Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyAdmin Bypass logout timeout CVE-2016-9851, GHSA-r2vw-p77f-vc27 | Medium | 1.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cryptographic Vulnerability CVE-2016-9847, GHSA-9xhq-pm7v-693p | Medium | 2.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial of service (DOS) attack with dbase extension CVE-2016-6632, GHSA-426q-975p-w5cr | Medium | 2.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Reflected File Download attack CVE-2016-6628, GHSA-phhm-63xx-v9rr | Medium | 1.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin allows to detect if user is logged in CVE-2016-6625, GHSA-r643-7xfg-ppc5 | Medium | 1.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention CVE-2016-6624, GHSA-mhxj-6vf8-mwv3 | Medium | 2.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2016-6623, GHSA-2mcj-3r3r-v5wm | Medium | 1.7% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2016-6622, GHSA-qf3f-7x69-qfv3 | Medium | 1.8% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial of service (DOS) attack in transformation feature CVE-2016-6618, GHSA-rv6m-chvv-wmxg | Medium | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Local file exposure through symlinks with UploadDir CVE-2016-6613, GHSA-6j2v-g9rg-qcm5 | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Local file exposure CVE-2016-6612, GHSA-fcgm-62p3-f7cm | Medium | 1.7% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site Scripting (XSS) CVE-2016-6608, GHSA-jfmj-27fp-qp67 | Medium | 1.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
Drupal Denial of service via transliterate mechanism CVE-2016-9452, GHSA-jpj8-49hr-wcwv | Medium | 1.7% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Open Redirect CVE-2016-9451, GHSA-66gr-xrcf-8jpq | Medium | 1.5% | 25 Nov, 2016 | Packagist drupal/core |
Drupal sensitive information disclosure CVE-2016-9449, GHSA-p745-347h-hjfw | Medium | 1.9% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
Moodle XSS Vulnerability CVE-2016-9188, GHSA-7ghm-fp7p-qvjq | Medium | 1.5% | 04 Nov, 2016 | Packagist moodle/moodle |
Drupal Unprivileged access to config export CVE-2016-7572, GHSA-fmqh-2j2x-vgp3 | Medium | 1.7% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Cross-site scripting (XSS) vulnerability CVE-2016-7571, GHSA-vhg8-x858-7wq6 | Medium | 1.5% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit CVE-2016-7570, GHSA-6g9h-6v79-w4pc | Medium | 1.7% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Views can allow unauthorized users to see Statistics information CVE-2016-6212, GHSA-rfxx-gxwc-923c | Medium | 2.2% | 09 Sep, 2016 | Packagist drupal/core Packagist drupal/drupal |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5733, GHSA-cr65-p662-fx5c | Medium | 2.2% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-5732, GHSA-3q28-xfw3-2q35 | Medium | 1.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site scripting (XSS) vulnerability CVE-2016-5731, GHSA-mwm8-36c5-j5cf | Medium | 1.8% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin full path disclosure vulnerability CVE-2016-5730, GHSA-wm9c-vcv2-vpqc | Medium | 2.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5705, GHSA-6q2j-8h8q-46mr | Medium | 1.3% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-5704, GHSA-gcvp-cwgw-wx8j | Medium | 1.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5701, GHSA-rh74-5835-jpxp | Medium | 1.5% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
Moodle sensitive information disclosure CVE-2016-2190, GHSA-r9pc-g29w-f86j | Medium | 1.9% | 22 May, 2016 | Packagist moodle/moodle |
Moodle External function mod_assign_save_submission does not check due dates CVE-2016-2159, GHSA-cw72-69wq-f9f2 | Medium | 1.4% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive category-detail information CVE-2016-2158, GHSA-m882-j7gq-v9p7 | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle provides calendar-event data without considering whether an activity is hidden CVE-2016-2156, GHSA-h8vc-v44p-5r2q | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to modify "Exclude grade" settings CVE-2016-2155, GHSA-32hg-73hp-vwc8 | Medium | 1.6% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to discover hidden course names CVE-2016-2154, GHSA-fmq9-58q4-xjw5 | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle Reflected XSS in mod_data advanced search CVE-2016-2153, GHSA-mj85-3hqq-r6r9 | Medium | 1.5% | 22 May, 2016 | Packagist moodle/moodle |
Moodle XSS from profile fields from external db CVE-2016-2152, GHSA-6mxm-wpqv-675h | Medium | 1.5% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to discover student e-mail addresses CVE-2016-2151, GHSA-r3fc-hx6q-g6cq | Medium | 1.6% | 22 May, 2016 | Packagist moodle/moodle |
MediaElement Vulnerable to Reflected XSS CVE-2016-4567, GHSA-277w-qpxr-2549 | Medium | 7.4% | 22 May, 2016 | Packagist contao-components/mediaelement Packagist contao/core npm mediaelement |
Silverstripe CMS XSS Vulnerability CVE-2015-8606, GHSA-gvc8-xjfp-6569 | Medium | 1.5% | 13 Apr, 2016 | Packagist silverstripe/cms |
Drupal sensitive information disclosure CVE-2016-3170, GHSA-pqv4-xgqh-j8vh | Medium | 2.1% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Reflected file download vulnerability CVE-2016-3168, GHSA-qqxc-cppg-4xp8 | Medium | 2.5% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal CRLF injection vulnerability in the drupal_set_header function CVE-2016-3166, GHSA-fg5q-r2q5-qmh3 | Medium | 1.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
phpMyAdmin Improper Input Validation CVE-2016-2562, GHSA-w8qg-j9fp-hrjf | Medium | 0.8% | 01 Mar, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser CVE-2016-2559, GHSA-7rf8-9r8f-qf59 | Medium | 1.7% | 01 Mar, 2016 | Packagist phpmyadmin/phpmyadmin |
Moodle Cross-site scripting (XSS) vulnerability in course management search CVE-2016-0725, GHSA-gj2j-ppjq-9pjg | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-0724, GHSA-hjrj-7wcj-7j3c | Medium | 1.9% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to bypass intended access restrictions CVE-2015-5342, GHSA-6xpm-q8x9-j3rw | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to read SCORM contents CVE-2015-5341, GHSA-c2r4-f8qv-2v7v | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2015-5340, GHSA-mmvj-j7hq-rx85 | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle does not properly implement group-based access restrictions CVE-2015-5339, GHSA-gmhr-6f43-7qpj | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2015-5337, GHSA-2hw6-6rgf-726v | Medium | 1.1% | 22 Feb, 2016 | Packagist moodle/moodle |