Dolibarr Cross-site Scripting vulnerability CVE-2019-17578, GHSA-9p7q-v9gp-frq4 | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting via outgoing email setup feature CVE-2019-17577, GHSA-r4gf-ggp5-25g5 | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting via outgoing email setup feature CVE-2019-17576, GHSA-rr5g-rc28-wxwj | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM HTML Injection CVE-2019-17223, GHSA-3264-65pg-5xm4 | Medium | 1.1% | 15 Oct, 2019 | Packagist dolibarr/dolibarr |
Craft CMS XSS Vulnerability CVE-2019-17496, GHSA-f3xr-q258-h7m9 | Medium | 0.8% | 11 Oct, 2019 | Packagist craftcms/cms |
z-song laravel-admin XSS via the Slug or Name on the Roles screen CVE-2019-17433, GHSA-fcmh-7492-g4q9 | Medium | 0.6% | 10 Oct, 2019 | Packagist encore/laravel-admin |
Cross-site Scripting in Bootstrap-3-Typeahead CVE-2019-10215, GHSA-m2hm-hrr2-6p2q | Medium | 1.5% | 08 Oct, 2019 | Packagist bassjobsen/bootstrap-3-typeahead npm bootstrap-3-typeahead |
Centreon Sensitive Data Exposure CVE-2019-17106, GHSA-rx4j-x3fh-9qwg | Medium | 1.1% | 08 Oct, 2019 | Packagist centreon/centreon |
TeamPass Stored Cross-site Scripting CVE-2019-17205, GHSA-v969-5v7f-pmg2 | Medium | 1.0% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
TeamPass Stored Cross-site Scripting CVE-2019-17204, GHSA-qx37-225j-qr89 | Medium | 0.6% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
TeamPass Stored Cross-site Scripting CVE-2019-17203, GHSA-pqx8-q35p-pgcv | Medium | 0.6% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
Dolibarr stored Cross-site Scripting in an Email Template section CVE-2019-16688, GHSA-9h46-g4c9-7976 | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting in a User Profile in a Signature section CVE-2019-16687, GHSA-m9q9-4m25-23gc | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting in a User Note section CVE-2019-16686, GHSA-m44p-cfwj-wwr6 | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr stored Cross-site Scripting vulnerability CVE-2019-16685, GHSA-fvxr-767j-f28v | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-13376, GHSA-6mh2-98gr-wv76 | Medium | 0.7% | 27 Sep, 2019 | Packagist phpbb/phpbb |
SilverStripe Versioned Files module Unpublished files are exposed publicly CVE-2019-16409, GHSA-xm6j-x342-gwq9 | Medium | 1.2% | 26 Sep, 2019 | Packagist silverstripe/framework Packagist symbiote/silverstripe-versionedfiles |
TeamPass Cross-site Scripting (XSS) vulnerability CVE-2019-16904, GHSA-rpmr-fwh5-24fm | Medium | 0.7% | 26 Sep, 2019 | Packagist nilsteampassnet/teampass |
Broken access control on files CVE-2019-14273, GHSA-43jj-2rwc-2m3f | Medium | 1.1% | 26 Sep, 2019 | Packagist silverstripe/framework |
SilverStripe asset-admin Cross-site Scripting (XSS) CVE-2019-14272, GHSA-jgw2-f5mx-rg7h | Medium | 0.7% | 26 Sep, 2019 | Packagist silverstripe/framework |
MediaWiki information disclosure CVE-2019-16738, GHSA-7hwr-f745-5rwq | Medium | 1.8% | 26 Sep, 2019 | Packagist mediawiki/core |
