Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Typo3 Open Redirect In Frontend Rendering CVE-2014-9508, GHSA-v6xv-rmqc-wcc8 | Medium | 1.7% | 04 Jan, 2015 | Packagist typo3/cms |
phpThumb is vulnerable to Server-Side Request Forgery (SSRF) CVE-2013-6919, GHSA-3747-gjc9-vvg6 | Medium | 1.2% | 27 Dec, 2014 | Packagist james-heinrich/phpthumb |
Symfony Denial of Service Via Long Password Hashing CVE-2013-5958, GHSA-cr49-fx2v-9p57 | Medium | 1.9% | 27 Dec, 2014 | Packagist symfony/polyfill Packagist symfony/security Packagist symfony/symfony |
Subrion CMS Cross-site scripting in search CVE-2014-9120, GHSA-xjr9-2wf2-3v4w | Medium | 1.0% | 10 Dec, 2014 | Packagist intelliants/subrion |
Moodle allows attackers to trigger the generation of arbitrary messages CVE-2014-9060, GHSA-c87j-9rrq-h3j8 | Medium | 2.1% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not provide charset information in HTTP headers CVE-2014-9059, GHSA-crcq-pw8h-9xwf | Medium | 1.8% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attacks to obtain sensitive information CVE-2014-7848, GHSA-47cw-whh9-j2fq | Medium | 2.1% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2014-7847, GHSA-6vjg-2q57-rgfw | Medium | 2.4% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not consider the moodle/tag:edit capability before adding a tag CVE-2014-7846, GHSA-468q-9cmp-76wc | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module CVE-2014-7838, GHSA-43r4-vm25-qm78 | Medium | 1.0% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to remove wiki pages CVE-2014-7837, GHSA-p3hj-cfhm-7g6v | Medium | 1.9% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2014-7836, GHSA-wpq5-q3mj-8f3r | Medium | 1.0% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not verify group permissions CVE-2014-7834, GHSA-557f-2hv4-7jjm | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive information CVE-2014-7833, GHSA-jq7x-gm9r-v8m7 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to bypass the mod/lti:view capability requirement CVE-2014-7832, GHSA-mphj-h2fc-62x3 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle exposes hidden grades to students CVE-2014-7831, GHSA-59j6-8g7w-prf7 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2683, GHSA-5wm2-38q5-5rxv | Medium | 2.4% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2682, GHSA-gp39-h9c2-qw79 | Medium | 2.2% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2681, GHSA-43xg-87xw-jpv8 | Medium | 2.6% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
phpMyAdmin micro history Implementation XSS Vulnerability CVE-2014-6300, GHSA-6wfj-2mw7-p5cg | Medium | 1.9% | 08 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page CVE-2014-8326, GHSA-pvr5-84gr-g985 | Medium | 1.5% | 05 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders CVE-2014-8327, GHSA-xwq4-2cwr-fv2q | Medium | 1.1% | 27 Oct, 2014 | Packagist co-stack/fal_sftp Packagist vertexvaar/falsftp |
Zend Access Restriction Bypass CVE-2014-8088, GHSA-f6rc-rh43-h8gr | Medium | 2.5% | 22 Oct, 2014 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting CVE-2014-6296, GHSA-mqhg-c7w9-w3cv | Medium | 0.9% | 03 Oct, 2014 | Packagist jbartels/wec-map Packagist web-tp3/wec_map |
TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users CVE-2014-6292, GHSA-377v-8637-6vq6 | Medium | 1.3% | 03 Oct, 2014 | Packagist in2code/femanager |
Moodle allows discovery of an author's username CVE-2014-3617, GHSA-p5j7-26wj-423j | Medium | 1.1% | 15 Sep, 2014 | Packagist moodle/moodle |
