Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Openstack Manila Persistent XSS in Metadata field CVE-2016-6519, GHSA-vq76-5ghr-9p4v, PYSEC-2026-662 | Medium | 1.5% | 21 Apr, 2017 | PyPI manila-ui |
Salt improper handling of tmp files CVE-2015-1838, GHSA-92pw-mff9-jqgm, PYSEC-2017-29 | Medium | 0.4% | 13 Apr, 2017 | PyPI salt |
SaltStack has insecure /tmp file handling in salt/modules/chef.py CVE-2015-1839, GHSA-6grp-75pq-c8cj, PYSEC-2017-30 | Medium | 0.4% | 13 Apr, 2017 | PyPI salt |
Improper Input Validation in OpenCV CVE-2016-1517, GHSA-fffj-9qwg-qmh5, PYSEC-2026-2817, PYSEC-2026-708 | Medium | 1.1% | 10 Apr, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Tryton Information Disclosure Vulnerability CVE-2017-0360, GHSA-7cwg-2575-3546, PYSEC-2017-97 | Medium | 1.6% | 04 Apr, 2017 | PyPI trytond |
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs CVE-2017-7233, GHSA-37hp-765x-j95x, PYSEC-2017-9 | Medium | 2.4% | 04 Apr, 2017 | PyPI Django PyPI django |
Django open redirect CVE-2017-7234, GHSA-h4hv-m4h4-mhwg, PYSEC-2017-10 | Medium | 1.8% | 04 Apr, 2017 | PyPI django |
OpenStack Horizon Cross-site Scripting (XSS) CVE-2017-7400, GHSA-47vp-44v9-rhgq, PYSEC-2026-821 | Medium | 1.1% | 03 Apr, 2017 | PyPI horizon |
OpenStack Glance Signature Verification Bypass CVE-2015-8234, GHSA-wmhw-fvg9-87fc, PYSEC-2017-143 | Medium | 1.3% | 29 Mar, 2017 | PyPI glance |
Cherry Music directory traversal vulnerability CVE-2015-8309, GHSA-q624-9634-77gh, PYSEC-2017-99 | Medium | 6.7% | 27 Mar, 2017 | PyPI CherryMusic PyPI cherrymusic |
Cherry Music Cross-site Scripting (XSS) vulnerability CVE-2015-8310, GHSA-4wcc-jv3p-prqw, PYSEC-2017-100 | Medium | 0.9% | 27 Mar, 2017 | PyPI CherryMusic PyPI cherrymusic |
Netflix Security Monkey Open Redirect vulnerability CVE-2017-7266, GHSA-j6jq-3q8p-xgg6, PYSEC-2026-919 | Medium | 1.0% | 26 Mar, 2017 | PyPI security-monkey PyPI security_monkey |
Plone Sandbox Escape CVE-2017-5524, GHSA-p5wr-vp8g-q5p4, PYSEC-2017-81 | Medium | 1.9% | 23 Mar, 2017 | PyPI Plone PyPI plone |
OpenStack Glance Server-Side Request Forgery (SSRF) CVE-2017-7200, GHSA-j6mr-cm6x-h6jg, PYSEC-2026-814 | Medium | 2.1% | 21 Mar, 2017 | PyPI glance |
Weblate user account enumeration via reset password form CVE-2017-5537, GHSA-j24g-gm76-j829, PYSEC-2017-42 | Medium | 2.3% | 15 Mar, 2017 | PyPI weblate |
django-epiceditor vulnerable to XSS in form field CVE-2017-6591, GHSA-xp5m-4c9f-498q, PYSEC-2017-86 | Medium | 0.8% | 09 Mar, 2017 | PyPI django-epiceditor |
Plone vulnerable to filesystem information leak CVE-2016-7135, GHSA-m7f9-65wr-pwch, PYSEC-2017-58 | Medium | 2.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Plone XSS CVE-2016-7136, GHSA-22jm-p2vv-j2hc, PYSEC-2017-59 | Medium | 1.6% | 07 Mar, 2017 | PyPI plone |
Plone Open Redirect Vulnerability CVE-2016-7137, GHSA-69vh-662j-v988, PYSEC-2017-60 | Medium | 1.7% | 07 Mar, 2017 | PyPI plone |
Plone XSS CVE-2016-7138, GHSA-v3hp-f8qr-cf3p, PYSEC-2017-61 | Medium | 1.6% | 07 Mar, 2017 | PyPI plone |
Plone Cross-site Scripting (XSS) vulnerability CVE-2016-7139, GHSA-pp4c-2692-7f37, PYSEC-2017-62 | Medium | 1.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Plone vulnerable to Cross-site Scripting CVE-2016-7140, GHSA-chvw-gjxf-f8mc, PYSEC-2017-63 | Medium | 1.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Plone vulnerable to unauthorized disclosure of site content CVE-2016-4042, GHSA-v4vj-49m5-wjhw, PYSEC-2017-56 | Medium | 1.1% | 24 Feb, 2017 | PyPI Plone PyPI plone |
