Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Firefly III vulnerable to stored XSS CVE-2019-13645, GHSA-5hpw-vcj2-prwg | Medium | 0.8% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Firefly III vulnerable to stored XSS CVE-2019-13644, GHSA-9xmx-rj7j-fv9q | Medium | 0.8% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Dolibarr Cross Site Scripting (XSS) CVE-2019-1010016, GHSA-97fp-5m87-r9mf | Medium | 1.0% | 15 Jul, 2019 | Packagist dolibarr/dolibarr |
Wikimedia MediaWik exposed suppressed log in RevisionDelete page CVE-2019-12470, GHSA-733q-m38x-q7cc | Medium | 1.4% | 10 Jul, 2019 | Packagist mediawiki/core |
MediaWiki Incorrect Access Control vulnerability CVE-2019-12469, GHSA-x3fr-w7r5-x7rg | Medium | 1.3% | 10 Jul, 2019 | Packagist mediawiki/core |
MediaWiki Cross-site Scripting (XSS) CVE-2019-12471, GHSA-2rm7-xxx8-35jh | Medium | 1.3% | 10 Jul, 2019 | Packagist mediawiki/core |
MediaWiki Incorrect Access Control vulnerability CVE-2019-12467, GHSA-6vfg-8ppv-h5hg | Medium | 1.3% | 10 Jul, 2019 | Packagist mediawiki/core |
paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS CVE-2017-6217, GHSA-9r4x-3534-w3f9 | Medium | 1.2% | 10 Jul, 2019 | Packagist paypal/adaptivepayments-sdk-php |
Typo3 Cross-Site Scripting in Link Handling CVE-2019-12748, GHSA-r6fv-56gp-j3r4 | Medium | 0.7% | 09 Jul, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
infusionsoft-php-sdk reflected Cross-site Scripting CVE-2017-6216, GHSA-8jmj-4p32-mc9p | Medium | 1.2% | 03 Jul, 2019 | Packagist novaksolutions/infusionsoft-php-sdk |
Subrion CMS XSS CVE-2018-11317, GHSA-2cmg-vxvh-8h7h | Medium | 0.9% | 03 Jul, 2019 | Packagist intelliants/subrion |
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions CVE-2019-10134, GHSA-j8wr-7xxj-c2fr | Medium | 1.1% | 26 Jun, 2019 | Packagist moodle/moodle |
Moodle Open Redirect Vulnerability CVE-2019-10133, GHSA-5xp2-rv4h-mm2q | Medium | 0.9% | 26 Jun, 2019 | Packagist moodle/moodle |
Shopware Cross-site Scripting Vulnerability CVE-2019-12935, GHSA-8qxh-hcr9-2379 | Medium | 2.7% | 23 Jun, 2019 | Packagist shopware/shopware |
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO CVE-2018-16514, GHSA-3qv7-98vm-xx2v | Medium | 0.9% | 20 Jun, 2019 | Packagist mantisbt/mantisbt |
Craft CMS XSS Vulnerability CVE-2019-12823, GHSA-w5q4-q7wp-qww6 | Medium | 0.9% | 18 Jun, 2019 | Packagist craftcms/cms |
phpMyAdmin CSRF Vulnerability CVE-2019-12616, GHSA-mfr9-pcm3-6mwc | Medium | 20.2% | 05 Jun, 2019 | Packagist phpmyadmin/phpmyadmin |
PrestaShop Cross-site Scripting vulnerability CVE-2019-11876, GHSA-6grv-hw8g-4gfm | Medium | 0.9% | 24 May, 2019 | Packagist prestashop/prestashop |
Symfony Cross-site Scripting (XSS) vulnerability CVE-2019-10909, GHSA-g996-q5r8-w7g2 | Medium | 1.0% | 16 May, 2019 | Packagist drupal/core Packagist drupal/drupal Packagist symfony/framework-bundle Packagist symfony/symfony |
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability CVE-2019-12139, GHSA-99rh-vxmc-7wgf | Medium | 0.8% | 16 May, 2019 | Packagist ezsystems/ezplatform-admin-ui |
ImpressCMS XSS CVE-2018-13983, GHSA-g32q-4fhf-cq72 | Medium | 1.5% | 06 May, 2019 | Packagist impresscms/impresscms |
phpBB Server side request forgery (SSRF) CVE-2019-11767, GHSA-4hx9-p925-qcv7 | Medium | 1.2% | 05 May, 2019 | Packagist phpbb/phpbb |
XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358, DRUPAL-CORE-2019-006, GHSA-6c3j-c64m-qhgq, PYSEC-2026-628, SNYK-JS-JQUERY-174006 | Medium | 86.8% | 17 Apr, 2019 | Maven org.webjars.npm:jquery NuGet jQuery Packagist drupal/core Packagist maximebf/debugbar +3 more |
