Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Gleez CMS Stored XSS CVE-2018-7035, GHSA-m2r2-qc49-gqw4 | Medium | 0.9% | 05 Apr, 2018 | Packagist gleez/cms |
Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script CVE-2018-1081, GHSA-v9xq-vh72-chr4 | Medium | 1.4% | 04 Apr, 2018 | Packagist moodle/moodle |
Grav CMS Cross-site scripting (XSS) vulnerability CVE-2018-5233, GHSA-977g-93f5-rqjx | Medium | 3.7% | 19 Mar, 2018 | Packagist getgrav/grav |
Drupal external link injection vulnerability CVE-2017-6932, GHSA-wm86-w3cf-h6vm | Medium | 1.2% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Drupal Settings Tray access bypass CVE-2017-6931, GHSA-7ffh-cjvg-fpr4 | Medium | 1.1% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Drupal cross site scripting vulnerability CVE-2017-6929, GHSA-5vpr-v24w-mmjj | Medium | 1.2% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Drupal access bypass vulnerability CVE-2017-6928, GHSA-66mv-q8r2-hj8w | Medium | 1.0% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Drupal cross-site scripting vulnerability CVE-2017-6927, GHSA-585j-5449-mf5m | Medium | 1.6% | 01 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
Tiki Wiki CMS XSS Vulnerability CVE-2018-7302, GHSA-7f2f-crxg-cpfv | Medium | 0.6% | 21 Feb, 2018 | Packagist tikiwiki/tiki-manager |
phpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature CVE-2018-7260, GHSA-gqmj-f46x-wqhw | Medium | 1.6% | 21 Feb, 2018 | Packagist phpmyadmin/phpmyadmin |
Yab Quarx persistent cross-site scripting vulnerability CVE-2018-7274, GHSA-h4fh-gpvh-753g | Medium | 1.0% | 21 Feb, 2018 | Packagist yab/quarx |
Converse.js Exposure of Sensitive Information CVE-2018-6591, GHSA-mv4h-qm24-x4gh | Medium | 1.1% | 19 Feb, 2018 | Packagist jcbrand/converse.js npm converse.js |
October CMS - RainLab Blog Plugin XSS CVE-2018-7198, GHSA-96mh-7xpr-qcgw | Medium | 2.3% | 18 Feb, 2018 | Packagist rainlab/blog-plugin |
Cross site scripting in Croogo CVE-2017-1000510, GHSA-r4h9-gv2m-9x97 | Medium | 0.8% | 09 Feb, 2018 | Packagist croogo/croogo |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-1000509, GHSA-hqfh-p9h7-m6v5 | Medium | 0.9% | 09 Feb, 2018 | Packagist dolibarr/dolibarr |
Canvs Canvas XSS Vulnerability CVE-2017-1000507, GHSA-94hc-7qc9-34rf | Medium | 0.8% | 09 Feb, 2018 | Packagist austintoddj/canvas |
Mautic Cross Site Scripting (XSS) vulnerability CVE-2017-1000506, GHSA-358v-cqjc-2pcq | Medium | 1.1% | 09 Feb, 2018 | Packagist mautic/core |
SimpleSAMLphp XSS Vulnerability CVE-2017-18121, GHSA-fv7m-wc3v-wr3w | Medium | 1.2% | 02 Feb, 2018 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Open redirection protection bypass CVE-2018-6520, GHSA-2qfc-48v5-4w5h | Medium | 0.9% | 02 Feb, 2018 | Packagist simplesamlphp/simplesamlphp |
SilverStripe CSV Excel Macro Injection CVE-2017-18049, GHSA-2jvj-mhf2-g99w | Medium | 0.9% | 23 Jan, 2018 | Packagist silverstripe/framework |
Moodle XSS Vulnerability CVE-2018-1045, GHSA-595j-wpfg-23w4 | Medium | 1.0% | 22 Jan, 2018 | Packagist moodle/moodle |
Moodle Privilege escalation in quiz web services CVE-2018-1044, GHSA-332g-xh34-5c96 | Medium | 1.1% | 22 Jan, 2018 | Packagist moodle/moodle |
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames CVE-2018-1043, GHSA-hpwm-84h5-vqr8 | Medium | 1.5% | 22 Jan, 2018 | Packagist moodle/moodle |
Moodle SSRF Vulnerability CVE-2018-1042, GHSA-qqjv-mc2v-p7mc | Medium | 16.2% | 22 Jan, 2018 | Packagist moodle/moodle |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5367, GHSA-qf99-3qrg-g97q | Medium | 0.8% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5366, GHSA-35mh-f6p8-pj2c | Medium | 0.7% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5365, GHSA-mg4m-v9fc-9hcc | Medium | 0.7% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5364, GHSA-v9h6-53fx-gh4j | Medium | 0.8% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5363, GHSA-gpq5-vqvx-ch9j | Medium | 0.7% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
WPGlobus plugin Stored XSS & CSRF security vulnerability CVE-2018-5362, GHSA-599g-r6x7-jm4x | Medium | 0.8% | 12 Jan, 2018 | Packagist wpglobus/wpglobus |
Magento Cross-Site Request Forgery (CSRF) CVE-2018-5301, GHSA-w3mq-67mw-3p9f | Medium | 0.4% | 08 Jan, 2018 | Packagist magento/community-edition |
Fork CMS XSS Vulnerability CVE-2018-5215, GHSA-8fjq-cpr7-cmfp | Medium | 0.5% | 04 Jan, 2018 | Packagist forkcms/forkcms |
Mautic users able to download any files from server using filemanager CVE-2017-1000490, GHSA-qpgw-2c72-4c89 | Medium | 1.4% | 03 Jan, 2018 | Packagist mautic/core |
Inline JS XSS vulnerability in Mautic CVE-2017-1000488, GHSA-qjhr-c23f-w76q | Medium | 0.8% | 03 Jan, 2018 | Packagist mautic/core |
Stored XSS in LavaLite 5.2.4 CVE-2017-1000467, GHSA-h7vh-6gmm-g7h9 | Medium | 0.7% | 03 Jan, 2018 | Packagist lavalite/cms |
QuickApps CMS Cross-site Scripting CVE-2017-1000495, GHSA-825g-f3g2-6vxf | Medium | 0.6% | 03 Jan, 2018 | Packagist quickapps/cms |
eZ Publish Cross-site Scripting (XSS) vulnerability CVE-2017-1000431, GHSA-m98q-p5gq-q5ff | Medium | 0.7% | 02 Jan, 2018 | Packagist ezsystems/ezpublish-legacy |
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar CVE-2017-1000442, GHSA-j2fp-9wp5-mg66 | Medium | 0.5% | 02 Jan, 2018 | Packagist passbolt/passbolt_api |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-17971, GHSA-qjq9-wx5j-jrg6 | Medium | 1.0% | 29 Dec, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS XSS Vulnerability CVE-2017-17431, GHSA-pwr7-j6g3-hmx6 | Medium | 0.7% | 05 Dec, 2017 | Packagist genix/cms |
TeamPass Improper Privilege Management CVE-2017-15053, GHSA-xvjf-394g-phrr | Medium | 0.9% | 27 Nov, 2017 | Packagist nilsteampassnet/teampass |
TeamPass Improper Privilege Management CVE-2017-15052, GHSA-5qr3-4839-88gf | Medium | 0.9% | 27 Nov, 2017 | Packagist nilsteampassnet/teampass |
TeamPass stored cross-site scripting (XSS) vulnerability CVE-2017-15051, GHSA-r68m-4v39-cf43 | Medium | 1.0% | 27 Nov, 2017 | Packagist nilsteampassnet/teampass |
Moodle Exposure of Sensitive Information to an Unauthorized Actor CVE-2017-15110, GHSA-rjh8-w8jg-xwq5 | Medium | 1.2% | 20 Nov, 2017 | Packagist moodle/moodle |
Securimage HTML Injection CVE-2017-14077, GHSA-q6v4-xjp2-8ggv | Medium | 0.8% | 18 Nov, 2017 | Packagist dapphp/securimage |
filp whoops Cross-site Scripting vulnerability CVE-2017-16880, GHSA-2jjm-6whx-p8w4 | Medium | 0.8% | 17 Nov, 2017 | Packagist filp/whoops |
October CMS XSS CVE-2017-1000193, GHSA-3p6c-9xhm-8x7h | Medium | 1.0% | 17 Nov, 2017 | Packagist october/october |
Kirby XSS Vulnerability CVE-2017-16807, GHSA-275c-v3rc-xghx | Medium | 2.4% | 13 Nov, 2017 | Packagist getkirby/cms |
Bolt Improper Access Control CVE-2017-16754, GHSA-wr23-m9m2-jjf4 | Medium | 1.8% | 10 Nov, 2017 | Packagist bolt/bolt |
LibreNMS Arbitrary File Read CVE-2017-16759, GHSA-4ccx-wjqp-5fww | Medium | 2.2% | 09 Nov, 2017 | Packagist librenms/librenms |