Lack of access control on upoaded files CVE-2019-12245, GHSA-jvx5-rm6q-gx7p | Medium | 1.4% | 25 Sep, 2019 | Packagist silverstripe/assets Packagist silverstripe/framework |
Silverstripe Flash Clipboard Reflected XSS CVE-2019-12205, GHSA-rfvw-5848-gxc5 | Medium | 0.9% | 25 Sep, 2019 | Packagist silverstripe/admin Packagist silverstripe/framework |
Session fixation in change password form CVE-2019-12203, GHSA-w7r7-r8r9-vrg2 | Medium | 0.4% | 25 Sep, 2019 | Packagist silverstripe/framework |
Joomla! XSS in Default Templates CVE-2019-16725, GHSA-v84j-vh7x-g7j6 | Medium | 0.7% | 24 Sep, 2019 | Packagist joomla/joomla-cms |
Pagekit User enumeration CVE-2019-16669, GHSA-jh2j-7248-9p3c | Medium | 1.1% | 21 Sep, 2019 | Packagist pagekit/pagekit |
XSS vulnerability in company name field in Mautic CVE-2018-11200, GHSA-9hx7-rg7w-xm79 | Medium | 0.8% | 20 Sep, 2019 | Packagist mautic/core |
Cross-site scripting in Dolibarr CVE-2019-16197, GHSA-m553-9wmx-533h | Medium | 3.0% | 16 Sep, 2019 | Packagist dolibarr/dolibarr |
phpMyAdmin Cross-Site Request Forgery (CSRF) CVE-2019-12922, GHSA-4c9q-64gq-xhx4 | Medium | 10.7% | 13 Sep, 2019 | Packagist phpmyadmin/phpmyadmin |
Cross-site Scripting in LimeSurvey CVE-2019-16173, GHSA-r5f2-4wf4-cv66 | Medium | 3.7% | 09 Sep, 2019 | Packagist limesurvey/limesurvey |
Cross-site Scripting in LimeSurvey CVE-2019-16172, GHSA-fr47-r224-c36m | Medium | 4.6% | 09 Sep, 2019 | Packagist limesurvey/limesurvey |
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS CVE-2019-10667, GHSA-f4hh-xxqh-wgpq | Medium | 1.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Cross-site Scripting in YII2-CMS CVE-2019-16130, GHSA-rfh8-25h9-mhgf | Medium | 0.9% | 09 Sep, 2019 | Packagist yii2mod/yii2-cms |
Cross-site Scripting in Grav CVE-2019-16126, GHSA-6268-v434-45m5 | Medium | 1.5% | 09 Sep, 2019 | Packagist getgrav/grav |
XSS vulnerability in Author URL of themes in Mautic CVE-2018-11198, GHSA-xcf7-cj8q-pcjm | Medium | 0.9% | 06 Sep, 2019 | Packagist mautic/core |
Cosenary Instagram-PHP-API contains reflected XSS vulnerability CVE-2019-14470, GHSA-gcv6-2v9c-rj48 | Medium | 83.0% | 04 Sep, 2019 | Packagist cosenary/instagram |
laracom Cross-site Scripting CVE-2019-15489, GHSA-qc2p-6qrf-25j2 | Medium | 0.9% | 26 Aug, 2019 | Packagist jsdecena/laracom |
Cross-site Scripting in Bolt CVE-2019-15485, GHSA-cj8p-53v9-2c26 | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Bolt Cross-site Scripting (XSS) via an image's alt or title field CVE-2019-15484, GHSA-fp8m-xw3f-6h7x | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log CVE-2019-15483, GHSA-ph84-vg7q-fqq8 | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Kimai v2 is vulnerable to Cross-Site Scripting (XSS) CVE-2019-15481, GHSA-7v44-75jf-22gj | Medium | 0.9% | 23 Aug, 2019 | Packagist kevinpapst/kimai2 |
Backpack\CRUD for Laravel XSS Vulnerability CVE-2018-20962, GHSA-6gfm-gpr3-8wh9 | Medium | 1.3% | 08 Aug, 2019 | Packagist backpack/crud |
TeamPass Cross-site Scripting (XSS) CVE-2019-12950, GHSA-m3pp-jcpm-2vr9 | Medium | 0.8% | 06 Aug, 2019 | Packagist nilsteampassnet/teampass |