The Preview plugin in CKEditor allows Cross-site scripting (XSS) CVE-2014-5191, GHSA-v27h-j97p-wqmx | Medium | 1.8% | 07 Aug, 2014 | Packagist ckeditor/ckeditor |
Moodle does not enforce the moodle/site:accessallgroups capability requirement CVE-2014-3553, GHSA-mg69-5q59-8jcg | Medium | 1.0% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3548, GHSA-f66h-6mj2-rwj2 | Medium | 1.8% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3547, GHSA-hwjv-mc78-cccj | Medium | 1.2% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle allows attackers to obtain username and course information CVE-2014-3546, GHSA-4c5g-w3gf-rf4f | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle remote code execution via quiz questions CVE-2014-3545, GHSA-3m99-h3hp-w9j7 | Medium | 1.7% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle Arbitrary File Read via XML External Entity vulnerability CVE-2014-3543, GHSA-27j2-c838-c3qg | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle allows remote attackers to read arbitrary files CVE-2014-3542, GHSA-xmwv-mqh8-4xgw | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
GeSHi vulnerable to Cross-site Scripting CVE-2012-3522, GHSA-f3f3-5q5j-6v47 | Medium | 1.2% | 13 Jun, 2014 | Packagist geshi/geshi |
ImpressCMS Cross-site scripting Vulnerability CVE-2014-4036, GHSA-f5jh-q6mp-9c8p | Medium | 1.0% | 11 Jun, 2014 | Packagist impresscms/impresscms |
Typo3 Information Disclosure CVE-2014-3946, GHSA-vccp-5v5h-p8m6 | Medium | 1.1% | 03 Jun, 2014 | Packagist typo3/cms |
TYPO3 Improper Session Invalidation CVE-2014-3944, GHSA-9j8h-xrgj-7gw2 | Medium | 1.3% | 03 Jun, 2014 | Packagist typo3/cms |
Typo3 Host Header Spoofing Vulnerability CVE-2014-3941, GHSA-594h-cx6w-p4jf | Medium | 2.7% | 03 Jun, 2014 | Packagist typo3/cms |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-0218, GHSA-ch68-5r37-p7c3 | Medium | 1.8% | 27 May, 2014 | Packagist moodle/moodle |
Moodle does not check for the moodle/course:viewhiddencourses capability CVE-2014-0217, GHSA-c3vx-v4x8-x894 | Medium | 1.9% | 27 May, 2014 | Packagist moodle/moodle |
Moodle does not properly restrict file access CVE-2014-0216, GHSA-8rc7-4qfv-4484 | Medium | 2.1% | 27 May, 2014 | Packagist moodle/moodle |
Moodle Reveals Student Information Meant To Be Anonymous CVE-2014-0215, GHSA-2fmv-j5xj-4fmq | Medium | 1.7% | 27 May, 2014 | Packagist moodle/moodle |
Moodle creates a MoodleMobile web-service token with an infinite lifetime CVE-2014-0214, GHSA-48rq-vj58-2mh6 | Medium | 3.0% | 27 May, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2014-0213, GHSA-h75f-hjcr-cvh8 | Medium | 1.0% | 27 May, 2014 | Packagist moodle/moodle |
TYPO3 Improper Access Management in the File Abstraction Layer CVE-2013-4320, GHSA-p9jg-9w87-6rg4 | Medium | 1.0% | 20 May, 2014 | Packagist typo3/cms-core |
Typo3 Backend History Module Vulnerable to XSS CVE-2012-6146, GHSA-2hp4-8h6h-93rr | Medium | 1.0% | 20 May, 2014 | Packagist typo3/cms |
Cross-site scripting vulnerability in includes/actions/InfoAction.php CVE-2014-2853, GHSA-6h86-9r5g-f2h5 | Medium | 2.4% | 29 Apr, 2014 | Packagist mediawiki/core |
DOMPDF Arbitrary File Read CVE-2014-2383, GHSA-qr6q-w4gj-3865 | Medium | 39.4% | 28 Apr, 2014 | Packagist dompdf/dompdf |
Moodle attackers to modify grade metadata CVE-2014-2572, GHSA-267j-cwvg-j28c | Medium | 1.1% | 24 Mar, 2014 | Packagist moodle/moodle |