Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms CVE-2010-3659, GHSA-jr79-65xr-q7cx | Medium | 1.3% | 20 Oct, 2017 | Packagist typo3/cms-backend |
Shopware XSS Vulnerability CVE-2017-15374, GHSA-mvrx-cmqw-2jgj | Medium | 4.8% | 16 Oct, 2017 | Packagist shopware/shopware |
Silverstripe CMS User Enumeration CVE-2017-12849, GHSA-fwhr-g5r4-xgxf | Medium | 1.1% | 12 Oct, 2017 | Packagist silverstripe/cms |
OctoberCMS Cross-Site Scripting CVE-2017-15284, GHSA-gvgf-fp4m-2hw6 | Medium | 4.0% | 12 Oct, 2017 | Packagist october/rain |
TeamPass Cross-Site Scripting (XSS) CVE-2017-15278, GHSA-28pv-2j2h-fmhc | Medium | 0.9% | 12 Oct, 2017 | Packagist nilsteampassnet/teampass |
eGroupware Community Edition Stored XSS vulnerability CVE-2017-14920, GHSA-qfg7-wc25-r3j2 | Medium | 1.1% | 30 Sep, 2017 | Packagist egroupware/egroupware |
Laravel Sensitive Data Exposure CVE-2017-14775, GHSA-c2v7-j5gq-wcq4 | Medium | 1.2% | 28 Sep, 2017 | Packagist illuminate/auth Packagist laravel/framework |
GeniXCMS Cross-site Scripting (XSS) via the Menu ID field CVE-2017-14765, GHSA-3c7g-p9jx-8cgm | Medium | 0.7% | 27 Sep, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) via id parameter CVE-2017-14762, GHSA-jgc6-jr94-h442 | Medium | 0.7% | 27 Sep, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter CVE-2017-14761, GHSA-xf2g-c66g-5f5r | Medium | 0.7% | 27 Sep, 2017 | Packagist genix/cms |
phpBB Open Redirect CVE-2015-3880, GHSA-hwq7-cvp8-6hm3 | Medium | 2.0% | 19 Sep, 2017 | Packagist phpbb/phpbb |
Moodle sensitive information disclosure CVE-2017-12157, GHSA-gw95-48xq-gqf9 | Medium | 1.1% | 18 Sep, 2017 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2017-12156, GHSA-7mfw-g8x4-rq2w | Medium | 1.2% | 18 Sep, 2017 | Packagist moodle/moodle |
Silverstripe CMS XSS Vulnerability CVE-2017-14498, GHSA-j696-6m57-mcrv | Medium | 1.3% | 15 Sep, 2017 | Packagist silverstripe/cms |
Fastly Magento2 sensitive information disclosure CVE-2017-13761, GHSA-vpq9-c67q-23fq | Medium | 1.2% | 14 Sep, 2017 | Packagist fastly/magento2 |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-14241, GHSA-h3vg-4x76-v28w | Medium | 0.7% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Dolibarr cross-site scripting (XSS) vulnerability CVE-2017-14239, GHSA-74c7-r9m3-hvj4 | Medium | 0.7% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS denial of service (account blockage) CVE-2017-14231, GHSA-2m9r-pm7q-wr6f | Medium | 1.4% | 10 Sep, 2017 | Packagist genix/cms |
Centreon Cross-site Scripting Vulnerability CVE-2015-7672, GHSA-8w3f-236q-53m4 | Medium | 1.3% | 07 Sep, 2017 | Packagist centreon/centreon |
SimpleSAMLphp allows timing side-channel attacks CVE-2017-12872, GHSA-v882-949x-6v28 | Medium | 1.5% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Incorrect IV generation for encryption CVE-2017-12871, GHSA-ww3w-592j-5qrw | Medium | 0.5% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Unauthenticated encryption in CBC mode CVE-2017-12870, GHSA-44pr-mgcp-v36r | Medium | 0.9% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Invalid token creation and validation CVE-2017-12867, GHSA-597c-mh7m-48v7 | Medium | 1.3% | 29 Aug, 2017 | Packagist simplesamlphp/simplesamlphp |
zend-diactoros Cross-site Scripting (XSS) CVE-2015-3257, GHSA-rh3c-7wqx-6w95 | Medium | 0.9% | 25 Aug, 2017 | Packagist zendframework/zend-diactoros |
MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php CVE-2017-12062, GHSA-w93w-rx52-24qh | Medium | 3.9% | 01 Aug, 2017 | Packagist mantisbt/mantisbt |
