Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TYPO3 SQL Injection vulnerability CVE-2010-5103, GHSA-r2w2-2r2x-fpcx | Medium | 1.3% | 21 May, 2012 | Packagist typo3/cms |
TYPO3 Directory Traversal vulnerability CVE-2010-5101, GHSA-rmqc-wfjm-3f66 | Medium | 1.9% | 21 May, 2012 | Packagist typo3/cms |
Drupal Open Redirect CVE-2012-1589, GHSA-wwrm-8947-4m6c | Medium | 1.4% | 18 May, 2012 | Packagist drupal/drupal |
Fork CMS XSS via Highlight Parameter CVE-2012-1209, GHSA-v3fg-x8jw-m974 | Medium | 1.1% | 24 Feb, 2012 | Packagist forkcms/forkcms |
ForkCMS Directory Traversal vulnerability CVE-2012-1207, GHSA-4x28-j85r-668q | Medium | 1.7% | 24 Feb, 2012 | Packagist forkcms/forkcms |
phpMyAdmin Open Redirect in redirector CVE-2011-1941, GHSA-v6fw-xf2c-8q43 | Medium | 1.9% | 26 Jan, 2012 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Vulnerable to Cross-Site Scripting CVE-2011-1940, GHSA-4q58-5x28-53wv | Medium | 1.2% | 26 Jan, 2012 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site Scripting vulnerability CVE-2011-4782, GHSA-2h23-c973-x63q | Medium | 1.3% | 22 Dec, 2011 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2011-4634, GHSA-9j9h-cpgc-8356 | Medium | 2.1% | 22 Dec, 2011 | Packagist phpmyadmin/phpmyadmin |
Moodle CRLF Injection Vulnerability in Calendar Component CVE-2011-4203, GHSA-4w8m-96v9-2c86 | Medium | 1.2% | 22 Dec, 2011 | Packagist moodle/moodle |
Joomla! vulnerable to Cross-site Scripting CVE-2011-4332, GHSA-hq9x-8m8j-5hmh | Medium | 1.1% | 23 Nov, 2011 | Packagist joomla/joomla-cms |
phpMyAdmin vulnerable to XML external entity (XXE) injection attack CVE-2011-4107, GHSA-q4mm-89q2-xffg | Medium | 12.7% | 17 Nov, 2011 | Packagist phpmyadmin/phpmyadmin |
BaserCMS privilege escallation CVE-2011-2674, GHSA-6wr6-54mw-mvhr | Medium | 1.3% | 02 Oct, 2011 | Packagist baserproject/basercms |
HTML Purifier allows remote attackers to obtain sensitive information CVE-2011-3744, GHSA-jw86-5cjf-mv79 | Medium | 1.4% | 23 Sep, 2011 | Packagist ezyang/htmlpurifier |
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file CVE-2011-3712, GHSA-r7p6-fr3x-r877 | Medium | 1.6% | 23 Sep, 2011 | Packagist cakephp/cakephp |
phpMyAdmin Directory Traversal Vulnerability CVE-2011-2718, GHSA-xhqq-554j-p4x8 | Medium | 1.7% | 01 Aug, 2011 | Packagist phpmyadmin/phpmyadmin |
Joomla! vulnerable to Cross-site Scripting CVE-2011-2509, GHSA-vcq7-x4wr-w2mj | Medium | 1.1% | 27 Jul, 2011 | Packagist joomla/joomla-cms |
phpMyAdmin remote variable manipulation CVE-2011-2505, GHSA-vqcm-r62w-w437 | Medium | 12.9% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file CVE-2011-0986, GHSA-wcmm-28rg-mg3r | Medium | 1.6% | 14 Feb, 2011 | Packagist phpmyadmin/phpmyadmin |
EC-CUBE XSS Vulnerabilities CVE-2011-0451, GHSA-wgvv-5396-ggvj | Medium | 1.9% | 03 Feb, 2011 | Packagist ec-cube/ec-cube |
ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter CVE-2010-4616, GHSA-39vm-rvwh-q86j | Medium | 1.1% | 29 Dec, 2010 | Packagist impresscms/impresscms |
HTML Purifier cross-site scripting (XSS) vulnerability CVE-2010-4183, GHSA-3p68-m5qw-9g9w | Medium | 0.9% | 05 Nov, 2010 | Packagist ezyang/htmlpurifier |
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend CVE-2010-3715, GHSA-mwqv-jff6-5v62 | Medium | 1.1% | 25 Oct, 2010 | Packagist typo3/cms-backend |
phpMyAdmin Cross-site Scripting vulnerability CVE-2010-2958, GHSA-frv8-xjcp-hrm2 | Medium | 1.9% | 08 Sep, 2010 | Packagist phpmyadmin/phpmyadmin |
HTML Purifier Cross-site Scripting (XSS) vulnerability CVE-2010-2479, GHSA-6rm6-mjmh-86jq | Medium | 2.0% | 06 Jul, 2010 | Packagist ezyang/htmlpurifier |
Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter CVE-2010-2230, GHSA-3gm8-32vv-q8mp | Medium | 2.2% | 28 Jun, 2010 | Packagist moodle/moodle |
Joomla! vulnerable to Cross-site Scripting CVE-2010-1649, GHSA-fj57-vhrc-73r7 | Medium | 1.0% | 08 Jun, 2010 | Packagist joomla/joomla-cms |
Moodle vulnerable to Cross-site Scripting CVE-2010-1619, GHSA-hhxf-w8hj-43w6 | Medium | 1.7% | 29 Apr, 2010 | Packagist moodle/moodle |
phpCAS client library and Moodle Cross-site Scripting vulnerability CVE-2010-1618, GHSA-45ch-hxgr-vx8j | Medium | 1.8% | 29 Apr, 2010 | Packagist apereo/phpcas Packagist moodle/moodle |
Moodle doesn't properly check role CVE-2010-1617, GHSA-q53j-c866-h9mw | Medium | 1.5% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle is vulnerable to unauthorized new accounts creation CVE-2010-1616, GHSA-966m-m549-2878 | Medium | 1.2% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2010-1614, GHSA-5fgv-cvr8-xg48 | Medium | 1.7% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle Session Fixation vulnerability CVE-2010-1613, GHSA-j5rc-cr5w-vfg6 | Medium | 1.8% | 29 Apr, 2010 | Packagist moodle/moodle |
SilverStripe vulnerable to Cross-site Scripting CVE-2010-1593, GHSA-wg4m-vvp6-2hc5 | Medium | 2.6% | 28 Apr, 2010 | Packagist silverstripe/cms Packagist silverstripe/framework |
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure CVE-2009-4160, GHSA-p65f-652v-35r2 | Medium | 1.2% | 02 Dec, 2009 | Packagist jweiland/kk-downloader |
Typo3 API Install Tool vulnerable to Cross-site Scripting CVE-2009-3636, GHSA-c73w-4rcj-2622 | Medium | 2.0% | 02 Nov, 2009 | Packagist typo3/cms-install |
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential CVE-2009-3635, GHSA-hwrc-w5gg-f335 | Medium | 2.1% | 02 Nov, 2009 | Packagist typo3/cms |
TYPO3 API function vulnerable to Cross-site Scripting CVE-2009-3633, GHSA-m7rg-85g8-28m9 | Medium | 0.9% | 02 Nov, 2009 | Packagist typo3/cms-core |
TYPO3 Backend vulnerable to Frame Hijacking CVE-2009-3630, GHSA-mg66-3x8x-r8g2 | Medium | 2.0% | 02 Nov, 2009 | Packagist typo3/cms-backend |
TYPO3 Backend Discloses Encryption Key CVE-2009-3628, GHSA-2wgg-c8xc-7gg3 | Medium | 1.1% | 02 Nov, 2009 | Packagist typo3/cms-backend |
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting CVE-2009-3821, GHSA-2q2r-xgj5-h3hm | Medium | 2.0% | 28 Oct, 2009 | Packagist apache-solr-for-typo3/solr |
phpMyAdmin Cross-site Scripting In MySQL Table Name CVE-2009-3696, GHSA-5pvv-f8h3-gw96 | Medium | 2.6% | 16 Oct, 2009 | Packagist phpmyadmin/phpmyadmin |
Typo3 Backend XSS Vulnerability CVE-2009-0816, GHSA-jg55-3q6h-2ccf | Medium | 1.1% | 05 Mar, 2009 | Packagist typo3/cms |
TYPO3 leaks a hash secret in an error message CVE-2009-0815, GHSA-c22j-84c7-cm77 | Medium | 42.2% | 05 Mar, 2009 | Packagist typo3/cms |
typo3/cms-felogin Cross-site Scripting vulnerability CVE-2008-5656, GHSA-xvx2-wqf5-jjgv | Medium | 1.1% | 17 Dec, 2008 | Packagist typo3/cms-felogin |
TYPO3 Cross-site Scripting vulnerability in the file backend module CVE-2008-5644, GHSA-733v-22mg-7f8w | Medium | 1.1% | 17 Dec, 2008 | Packagist typo3/cms-backend |
Moodle vulnerable to symlink attack CVE-2008-5153, GHSA-x7r4-26m9-hmgq | Medium | 0.4% | 18 Nov, 2008 | Packagist moodle/moodle |
Joomla! Open Redirect vulnerability CVE-2008-4104, GHSA-9qr2-fx2g-pfvh | Medium | 1.4% | 18 Sep, 2008 | Packagist joomla/framework |
Drupal vulnerable to Cross-site Scripting CVE-2008-3218, GHSA-6cj8-c359-p7q9 | Medium | 2.5% | 18 Jul, 2008 | Packagist drupal/drupal |
Joomla! allows attackers to access cached pages CVE-2008-3226, GHSA-8xqm-3qm5-qhfv | Medium | 1.0% | 18 Jul, 2008 | Packagist joomla/joomla-platform |