Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle's time-validation implementation allows bypassing intended restrictions CVE-2014-0127, GHSA-6p3g-hw27-qh44 | Medium | 1.5% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle allows attackers to modify the visibility of a badge CVE-2014-0129, GHSA-5rr5-fxhc-jv64 | Medium | 1.7% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle places a session key in a URL CVE-2014-0125, GHSA-j465-7mp6-3xg3 | Medium | 1.9% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2014-0126, GHSA-4wvg-7886-83gv | Medium | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive information CVE-2014-0124, GHSA-fc5p-vj3h-x7g4 | Medium | 1.7% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle allows bypass of intended access restrictions CVE-2014-0122, GHSA-f9m9-494r-w36p | Medium | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle does not properly restrict access CVE-2014-0123, GHSA-2vhr-4mhq-m35c | Medium | 1.5% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerabilities CVE-2013-7341, GHSA-j6c3-3c4w-qv8p | Medium | 2.4% | 24 Mar, 2014 | Packagist moodle/moodle Packagist typo3/cms |
SabreDAV Directory Traversal vulnerability CVE-2013-1939, GHSA-qg5v-jw6f-rpfj | Medium | 1.8% | 14 Mar, 2014 | Packagist sabre/dav |
CiviCRM SQL injection vulnerability via Quick Search API CVE-2013-4662, GHSA-4465-r2hg-v4rj | Medium | 1.0% | 29 Jan, 2014 | Packagist civicrm/civicrm-core |
Joomla! Cross-site Scripting vulnerability CVE-2013-5583, GHSA-5xmg-w578-gq5j | Medium | 1.5% | 29 Dec, 2013 | Packagist joomla/joomla-cms |
TYPO3 Improper Access Control vulnerability CVE-2013-7081, GHSA-r674-mc9p-hvw5 | Medium | 1.0% | 23 Dec, 2013 | Packagist typo3/cms-core |
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library CVE-2013-7080, GHSA-5fj8-wh3g-qvq2 | Medium | 1.2% | 23 Dec, 2013 | Packagist typo3/cms-core |
TYPO3 OpenID extension Open redirect vulnerability CVE-2013-7079, GHSA-838c-v5cq-hp33 | Medium | 1.2% | 23 Dec, 2013 | Packagist friendsoftypo3/openid |
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component CVE-2013-7075, GHSA-47ww-mq32-g4xw | Medium | 1.3% | 23 Dec, 2013 | Packagist typo3/cms |
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component CVE-2013-7073, GHSA-4rpv-g4gq-rh4m | Medium | 1.3% | 23 Dec, 2013 | Packagist typo3/cms |
TYPO3 Flow Cross-site scripting (XSS) vulnerability CVE-2013-7082, GHSA-vc74-c4m6-9979 | Medium | 1.2% | 21 Dec, 2013 | Packagist neos/flow Packagist typo3/flow |
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module CVE-2013-7077, GHSA-5cmc-r23m-hvrr | Medium | 1.2% | 21 Dec, 2013 | Packagist typo3/cms-core |
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor CVE-2013-4522, GHSA-vm9c-39jx-q45w | Medium | 1.5% | 26 Nov, 2013 | Packagist moodle/moodle |
Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability CVE-2013-4714, GHSA-h7jc-pg2r-mqj4 | Medium | 1.2% | 06 Nov, 2013 | Packagist tikiwiki/tiki-manager |
Moodle Authenticated Spelling Binary Remote Code Execution CVE-2013-3630, GHSA-wxqg-fg7v-mmc6 | Medium | 41.7% | 01 Nov, 2013 | Packagist moodle/moodle |
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS) CVE-2013-6289, GHSA-xc7q-q62f-wcvr | Medium | 1.8% | 28 Oct, 2013 | Packagist apache-solr-for-typo3/solr |
FriendsOfSymfony FOSUserBundle denial of service via login form CVE-2013-5750, GHSA-9mpf-g3fc-9rgv | Medium | 1.2% | 25 Sep, 2013 | Packagist friendsofsymfony/user-bundle |
Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting CVE-2013-5323, GHSA-6p8h-36qp-8h72 | Medium | 1.3% | 20 Aug, 2013 | Packagist sjbr/static-info-tables |
Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting CVE-2013-5100, GHSA-4mm3-xgc2-656r | Medium | 1.3% | 09 Aug, 2013 | Packagist jambagecom/div2007 |
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities CVE-2013-4997, GHSA-5gh4-v2ch-pcx4 | Medium | 1.5% | 31 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4942, GHSA-9ww8-j8j2-3788 | Medium | 1.2% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4941, GHSA-64r3-582j-frqm | Medium | 1.2% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4940, GHSA-x5hj-47vv-53p8 | Medium | 1.5% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
phpMyAdmin Global variables scope injection vulnerability CVE-2013-4729, GHSA-x962-w72p-mv7q | Medium | 1.1% | 04 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting CVE-2013-4744, GHSA-c5x3-gq36-prrp | Medium | 1.4% | 01 Jul, 2013 | Packagist oliverklee/phpunit |
Typo3 Backend History Module Vulnerable to SQL Injection CVE-2012-6144, GHSA-947m-vgqc-x6v4 | Medium | 2.2% | 01 Jul, 2013 | Packagist typo3/cms |
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class CVE-2013-2083, GHSA-m63h-q4x3-6hwj | Medium | 2.3% | 25 May, 2013 | Packagist moodle/moodle |
Moodle does not enforce capability requirements for reading blog comments CVE-2013-2082, GHSA-wp3g-pr4h-q6vv | Medium | 2.3% | 25 May, 2013 | Packagist moodle/moodle |
Moodle does not consider "don't send" attributes during hub registration CVE-2013-2081, GHSA-x3x8-fjw6-hccx | Medium | 1.5% | 25 May, 2013 | Packagist moodle/moodle |
Moodle is vulnerable to Sensitive Information Disclosure CVE-2013-2080, GHSA-wmmc-qjq2-vvm2 | Medium | 1.8% | 25 May, 2013 | Packagist moodle/moodle |
Zend Framework XXE Vulnerability CVE-2012-5657, GHSA-9m5v-vq4f-mrvf | Medium | 1.7% | 02 May, 2013 | Packagist zendframework/zendframework1 |
Moodle does not properly manage privileges for WebDAV repositories CVE-2013-1836, GHSA-664q-mrxx-2x2v | Medium | 1.9% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle allows remote authenticated users to reassign notes CVE-2013-1834, GHSA-prrh-679x-79qh | Medium | 1.7% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle includes the WebDAV password in the configuration form CVE-2013-1832, GHSA-pgp5-rcwp-qvfg | Medium | 1.1% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle reveals absolute path in exception message CVE-2013-1831, GHSA-xr24-jp5c-6c4v | Medium | 1.6% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle does not enforce the forceloginforprofiles setting CVE-2013-1830, GHSA-8r7x-qq55-74v2 | Medium | 1.8% | 25 Mar, 2013 | Packagist moodle/moodle |
Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests CVE-2013-2633, GHSA-v8h8-93mx-82h5 | Medium | 1.0% | 21 Mar, 2013 | Packagist matomo/matomo Packagist piwik/piwik |
Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS) CVE-2013-1844, GHSA-5fpj-6vq6-fmwh | Medium | 0.9% | 21 Mar, 2013 | Packagist matomo/matomo Packagist piwik/piwik |
TYPO3 Open redirect vulnerability in the Access tracking mechanism CVE-2013-1843, GHSA-7gxq-5qqc-v3fc | Medium | 2.4% | 20 Mar, 2013 | Packagist typo3/cms-core |
Zend Framework XEE Vulnerability CVE-2012-6532, GHSA-jh4x-4wmf-67pr | Medium | 1.8% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
Zend Framework XEE Vulnerability CVE-2012-6531, GHSA-h5p3-7mg6-hgj4 | Medium | 2.5% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests CVE-2012-6112, GHSA-fx5h-3786-h2w6 | Medium | 2.3% | 27 Jan, 2013 | Packagist moodle/moodle |
Moodle Arbitrary File Read via Backup Functionality CVE-2012-6099, GHSA-cr78-rphw-w73p | Medium | 1.1% | 27 Jan, 2013 | Packagist moodle/moodle |
Symfony Access Control Vulnerability CVE-2012-6432, GHSA-89cp-fvcc-hxh7 | Medium | 1.2% | 27 Dec, 2012 | Packagist symfony/symfony |