Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Missing Authorization in Drupal CVE-2017-6923, GHSA-v3f6-f29f-rgvp | Medium | 2.0% | 22 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
Drupal core access bypass vulnerability CVE-2017-6922, GHSA-58f3-cx8p-h8jg | Medium | 1.9% | 22 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
Drupal file REST resource does not properly validate CVE-2017-6921, GHSA-h377-287m-w2r9 | Medium | 1.8% | 15 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
Shopware XXE Vulnerability CVE-2017-18357, GHSA-6m27-7cqj-2mxw | Medium | 27.1% | 15 Jan, 2019 | Packagist shopware/shopware |
Sensitive Data Exposure in elFinder CVE-2019-5884, GHSA-jcgc-vxqg-85xx | Medium | 1.3% | 10 Jan, 2019 | Packagist studio-42/elfinder |
Fork CMS XSS Vulnerability CVE-2018-20682, GHSA-xcmj-xjhg-wvhq | Medium | 0.6% | 09 Jan, 2019 | Packagist forkcms/forkcms |
EC-CUBE Open redirect vulnerability CVE-2018-16191, GHSA-fcgg-qgxg-2g2x | Medium | 1.3% | 09 Jan, 2019 | Packagist ec-cube/ec-cube |
bootstrap Cross-site Scripting vulnerability CVE-2018-20677, GHSA-ph58-4vrj-w6hr | Medium | 4.0% | 09 Jan, 2019 | Maven org.webjars:bootstrap NuGet bootstrap Packagist twbs/bootstrap RubyGems bootstrap +3 more |
XSS vulnerability that affects bootstrap CVE-2018-20676, GHSA-3mgp-fx93-9xv5 | Medium | 3.8% | 09 Jan, 2019 | Maven org.webjars:bootstrap NuGet bootstrap Packagist twbs/bootstrap RubyGems bootstrap +3 more |
Bootstrap Cross-site Scripting vulnerability CVE-2016-10735, GHSA-4p24-vmcr-4gqj | Medium | 4.0% | 09 Jan, 2019 | Maven org.webjars:bootstrap NuGet bootstrap NuGet bootstrap.sass Packagist twbs/bootstrap +4 more |
Dolibarr stored cross-site scripting (XSS) vulnerability CVE-2018-19995, GHSA-3v8x-286h-9pxp | Medium | 1.1% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
Dolibarr reflected cross-site scripting (XSS) vulnerability CVE-2018-19993, GHSA-2gc5-3h3p-8vpf | Medium | 1.4% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
Dolibarr stored cross-site scripting (XSS) vulnerability CVE-2018-19992, GHSA-4xfw-599q-fmp6 | Medium | 1.1% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS) CVE-2018-20583, GHSA-qx76-c53f-5c7q | Medium | 1.9% | 30 Dec, 2018 | Packagist league/commonmark |
Evolution CMS Cross-site Scripting (XSS) CVE-2018-16638, GHSA-9mfc-gr8c-xj4m | Medium | 0.6% | 28 Dec, 2018 | Packagist evolutioncms/evolution |
Evolution CMS Stored Cross-site Scripting (XSS) CVE-2018-16637, GHSA-8h24-3cjr-xxmh | Medium | 0.6% | 28 Dec, 2018 | Packagist evolutioncms/evolution |
Kirby XSS Vulnerability CVE-2018-16630, GHSA-3gq5-r59m-mmv2 | Medium | 0.6% | 28 Dec, 2018 | Packagist getkirby/kirby |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2018-19799, GHSA-ggww-q2gv-m3g4 | Medium | 4.5% | 26 Dec, 2018 | Packagist dolibarr/dolibarr |
Craft CMS Cross-site Scripting (XSS) Vulnerability CVE-2018-20418, GHSA-72pf-cvwq-vgqg | Medium | 3.7% | 24 Dec, 2018 | Packagist craftcms/cms |
Microweber XSS Vulnerability CVE-2018-1000826, GHSA-xmcr-x5x3-gjfx | Medium | 1.3% | 20 Dec, 2018 | Packagist microweber/microweber |
Symfony Open Redirect CVE-2018-19790, GHSA-89r2-5g34-2g47 | Medium | 1.5% | 18 Dec, 2018 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Symfony Path Disclosure CVE-2018-19789, GHSA-x3cf-w64x-4cp2 | Medium | 3.6% | 18 Dec, 2018 | Packagist symfony/form Packagist symfony/symfony |
CSRF in PHP Server Monitor before 3.3.2 CVE-2018-18921, GHSA-w2g4-g8xr-px4x | Medium | 0.6% | 18 Dec, 2018 | Packagist phpservermon/phpservermon |
Bolt Cross-site Scripting (XSS) via text input click preview button CVE-2018-19933, GHSA-gjx6-58xh-p7pw | Medium | 3.5% | 17 Dec, 2018 | Packagist bolt/bolt |
