Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Dolibarr allows password changes without supplying the current password CVE-2017-8879, GHSA-5x4j-xcmv-v3q2 | Medium | 0.4% | 10 May, 2017 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-7887, GHSA-x2fq-gq6c-hp44 | Medium | 0.9% | 10 May, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS Cross-site Scripting CVE-2017-8780, GHSA-5hf2-7xf4-w3j6 | Medium | 0.6% | 04 May, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) CVE-2017-8762, GHSA-4399-46r4-5rmv | Medium | 0.5% | 03 May, 2017 | Packagist genix/cms |
GeniXCMS Mailbox validation logic vulnerability CVE-2017-8388, GHSA-559c-w54x-8342 | Medium | 1.6% | 01 May, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) CVE-2017-8376, GHSA-52xr-wx26-9rfg | Medium | 0.6% | 01 May, 2017 | Packagist genix/cms |
Craft CMS subject to URL forgery CVE-2017-8385, GHSA-j27g-r58q-624w | Medium | 1.0% | 01 May, 2017 | Packagist craftcms/cms |
Craft CMS XSS Vulnerability CVE-2017-8384, GHSA-9mcw-mwxv-grwj | Medium | 0.8% | 01 May, 2017 | Packagist craftcms/cms |
Craft CMS Unauthorized View CVE-2017-8383, GHSA-7qq6-fgpw-xw45 | Medium | 1.2% | 01 May, 2017 | Packagist craftcms/cms |
Canvs Canvas Cross-site Scripting (XSS) via title and content fields CVE-2017-8298, GHSA-3657-q433-mmpx | Medium | 0.6% | 27 Apr, 2017 | Packagist austintoddj/canvas |
Craft CMS XSS Vulnerability CVE-2017-8052, GHSA-xv5f-2997-qhrq | Medium | 0.8% | 22 Apr, 2017 | Packagist craftcms/cms |
Moodle Improper Access Control CVE-2016-3733, GHSA-gr8j-qm8r-rfgg | Medium | 1.2% | 20 Apr, 2017 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-3732, GHSA-5282-96ff-xx3h | Medium | 1.5% | 20 Apr, 2017 | Packagist moodle/moodle |
Moodle Improper Access Control CVE-2016-3729, GHSA-g96h-wvrm-c2ww | Medium | 1.3% | 20 Apr, 2017 | Packagist moodle/moodle |
MantisBT XSS via my_view_page.php and view_user_page.php CVE-2017-7897, GHSA-8r2m-qhff-jm2c | Medium | 1.8% | 18 Apr, 2017 | Packagist mantisbt/mantisbt |
Concrete CMS vulnerable to cross-site scripting (XSS) CVE-2017-7725, GHSA-2mvg-c6mg-3q63 | Medium | 2.8% | 13 Apr, 2017 | Packagist concrete5/concrete5 |
TeamPass vulnerable to Cross-site Scripting CVE-2015-7562, GHSA-48q3-m4hf-56c9 | Medium | 1.8% | 12 Apr, 2017 | Packagist nilsteampassnet/teampass |
Magmi XSS Vulnerability CVE-2017-7391, GHSA-r8vh-cm9f-rc29 | Medium | 8.3% | 01 Apr, 2017 | Packagist dweeves/magmi |
SocialNetwork Cross-Site Scripting (XSS) vulnerability CVE-2017-7390, GHSA-3fm8-7gpf-p8fm | Medium | 0.6% | 01 Apr, 2017 | Packagist movingbytes/social-network |
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php CVE-2017-7309, GHSA-4w6c-3hcx-rfj5 | Medium | 57.3% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
MantisBT XSS via move_attachments_page.php CVE-2017-7241, GHSA-x53v-v9xp-gf6g | Medium | 0.9% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
MantisBT XSS via adm_config_report.php's action parameter CVE-2017-6973, GHSA-v7qf-22rw-chph | Medium | 0.9% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
Moodle Cross-site Scripting in the Course summary filter of the Add a new course CVE-2017-7298, GHSA-4m6v-x9fj-847j | Medium | 0.8% | 29 Mar, 2017 | Packagist moodle/moodle |
Yii Framework Reflected XSS CVE-2017-7271, GHSA-4xh9-5vh8-3p58 | Medium | 1.0% | 27 Mar, 2017 | Packagist yiisoft/yii2 |