MantisBT XSS allows unsanitized input via admin/install.php CVE-2017-12061, GHSA-98xr-mmq5-vc5h | Medium | 2.9% | 01 Aug, 2017 | Packagist mantisbt/mantisbt |
Yii Cross-site Scripting Framework vulnerability CVE-2017-11516, GHSA-4c64-w8fg-xcq2 | Medium | 0.8% | 21 Jul, 2017 | Packagist yiisoft/yii2 Packagist yiisoft/yii2-dev |
Cross-site scripting in PHPMailer CVE-2017-11503, GHSA-58mj-pw57-4vm2 | Medium | 2.4% | 20 Jul, 2017 | Packagist phpmailer/phpmailer |
Bolt stored Cross-site Scripting (XSS) CVE-2017-11128, GHSA-5r9j-698h-2h5m | Medium | 0.6% | 17 Jul, 2017 | Packagist bolt/bolt |
Bolt CMS Stored XSS CVE-2017-11127, GHSA-hqxc-w9vw-3hp5 | Medium | 0.6% | 17 Jul, 2017 | Packagist bolt/bolt |
Moodle Improper Privilege Management CVE-2017-7532, GHSA-jjhx-5jff-rc8m | Medium | 1.0% | 17 Jul, 2017 | Packagist moodle/moodle |
Moodle Information Disclosure CVE-2017-7531, GHSA-w2pj-r8m3-r4jc | Medium | 0.9% | 17 Jul, 2017 | Packagist moodle/moodle |
Moodle User fullname disclosure on user preferences page CVE-2017-2642, GHSA-54r2-r67g-fr9m | Medium | 1.2% | 17 Jul, 2017 | Packagist moodle/moodle |
phpMyAdmin CSS Injection Vulnerability CVE-2017-1000015, GHSA-3fgq-cmr4-97rr | Medium | 1.2% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Open Redirect CVE-2017-1000013, GHSA-5h5m-fj48-qpjw | Medium | 1.1% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
Subrion Cross-site scripting (XSS) vulnerability CVE-2017-10795, GHSA-2xv7-fwh6-x7fc | Medium | 1.1% | 02 Jul, 2017 | Packagist intelliants/subrion |
Craft CMS XSS Vulnerability CVE-2017-9516, GHSA-6pvw-hh48-jx7p | Medium | 2.8% | 08 Jun, 2017 | Packagist craftcms/cms |
Laravel does not properly constrain the host portion of a password-reset URL CVE-2017-9303, GHSA-rc8x-jrrc-frfv | Medium | 1.0% | 29 May, 2017 | Packagist illuminate/auth Packagist laravel/framework Packagist laravel/laravel |
Contao Core directory traversal vulnerability CVE-2015-0269, GHSA-4r6g-xhx7-fm36 | Medium | 2.1% | 26 May, 2017 | Packagist contao/core |
ViMbAdmin Cross-site Scripting Vulnerabilities CVE-2017-5870, GHSA-jj4j-cwgq-fx7g | Medium | 1.0% | 23 May, 2017 | Packagist opensolutions/vimbadmin |
MantisBT vulnerable to CSRF and Open Redirect attacks CVE-2017-7620, GHSA-9x76-mp7r-2xc5 | Medium | 1.4% | 21 May, 2017 | Packagist mantisbt/mantisbt |
MODX Revolution XSS via HTTP Host header CVE-2017-9071, GHSA-p2j4-vrgx-96qg | Medium | 0.6% | 18 May, 2017 | Packagist modx/revolution |
MODX Revolution cross-site scripting vulnerability CVE-2017-9070, GHSA-7hhg-xj2h-5vq9 | Medium | 0.6% | 18 May, 2017 | Packagist modx/revolution |
MODX Revolution Reflected XSS CVE-2017-9068, GHSA-vrw6-7vgj-vj7x | Medium | 0.7% | 18 May, 2017 | Packagist modx/revolution |
admidio CSRF Vulnerability CVE-2017-8382, GHSA-c4v8-2hg8-jv77 | Medium | 2.6% | 16 May, 2017 | Packagist admidio/admidio |
Moodle Cross-Site Request Forgery (CSRF) CVE-2017-7491, GHSA-3hmr-948v-5qgq | Medium | 0.5% | 15 May, 2017 | Packagist moodle/moodle |
Moodle Unauthorized searching of arbitrary blogs by typing full url CVE-2017-7490, GHSA-9x63-m3cc-qf3g | Medium | 1.0% | 15 May, 2017 | Packagist moodle/moodle |
Moodle External blog editing takeover CVE-2017-7489, GHSA-m34m-fgh4-v7cx | Medium | 1.2% | 15 May, 2017 | Packagist moodle/moodle |
baserCMS Cross-site Scripting vulnerability CVE-2016-4880, GHSA-mxfv-c8p8-qw5h | Medium | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
ADOdb Cross-site scripting vulnerability in old test script CVE-2016-4855, GHSA-hhfw-xxhm-pf32 | Medium | 1.9% | 12 May, 2017 | Packagist adodb/adodb-php |