phpMyAdmin Cross-site Scripting (XSS) vulnerability CVE-2018-19970, GHSA-8987-93fh-rcwq | Medium | 2.2% | 11 Dec, 2018 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Local file inclusion through transformation feature CVE-2018-19968, GHSA-xc97-r49q-cxgc | Medium | 2.9% | 11 Dec, 2018 | Packagist phpmyadmin/phpmyadmin |
Subrion CMS XSS CVE-2018-16629, GHSA-mxv3-qcmf-r6wj | Medium | 0.6% | 04 Dec, 2018 | Packagist intelliants/subrion |
XSS in PHP-Proxy-App through v3.0 CVE-2018-19785, GHSA-cghj-w42g-hqmr | Medium | 0.9% | 01 Dec, 2018 | Packagist athlon1600/php-proxy-app |
Showdoc CSRF Vulnerability CVE-2018-19621, GHSA-3p87-gqw8-4pf2 | Medium | 0.4% | 28 Nov, 2018 | Packagist showdoc/showdoc |
Showdoc Unauthenticated Access CVE-2018-19620, GHSA-pfrc-5hhq-6hvr | Medium | 1.3% | 28 Nov, 2018 | Packagist showdoc/showdoc |
Showdoc Forced Browsing CVE-2018-19609, GHSA-6xx7-cphv-pxgr | Medium | 1.2% | 27 Nov, 2018 | Packagist showdoc/showdoc |
Centreon XSS Vulnerability CVE-2018-19311, GHSA-8vh5-j6xj-5953 | Medium | 1.2% | 16 Nov, 2018 | Packagist centreon/centreon |
Centreon XSS Vulnerability CVE-2018-19280, GHSA-7g3c-hrc6-5v4j | Medium | 0.9% | 14 Nov, 2018 | Packagist centreon/centreon |
Ckeditor XSS Vulnerability CVE-2018-17960, GHSA-g68x-vvqq-pvw3 | Medium | 1.9% | 14 Nov, 2018 | Packagist typo3/cms Packagist typo3/cms-core npm ckeditor |
Flarum Core Leaks PII CVE-2018-19133, GHSA-p6m5-x83r-hqmr | Medium | 1.2% | 09 Nov, 2018 | Packagist flarum/framework |
XSS in baserCMS before 4.1.4 CVE-2018-18943, GHSA-fx2m-5m9v-jhgp | Medium | 0.7% | 05 Nov, 2018 | Packagist baserproject/basercms |
MantisBT allows XSS via Edit Filter page CVE-2018-17783, GHSA-gcqw-45xq-xc63 | Medium | 0.7% | 30 Oct, 2018 | Packagist mantisbt/mantisbt |
MantisBT allows XSS via the Manage Filter page CVE-2018-17782, GHSA-ggjm-7m5f-7xjv | Medium | 0.7% | 30 Oct, 2018 | Packagist mantisbt/mantisbt |
LibreNMS XSS Vulnerability CVE-2018-18478, GHSA-9m82-f3wx-p625 | Medium | 1.6% | 18 Oct, 2018 | Packagist librenms/librenms |
Mediawiki tarball is missing .htaccess files CVE-2018-13258, GHSA-2c28-7gwv-cpgf | Medium | 2.3% | 04 Oct, 2018 | Packagist mediawiki/core |
Mediawiki BotPassword can bypass CentralAuth's account lock CVE-2018-0505, GHSA-5c6w-f4w2-2grp | Medium | 2.0% | 04 Oct, 2018 | Packagist mediawiki/core |
Mediawiki information disclosure vulnerability CVE-2018-0504, GHSA-hr8v-f4g2-p66f | Medium | 2.9% | 04 Oct, 2018 | Packagist mediawiki/core |
Mediawiki Improper Privilege Management CVE-2018-0503, GHSA-mhfv-9h99-jwg7 | Medium | 1.6% | 04 Oct, 2018 | Packagist mediawiki/core |
Coaster CMS Stored Cross-site Scripting vulnerability CVE-2018-17876, GHSA-77cq-wgpf-g449 | Medium | 1.0% | 04 Oct, 2018 | Packagist web-feet/coastercms |
Subrion CMS Stored Cross-site Scripting (XSS) CVE-2018-15563, GHSA-6wc4-v4v5-3m82 | Medium | 0.7% | 02 Oct, 2018 | Packagist intelliants/subrion |
Wallabag cross-site scripting (XSS) vulnerability CVE-2018-11352, GHSA-gvcw-x64m-pfcj | Medium | 0.7% | 21 Sep, 2018 | Packagist wallabag/wallabag |
Moodle Cross-site Scripting CVE-2018-14631, GHSA-gqrp-qhv8-phrv | Medium | 2.1% | 17 Sep, 2018 | Packagist moodle/moodle |
Smarty Path Traversal Vulnerability CVE-2018-16831, GHSA-65j5-vpm7-6xp4 | Medium | 2.7% | 11 Sep, 2018 | Packagist smarty/smarty |
Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users CVE-2018-16704, GHSA-hh92-wg7v-8vfr | Medium | 0.8% | 07 Sep, 2018 | Packagist gleez/cms |
Stored XSS in LavaLite 5.5 CVE-2018-16551, GHSA-pxxp-283v-xpq5 | Medium | 0.7% | 05 Sep, 2018 | Packagist lavalite/cms |