Moodle XSS in attachments to evidence of prior learning CVE-2017-2645, GHSA-9cg4-4f87-jhm3 | Medium | 1.1% | 26 Mar, 2017 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2017-2644, GHSA-93gj-rg98-h7mm | Medium | 1.1% | 26 Mar, 2017 | Packagist moodle/moodle |
Moodle Global search displays user names for unauthenticated users CVE-2017-2643, GHSA-98mf-mqw9-9q8q | Medium | 1.6% | 26 Mar, 2017 | Packagist moodle/moodle |
Pi Cross-site Scripting vulnerability CVE-2017-7251, GHSA-9v3w-m552-m6ff | Medium | 1.0% | 23 Mar, 2017 | Packagist pi/pi |
imdbphp Cross-Site Scripting (XSS) CVE-2017-7204, GHSA-8jxq-gpmr-h4g4 | Medium | 0.7% | 21 Mar, 2017 | Packagist imdbphp/imdbphp |
TYPO3 Information Disclosure Vulnerability CVE-2017-6370, GHSA-87hc-phmj-rhgh | Medium | 1.0% | 17 Mar, 2017 | Packagist typo3/cms |
BuddyPress Docs plugin Improper Privilege Management CVE-2017-6954, GHSA-9wf6-88x4-6xvj | Medium | 1.1% | 17 Mar, 2017 | Packagist buddypress/buddypress |
Silverstripe CMS XSS Vulnerability CVE-2017-5197, GHSA-xmjh-wjc5-wg4h | Medium | 0.8% | 06 Mar, 2017 | Packagist silverstripe/cms |
INTER-Mediator Cross-Site Scripting (XSS) CVE-2017-6484, GHSA-w969-pq6x-267j | Medium | 0.7% | 05 Mar, 2017 | Packagist inter-mediator/inter-mediator |
PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability CVE-2017-6099, GHSA-p4g7-wjhq-9r2h | Medium | 1.2% | 24 Feb, 2017 | Packagist paypal/merchant-sdk-php |
MantisBT XSS through weak CSP when using Gravatar plugin CVE-2016-7111, GHSA-8vx9-hcvq-gfv8 | Medium | 1.0% | 17 Feb, 2017 | Packagist mantisbt/mantisbt |
Incorrect signature verification in SimpleSAMLphp CVE-2016-9955, GHSA-p9cm-r7jg-8q3g | Medium | 1.2% | 17 Feb, 2017 | Packagist simplesamlphp/simplesamlphp |
XMPP Clients User Impersonation Vulnerability in Movim Moxl CVE-2017-5605, GHSA-hq38-v658-g3wp | Medium | 0.9% | 09 Feb, 2017 | Packagist movim/moxl |
SimpleSAMLphp Information leakage issue in the sanitycheck module CVE-2016-3124, GHSA-9327-mqm6-x97j | Medium | 1.3% | 07 Feb, 2017 | Packagist simplesamlphp/simplesamlphp |
TYPO3 Backend component Cross-site scripting (XSS) vulnerability CVE-2016-4056, GHSA-ffcm-vhcw-p32r | Medium | 1.1% | 23 Jan, 2017 | Packagist typo3/cms |
Moodle Cross-site Scripting in assignment submission page CVE-2017-2578, GHSA-6r76-f8c8-fh7p | Medium | 0.9% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Incorrect sanitation of attributes in forums CVE-2017-2576, GHSA-cjrf-xg77-chpw | Medium | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Unauthenticated Access CVE-2016-8642, GHSA-x32v-7qw8-cpq8 | Medium | 1.2% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-5014, GHSA-c4cq-v4wp-28hg | Medium | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Does Not Escape Characters In Email Headers CVE-2016-5013, GHSA-2hh3-jmv8-5fmx | Medium | 1.1% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Glossary search displays entries without checking user permissions to view them CVE-2016-5012, GHSA-g58x-p3pj-rg52 | Medium | 1.1% | 20 Jan, 2017 | Packagist moodle/moodle |
Local file disclosure in PHPMailer CVE-2017-5223, GHSA-4x5h-cr29-fhp6 | Medium | 2.1% | 16 Jan, 2017 | Packagist phpmailer/phpmailer |
phpMyAdmin Denial of Service (DoS) CVE-2016-9860, GHSA-3hw5-fffc-qrg4 | Medium | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-9857, GHSA-hmmx-wxh4-9w8w | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-9856, GHSA-j8mx-x32r-5rf4 | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin path disclosure CVE-2016-9853, GHSA-rmmf-5xhh-gg27 | Medium | 2.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |