Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-5336, GHSA-grvw-qq2j-r898 | Medium | 0.9% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-5335, GHSA-hpmv-wvq3-gj27 | Medium | 0.7% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle improper access control CVE-2015-5331, GHSA-m7cc-6vhg-39wr | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-5269, GHSA-5729-822w-j342 | Medium | 1.2% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle mishandles group-based authorization checks CVE-2015-5268, GHSA-h34c-px28-rjgw | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to obtain manager privileges CVE-2015-5266, GHSA-454r-4cjv-vc9h | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to delete files CVE-2015-5265, GHSA-44xp-wj24-9xxj | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to enter additional answer attempts CVE-2015-5264, GHSA-mm9q-3847-m48x | Medium | 1.4% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-3275, GHSA-6922-5v25-p8jg | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-3274, GHSA-f7qm-q26p-6rr2 | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
phpMyAdmin XSS Vulnerability CVE-2016-2040, GHSA-pw34-qf6c-84fc | Medium | 1.6% | 20 Feb, 2016 | Packagist phpmyadmin/phpmyadmin |
Dolibarr ERP and CRM contain XSS Vulnerabilities CVE-2016-1912, GHSA-jh5p-wpg2-8rgv | Medium | 1.4% | 15 Jan, 2016 | Packagist dolibarr/dolibarr |
Symphony CMS XSS Vulnerabilities CVE-2015-8766, GHSA-4c5w-qqfg-grf3 | Medium | 1.8% | 08 Jan, 2016 | Packagist symphonycms/symphony-2 |
TYPO3 allows remote attackers to embed Flash videos from external domain CVE-2015-8760, GHSA-3f58-74qw-ph75 | Medium | 1.4% | 08 Jan, 2016 | Packagist typo3/cms |
TYPO3 Cross-site Scripting vulnerability CVE-2015-8759, GHSA-j5v7-9xr5-m7gx | Medium | 0.6% | 08 Jan, 2016 | Packagist typo3/cms |
TYPO3 CMS indexed search Cross-site Scripting vulnerability CVE-2015-8756, GHSA-xx7m-8rq2-cw2v | Medium | 0.8% | 08 Jan, 2016 | Packagist typo3/cms |
Typo3 XSS Vulnerability CVE-2015-8755, GHSA-56f9-5563-m2h7 | Medium | 1.1% | 08 Jan, 2016 | Packagist typo3/cms |
SMTP Injection in PHPMailer CVE-2015-8476, GHSA-738m-f33v-qc2r | Medium | 2.0% | 16 Dec, 2015 | Packagist phpmailer/phpmailer |
Symfony Session Fixation Vulnerability CVE-2015-8124, GHSA-j5jh-hpr4-h332 | Medium | 2.7% | 07 Dec, 2015 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
baserCMS Access Control Bypass CVE-2015-5640, GHSA-v9gf-98vr-mgp2 | Medium | 1.6% | 06 Oct, 2015 | Packagist baserproject/basercms |
phpMyAdmin ReCaptcha bypass CVE-2015-6830, GHSA-v6fh-vg22-r6cm | Medium | 10.4% | 14 Sep, 2015 | Packagist phpmyadmin/phpmyadmin |
October CMS XSS In Caption Tag of Profile CVE-2015-5612, GHSA-9hq8-v2jc-qj4r | Medium | 1.8% | 04 Sep, 2015 | Packagist october/october |
ZendXml and Zend Framework contain XXE and XEE Vulnerabilities CVE-2015-5161, GHSA-xp8p-9rq5-4wgv | Medium | 9.9% | 25 Aug, 2015 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 Packagist zendframework/zendxml |
ImpressCMS Path Traversal to Arbitrary File Delete CVE-2014-1836, GHSA-wcj4-ff9m-5r7g | Medium | 3.6% | 01 Jul, 2015 | Packagist impresscms/impresscms |
Silverstripe CMS Open Redirect CVE-2015-5062, GHSA-fh35-p8ph-p545 | Medium | 2.0% | 24 Jun, 2015 | Packagist silverstripe/cms Packagist silverstripe/framework |
Symfony Vulnerable to PHP Eval Injection CVE-2015-2308, GHSA-5c58-w9xc-qcj9 | Medium | 1.3% | 24 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability CVE-2015-3935, GHSA-6fw8-vf2x-4wpm | Medium | 1.9% | 10 Jun, 2015 | Packagist dolibarr/dolibarr |
Symfony Incorrect Access Control CVE-2015-4050, GHSA-qmqw-mpqp-mr54 | Medium | 8.2% | 02 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Moodle allows attackers to bypass file-management restrictions CVE-2015-3181, GHSA-622h-cjgg-5mx6 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive course-structure information CVE-2015-3180, GHSA-688p-pgj4-77hh | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers obtain full-name information CVE-2015-3176, GHSA-fqrg-vmvj-jv3x | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle Arbitrary Redirect CVE-2015-3175, GHSA-h798-h7ff-93xv | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to bypass a forced-password-change requirement CVE-2015-2272, GHSA-5659-g9p4-354f | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not consider the moodle/tag:flag capability CVE-2015-2271, GHSA-v3wp-35g3-m9mm | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive course information CVE-2015-2270, GHSA-fp4h-j22r-vwcv | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2015-2268, GHSA-36cm-vrqh-8p98 | Medium | 2.2% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to extract archives to arbitrary directories CVE-2015-2267, GHSA-cm4r-58pj-h2ph | Medium | 1.6% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information CVE-2015-2266, GHSA-35pr-gqm6-r366 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle directory traversal vulnerability CVE-2015-1493, GHSA-gphj-63h8-r9vq | Medium | 2.6% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-0218, GHSA-5jph-mvfm-r27p | Medium | 1.0% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2015-0217, GHSA-p497-37fc-xvvc | Medium | 2.2% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive calendar-event information CVE-2015-0215, GHSA-fr9m-pjmm-qx9f | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to bypass a messaging-disabled setting CVE-2015-0214, GHSA-4jm2-c9jr-6prf | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2015-0213, GHSA-hhq7-jf2p-hw9c | Medium | 1.0% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive information CVE-2015-0211, GHSA-frhc-9hwc-x7j3 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
concrete5 vulnerable to Cross-site Scripting CVE-2015-3989, GHSA-jxhp-rwqv-9fjj | Medium | 0.9% | 15 May, 2015 | Packagist concrete5/concrete5 |
Yii Framework Cross-site Scripting Vulnerability CVE-2015-3397, GHSA-w2xx-jp9f-gp8g | Medium | 2.4% | 14 May, 2015 | Packagist yiisoft/yii2 |
MAGMI cross-site scripting (XSS) CVE-2015-2068, GHSA-27v2-398x-f74x | Medium | 14.0% | 24 Feb, 2015 | Packagist dweeves/magmi |
MAGMI plugin for Magento Server Directory Traversal CVE-2015-2067, GHSA-c252-xc8v-mqmm | Medium | 38.5% | 24 Feb, 2015 | Packagist dweeves/magmi |
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect CVE-2015-1039, GHSA-33rh-5hvf-5jjp | Medium | 1.9% | 15 Jan, 2015 | Packagist zf-commons/zfc-user |