Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Symfony Allows URI Restrictions Bypass Via Double-Encoded String CVE-2012-6431, GHSA-83c3-qx27-2rwr | Medium | 1.9% | 27 Dec, 2012 | Packagist symfony/http-foundation Packagist symfony/routing Packagist symfony/security Packagist symfony/symfony |
Concrete5 Vulnerable to Cross-Site Scripting (XSS) CVE-2012-5181, GHSA-x4x9-4c65-73w8 | Medium | 1.4% | 21 Dec, 2012 | Packagist concrete5/concrete5 |
Moodle Allows Unauthenticated Dropbox Access CVE-2012-5471, GHSA-mpjx-8phj-5m34 | Medium | 1.3% | 21 Nov, 2012 | Packagist moodle/moodle |
Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords CVE-2012-5890, GHSA-m646-h2pw-56h4 | Medium | 1.4% | 17 Nov, 2012 | Packagist sjbr/sr-feuser-register |
powermail extension for TYPO3 has Cross-site Scripting vulnerability CVE-2012-5889, GHSA-8cg3-jfjx-3pp2 | Medium | 0.9% | 17 Nov, 2012 | Packagist in2code/powermail |
Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting CVE-2012-5888, GHSA-7p53-8wjr-j8h4 | Medium | 1.8% | 17 Nov, 2012 | Packagist b13/seo_basics |
phpMyAdmin Unsafe Fetching of Javascript Code CVE-2012-5368, GHSA-xpxp-v33m-5jp9 | Medium | 1.4% | 25 Oct, 2012 | Packagist phpmyadmin/phpmyadmin |
Cross-site Scripting in SmartyException CVE-2012-4437, GHSA-9gqj-ppv2-f2hq | Medium | 2.5% | 01 Oct, 2012 | Packagist smarty/smarty |
Drupal improper access restrictions CVE-2012-2153, GHSA-vpm6-h53m-x2xf | Medium | 1.9% | 01 Oct, 2012 | Packagist drupal/drupal |
Fork CMS Multiple XSS Vulnerabilities CVE-2012-1188, GHSA-j5fj-m342-mgcm | Medium | 4.5% | 26 Sep, 2012 | Packagist forkcms/forkcms |
Piwik (now Matomo) Vulnerable to Arbitrary Code Execution CVE-2011-4941, GHSA-2qr8-h6pq-m27v | Medium | 2.3% | 18 Sep, 2012 | Packagist matomo/matomo Packagist piwik/piwik |
Silverstripe XSS Vulnerabilities CVE-2012-4968, GHSA-v358-rvxr-wffx | Medium | 1.9% | 17 Sep, 2012 | Packagist silverstripe/framework |
Silverstripe CMS Arbitrary Code Execution CVE-2011-4962, GHSA-gv6c-59h4-9pmg | Medium | 3.9% | 17 Sep, 2012 | Packagist silverstripe/cms |
Typo3 Install Tool XSS Vulnerability CVE-2012-3531, GHSA-p9wg-jvj4-cx26 | Medium | 1.5% | 05 Sep, 2012 | Packagist typo3/cms |
Typo3 API XSS Vulnerability CVE-2012-3530, GHSA-94c2-g68f-9r98 | Medium | 1.6% | 05 Sep, 2012 | Packagist typo3/cms |
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects CVE-2012-3527, GHSA-m4hw-r893-xh4g | Medium | 2.1% | 05 Sep, 2012 | Packagist typo3/cms |
Typo3 API XSS Vulnerabilities CVE-2012-1608, GHSA-w3v6-r62r-fvqh | Medium | 2.3% | 04 Sep, 2012 | Packagist typo3/cms |
TYPO3 allows remote attackers to obtain the database name via a direct request CVE-2012-1607, GHSA-q68v-vcjg-r3vp | Medium | 3.1% | 04 Sep, 2012 | Packagist typo3/cms |
Typo3 Extbase Framework Unsafe Deserialization CVE-2012-1605, GHSA-7jfm-px59-99w8 | Medium | 2.4% | 04 Sep, 2012 | Packagist typo3/cms |
Typo3 Exception Handler XSS CVE-2012-2112, GHSA-qfr3-29w6-hwpg | Medium | 1.4% | 27 Aug, 2012 | Packagist typo3/cms |
Elefant CMS Multiple XSS Vulnerabilities CVE-2012-1296, GHSA-qjjq-rcq8-jw6j | Medium | 1.3% | 26 Aug, 2012 | Packagist elefant/cms |
Moodle Authentication Bypass in File Upload CVE-2012-3387, GHSA-w66h-c2vj-cm7f | Medium | 1.1% | 23 Jul, 2012 | Packagist moodle/moodle |
Moodle Authentication Bypass in Question-Bank CVE-2012-2356, GHSA-3rqj-jchw-9cc7 | Medium | 1.4% | 21 Jul, 2012 | Packagist moodle/moodle |
Moodle Exposes Sensitive User Information CVE-2012-2353, GHSA-mr97-gvvg-rhgh | Medium | 1.4% | 21 Jul, 2012 | Packagist moodle/moodle |
Moodle Open Redirect in Calendar Set Page CVE-2011-4582, GHSA-jcrj-x36p-h9f6 | Medium | 1.2% | 20 Jul, 2012 | Packagist moodle/moodle |
Moodle Users Can Bypass Deleted Status CVE-2012-0797, GHSA-72gv-qqrp-h9qg | Medium | 1.1% | 17 Jul, 2012 | Packagist moodle/moodle |
Moodle does not properly restrict comment capabilities CVE-2011-4297, GHSA-62wv-866c-rh86 | Medium | 1.6% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle Open Redirect Via Error Messages CVE-2011-4294, GHSA-hxmp-8f47-x9fc | Medium | 1.5% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory CVE-2011-4293, GHSA-wxvp-8q8h-r6rr | Medium | 2.4% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) CVE-2011-4292, GHSA-fhgh-fjh9-vq62 | Medium | 2.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) CVE-2011-4291, GHSA-m2pf-4pf8-45j2 | Medium | 1.9% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members CVE-2011-4289, GHSA-3qg4-2fcm-c8f9 | Medium | 1.7% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not force password changes for autosubscribed users CVE-2011-4287, GHSA-j3x5-cwfj-pfcw | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2011-4286, GHSA-86v9-gqh9-8268 | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle Incorrect Default Settings CVE-2011-4285, GHSA-8vjj-wf73-w882 | Medium | 1.9% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page CVE-2011-4284, GHSA-mw6p-49jf-9935 | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote attackers to obtain sensitive information CVE-2011-4283, GHSA-m3xp-4hf3-qfpp | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2011-4282, GHSA-6xqg-f34f-5fjx | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4281, GHSA-m97f-x4mr-4x3q | Medium | 1.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to XSS via bundled spikephpcoverage library CVE-2011-4280, GHSA-mx5g-3vxh-rgm8 | Medium | 3.6% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not use the forceloginforprofiles setting for course-profiles access control CVE-2011-4279, GHSA-phqj-xp48-7p7c | Medium | 1.4% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle XSS In Tag Autocomplete functionality CVE-2011-4278, GHSA-6656-6qwx-4c2m | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4133, GHSA-7cvw-wrj9-q5fp | Medium | 1.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2011-4306, GHSA-r729-mx2r-j26j | Medium | 1.8% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle Allows Modification of Constants CVE-2011-4301, GHSA-jcrj-gmr6-p5j8 | Medium | 2.1% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle does not properly restrict access to category and course data CVE-2011-4300, GHSA-9p54-pc88-36c4 | Medium | 2.1% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Scripting CVE-2011-4299, GHSA-h6px-pvfh-q2jv | Medium | 1.2% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4298, GHSA-8hxm-42v5-66hm | Medium | 1.0% | 11 Jul, 2012 | Packagist moodle/moodle |
TYPO3 Path Traversal vulnerability CVE-2010-5099, GHSA-66j3-66cp-6c2m | Medium | 3.1% | 30 May, 2012 | Packagist typo3/cms |
TYPO3 Sensitive Information Disclosure via escapeStrForLike method CVE-2010-5104, GHSA-xgc2-q928-27wv | Medium | 1.6% | 21 May, 2012 | Packagist typo3/cms-core |