Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize CVE-2018-16347, GHSA-5qqx-32hw-5vx4 | Medium | 0.8% | 02 Sep, 2018 | Packagist gleez/cms |
Showdoc XSS Vulnerability CVE-2018-16342, GHSA-2263-jwgm-wv97 | Medium | 0.6% | 02 Sep, 2018 | Packagist showdoc/showdoc |
Subrion Cross-site Scripting (XSS) CVE-2018-16327, GHSA-9738-c49q-4rgc | Medium | 0.6% | 01 Sep, 2018 | Packagist intelliants/subrion |
Pimcore XSS Vulnerability CVE-2018-14059, GHSA-276r-24xq-hwg8 | Medium | 3.1% | 24 Aug, 2018 | Packagist pimcore/pimcore |
phpMyAdmin Cross-site Scripting (XSS) in the import dialog CVE-2018-15605, GHSA-c958-4j9x-q7w4 | Medium | 1.7% | 24 Aug, 2018 | Packagist phpmyadmin/phpmyadmin |
Paymorrow Improper Input Validation vulnerability CVE-2018-14020, GHSA-489x-ccjw-q7c4 | Medium | 1.1% | 20 Aug, 2018 | Packagist oxid-esales/paymorrow-module |
OpenCart-Overclocked Cross-site Scripting Vulnerability CVE-2018-1000640, GHSA-cr3q-658v-qv3x | Medium | 0.9% | 20 Aug, 2018 | Packagist villagedefrance/opencart-overclocked |
Pimcore SQLi Vulnerability CVE-2018-14058, GHSA-q4hw-c66h-4xqc | Medium | 28.6% | 17 Aug, 2018 | Packagist pimcore/pimcore |
Symfony SSRF Vulnerability via Form Component CVE-2017-16790, GHSA-cqqh-94r6-wjrg | Medium | 1.6% | 06 Aug, 2018 | Packagist symfony/form Packagist symfony/symfony |
Symfony CSRF Vulnerability CVE-2017-16653, GHSA-92x6-h2gr-8gxq | Medium | 1.5% | 06 Aug, 2018 | Packagist symfony/security Packagist symfony/security-csrf Packagist symfony/symfony |
MantisBT allows XSS on the Edit Filter page via crafted filter name CVE-2018-14504, GHSA-74gh-5j33-vg4w | Medium | 1.6% | 03 Aug, 2018 | Packagist mantisbt/mantisbt |
MantisBT allows XSS via View Filters page CVE-2018-13055, GHSA-mjp7-97w4-jwhc | Medium | 1.5% | 03 Aug, 2018 | Packagist mantisbt/mantisbt |
Symfony HTTP Foundation web cache poisoning CVE-2018-14773, GHSA-8wgj-6wx8-h5hq | Medium | 57.6% | 03 Aug, 2018 | Packagist symfony/http-foundation Packagist symfony/symfony |
paypal/permissions-sdk-php reflected Cross-site Scripting (XSS) CVE-2017-6215, GHSA-2qfv-wwfx-fh34 | Medium | 0.8% | 02 Aug, 2018 | Packagist paypal/permissions-sdk-php |
paypal/invoice-sdk-php reflected XSS CVE-2017-6213, GHSA-626w-hmpw-x74j | Medium | 0.8% | 02 Aug, 2018 | Packagist paypal/invoice-sdk-php |
Subrion CMS Cross-site Scripting CVE-2018-14840, GHSA-vhqr-3gr2-7px9 | Medium | 3.7% | 02 Aug, 2018 | Packagist intelliants/subrion |
Subrion CMS XSS CVE-2018-14835, GHSA-c8mg-wp7h-f2pf | Medium | 0.7% | 02 Aug, 2018 | Packagist intelliants/subrion |
Gleez Cms Cross-site Scripting in Profile Page CVE-2018-1999021, GHSA-q9g7-pff4-548r | Medium | 0.7% | 23 Jul, 2018 | Packagist gleez/cms |
Pagekit open redirect vulnerability CVE-2018-14381, GHSA-v47j-rw9h-6m47 | Medium | 1.0% | 18 Jul, 2018 | Packagist pagekit/pagekit |
Bootstrap Cross-site Scripting vulnerability CVE-2018-14042, GHSA-7mvr-5x2g-wfc8 | Medium | 4.0% | 13 Jul, 2018 | Maven org.webjars:bootstrap NuGet bootstrap NuGet bootstrap.sass Packagist twbs/bootstrap +4 more |
Bootstrap Cross-site Scripting vulnerability CVE-2018-14041, GHSA-pj7m-g53m-7638 | Medium | 4.3% | 13 Jul, 2018 | Maven org.webjars:bootstrap NuGet bootstrap NuGet bootstrap.sass Packagist twbs/bootstrap +4 more |
Bootstrap vulnerable to Cross-Site Scripting (XSS) CVE-2018-14040, GHSA-3wqf-4x89-9g79 | Medium | 4.1% | 13 Jul, 2018 | Maven org.webjars:bootstrap NuGet bootstrap NuGet bootstrap.sass Packagist twbs/bootstrap +3 more |
Moodle Exposure of Sensitive Information to an Unauthorized Actor CVE-2018-10890, GHSA-5w4h-xrr5-7273 | Medium | 2.1% | 10 Jul, 2018 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2018-10889, GHSA-wmvq-q9h8-7j4g | Medium | 2.3% | 10 Jul, 2018 | Packagist moodle/moodle |