Contao Information Disclosure via Access Control Flaws CVE-2018-20028, GHSA-q99w-j4mj-7hj8 | Medium | 0.9% | 17 Apr, 2019 | Packagist contao/contao |
Elgg open redirect CVE-2019-11016, GHSA-r6h7-846c-8m78 | Medium | 1.2% | 08 Apr, 2019 | Packagist elgg/elgg |
Moodle XSS Vulnerability CVE-2019-3847, GHSA-qrcj-6fjw-3h9h | Medium | 2.2% | 27 Mar, 2019 | Packagist moodle/moodle |
Snipe-IT XSS Vulnerability CVE-2019-10118, GHSA-fx98-8w93-4mxr | Medium | 0.8% | 27 Mar, 2019 | Packagist snipe/snipe-it |
Moodle context freezing CVE-2019-3852, GHSA-v2rh-5v88-rgvh | Medium | 1.1% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Secure layout contained an insecure link in Boost theme CVE-2019-3851, GHSA-pj45-hp8h-289r | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Stored HTML in assignment submission comments allowed links to be opened directly CVE-2019-3850, GHSA-3fj7-9j8m-7r8g | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Logged in users could view all calendar events CVE-2019-3848, GHSA-45rw-4r25-jvg7 | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2019-3810, GHSA-wm4w-8vc6-2j4h | Medium | 13.8% | 25 Mar, 2019 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2019-3808, GHSA-4r2p-wpv5-683w | Medium | 1.2% | 25 Mar, 2019 | Packagist moodle/moodle |
Moderate severity vulnerability that affects league/commonmark CVE-2019-10010, GHSA-3v43-877x-qgmq | Medium | 1.1% | 24 Mar, 2019 | Packagist league/commonmark |
Microweber XSS Vulnerability CVE-2018-19917, GHSA-582j-m369-hj2f | Medium | 1.6% | 21 Mar, 2019 | Packagist microweber/microweber |
Drupal Cross Site Scripting (XSS) vulnerability CVE-2019-6341, DRUPAL-CORE-2019-004, GHSA-cmmh-8mwp-gq5p | Medium | 12.2% | 20 Mar, 2019 | Packagist drupal/core Packagist drupal/drupal |
Dolibarr Stored Cross-site Scripting in expensereport/card.php CVE-2018-16808, GHSA-r3r5-fqfm-9wrh | Medium | 1.0% | 07 Mar, 2019 | Packagist dolibarr/dolibarr |
Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331, GHSA-9v3m-8fp8-mj99 | Medium | 16.4% | 20 Feb, 2019 | Maven org.webjars:bootstrap NuGet Bootstrap.Less NuGet bootstrap NuGet bootstrap.sass +6 more |
MODX vulnerability allows for XSS via user settings parameters CVE-2018-20758, GHSA-vwqw-wfhv-2xcq | Medium | 0.6% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution allows XSS through extended user fields CVE-2018-20757, GHSA-gm2g-65wj-43g8 | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution allows XSS via document resources CVE-2018-20756, GHSA-fpxg-5x79-43rm | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution vulnerable to XSS attack through its User Photo field CVE-2018-20755, GHSA-q4c2-q63g-62j7 | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
Incorrect Access Control vulnerability in api-platform/core CVE-2019-1000011, GHSA-974j-wjxx-wggj | Medium | 1.0% | 04 Feb, 2019 | Packagist api-platform/core |
Croogo vulnerable to Cross-site Scripting in title field CVE-2019-7173, GHSA-q5fg-v5p7-r424 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7171, GHSA-v6q8-8wgx-8hm7 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7170, GHSA-36pq-cjh9-fv46 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7169, GHSA-wr5c-4f2h-28m6 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in Blog field CVE-2019-7168, GHSA-9f9r-w3xq-f722 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Yii Incorrectly Implements CORS CVE-2018-20745, GHSA-cr6r-6xm9-ww22 | Medium | 0.5% | 28 Jan, 2019 | Packagist yiisoft/yii2 |
phpMyAdmin Arbitrary file read vulnerability CVE-2019-6799, GHSA-c8wj-q36q-3wg4 | Medium | 14.8% | 26 Jan, 2019 | Packagist phpmyadmin/phpmyadmin |