Sensitive Data Exposure in baserCMS CVE-2018-0575, GHSA-w935-p7mg-xc96 | Medium | 1.2% | 26 Jun, 2018 | Packagist baserproject/basercms |
XSS in baserCMS CVE-2018-0574, GHSA-6qjv-43mf-rgrh | Medium | 0.8% | 26 Jun, 2018 | Packagist baserproject/basercms |
baserCMS Access Control Bypass CVE-2018-0573, GHSA-33fq-qm4m-cjw3 | Medium | 1.1% | 26 Jun, 2018 | Packagist baserproject/basercms |
baserCMS arbitrary file upload vulnerability CVE-2018-0571, GHSA-3mcp-6rv6-c69g | Medium | 1.1% | 26 Jun, 2018 | Packagist baserproject/basercms |
XSS in baserCMS CVE-2018-0570, GHSA-994g-74gq-5qpr | Medium | 0.7% | 26 Jun, 2018 | Packagist baserproject/basercms |
phpMyAdmin XSS Vulnerability CVE-2018-12581, GHSA-vxj6-pm6r-23hq | Medium | 1.8% | 21 Jun, 2018 | Packagist phpmyadmin/phpmyadmin |
Symfony Open Redirect CVE-2018-11408, GHSA-7hwc-2cq4-6x2w | Medium | 1.1% | 13 Jun, 2018 | Packagist symfony/security-bundle Packagist symfony/symfony |
Symfony DoS CVE-2018-11386, GHSA-r2rq-3h56-fqm4 | Medium | 1.6% | 13 Jun, 2018 | Packagist symfony/http-foundation Packagist symfony/symfony |
Symfony Open Redirect CVE-2017-16652, GHSA-r7p7-qr7p-2rrf | Medium | 0.8% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Yii2-StateMachine extension for Yii2 XSS Vulnerability CVE-2018-12290, GHSA-65qg-f77j-cccf | Medium | 0.7% | 13 Jun, 2018 | Packagist ptheofan/yii2-statemachine |
nZEDb Cross-site Scripting (XSS) in the 404 error page CVE-2017-18286, GHSA-h847-63fg-vm6c | Medium | 0.7% | 05 Jun, 2018 | Packagist nzedb/nzedb |
Pagekit Stored Cross-site Scripting CVE-2018-11564, GHSA-3rwj-v7jp-w542 | Medium | 3.1% | 02 Jun, 2018 | Packagist pagekit/pagekit |
OpenCart Path Traversal CVE-2018-11495, GHSA-qgrf-34hp-ghm9 | Medium | 1.7% | 26 May, 2018 | Packagist opencart/opencart |
Moodle Cross-site Scripting CVE-2018-1136, GHSA-xhfw-wjjc-4j5h | Medium | 1.1% | 25 May, 2018 | Packagist moodle/moodle |
Moodle Portfolio forum caller class allows a user to download any file CVE-2018-1135, GHSA-vxmv-74rf-vqgp | Medium | 1.3% | 25 May, 2018 | Packagist moodle/moodle |
Moodle Improper Privilege Management CVE-2018-1134, GHSA-xjx9-7c29-pwmm | Medium | 1.1% | 25 May, 2018 | Packagist moodle/moodle |
Dolibarr Cross-site scripting (XSS) vulnerability CVE-2018-10095, GHSA-p2fm-8rhj-58fr | Medium | 86.5% | 22 May, 2018 | Packagist dolibarr/dolibarr |
Joomla! XSS Vulnerability CVE-2018-11326, GHSA-g3m5-vvj7-xrwv | Medium | 1.0% | 22 May, 2018 | Packagist joomla/joomla-cms |
GeniXCMS Cross-site scripting (XSS) vulnerability CVE-2017-14740, GHSA-478j-mcrr-3877 | Medium | 0.6% | 26 Apr, 2018 | Packagist genix/cms |
User Plugin for October CSS Allows XSS CVE-2018-10366, GHSA-x5jc-34xf-c24q | Medium | 2.4% | 25 Apr, 2018 | Packagist rainlab/user-plugin |
Cross-site Scripting in Parsedown CVE-2018-1000162, GHSA-qgpv-86r3-87fh | Medium | 1.2% | 18 Apr, 2018 | Packagist erusev/parsedown |
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS) CVE-2018-9861, DRUPAL-CORE-2018-003, GHSA-g78h-pf65-46rv | Medium | 1.7% | 18 Apr, 2018 | Packagist drupal/core Packagist drupal/drupal npm ckeditor-dev |
XSS vulnerability in theme config file in Mautic CVE-2018-8071, GHSA-5w74-jx7m-x6hv | Medium | 0.8% | 18 Apr, 2018 | Packagist mautic/core |
Dolibarr Cross-Site Scripting (XSS) vulnerability CVE-2017-9838, GHSA-726g-cgcq-4xw8 | Medium | 0.6% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-18259, GHSA-4323-cfj5-98mh | Medium | 0.6% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Typo3 XSS Vulnerability CVE-2018-6905, GHSA-3w22-wrwx-2r75 | Medium | 2.2% | 08 Apr, 2018 | Packagist typo3/cms |