Chameleon in Plone allows Authentication Bypass CVE-2016-4043, GHSA-6h8x-73fx-q2h9, PYSEC-2017-57 | Medium | 1.0% | 24 Feb, 2017 | PyPI Plone PyPI plone |
Improper Neutralization of Input During Web Page Generation in html5lib CVE-2016-9909, GHSA-v9v9-xffq-rwr4, PYSEC-2017-14 | Medium | 2.2% | 22 Feb, 2017 | PyPI html5lib |
Cross-site Scripting in html5lib CVE-2016-9910, GHSA-8f6m-gfq9-g33v, PYSEC-2017-15 | Medium | 2.2% | 22 Feb, 2017 | PyPI html5lib |
SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons CVE-2017-5591, GHSA-c35g-jr5f-h83p, PYSEC-2017-103, PYSEC-2017-104 | Medium | 1.7% | 09 Feb, 2017 | PyPI SleekXMPP PyPI sleekxmpp PyPI slixmpp |
Plone XSS in Zope ZMI CVE-2016-7147, GHSA-84jm-cpc5-c7g7, PYSEC-2017-64 | Medium | 1.3% | 04 Feb, 2017 | PyPI plone |
Salt Insecure configuration of PAM external authentication service CVE-2016-3176, GHSA-v2rp-9cpj-pfw2, PYSEC-2017-33 | Medium | 0.9% | 31 Jan, 2017 | PyPI salt |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-9119, GHSA-5fq5-pfv8-mrfv, PYSEC-2017-20 | Medium | 1.5% | 30 Jan, 2017 | PyPI moin |
Web2py Reflected XSS vulnerability CVE-2016-4807, GHSA-pvcp-73cg-6f77, PYSEC-2026-1063 | Medium | 2.3% | 11 Jan, 2017 | PyPI web2py |
Urllib3 Incorrect Certificate Validation CVE-2016-9015, GHSA-v4w5-p2hg-8fh6, PYSEC-2017-98 | Medium | 0.8% | 11 Jan, 2017 | PyPI urllib3 |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-7146, GHSA-fj26-q4vh-85f6, PYSEC-2016-30 | Medium | 1.2% | 10 Nov, 2016 | PyPI moin |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-7148, GHSA-3x76-j3jj-439j, PYSEC-2016-31 | Medium | 1.2% | 10 Nov, 2016 | PyPI moin |
Pillow Integer overflow in Map.c CVE-2016-9189, GHSA-rwr3-c2q8-gm56, PYSEC-2016-8 | Medium | 1.9% | 04 Nov, 2016 | PyPI pillow |
Tryton allows users to read the hashed password CVE-2016-1241, GHSA-52j9-v3jc-9xgc, PYSEC-2016-12, PYSEC-2016-40 | Medium | 1.6% | 07 Sep, 2016 | PyPI tryton PyPI trytond |
Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter CVE-2016-1242, GHSA-jpr7-8rxm-4vgx, PYSEC-2016-13, PYSEC-2016-41 | Medium | 1.8% | 07 Sep, 2016 | PyPI tryton PyPI trytond |
jwcrypto lacks the Random Filling protection mechanism CVE-2016-6298, GHSA-wg33-x934-3ghh, PYSEC-2016-4 | Medium | 2.2% | 01 Sep, 2016 | PyPI jwcrypto |
Django Cross-site scripting Vulnerability CVE-2016-6186, GHSA-c8c8-9472-w52h, PYSEC-2016-2 | Medium | 5.6% | 05 Aug, 2016 | PyPI django |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2016-4428, GHSA-grm6-x6mr-q3cv, PYSEC-2026-643 | Medium | 2.1% | 12 Jul, 2016 | PyPI horizon |
OpenStack Identity Keystone Improper Access Control CVE-2016-4911, GHSA-f82m-w3p3-cgp3, PYSEC-2016-38 | Medium | 1.4% | 13 Jun, 2016 | PyPI keystone |
OpenStack Image Service (Glance) vulnerable to Improper Access Control CVE-2016-0757, GHSA-5xrj-ghhp-hx7p, PYSEC-2026-811 | Medium | 1.5% | 13 Apr, 2016 | PyPI glance |
Pillow Buffer overflow in ImagingLibTiffDecode CVE-2016-0740, GHSA-hggx-3h72-49ww, PYSEC-2016-5 | Medium | 2.7% | 13 Apr, 2016 | PyPI pillow |
trytond arbitrary fields write via a sequence of records CVE-2015-0861, GHSA-c8q5-2j73-qvcc, PYSEC-2016-11 | Medium | 1.2% | 13 Apr, 2016 | PyPI trytond |
Roundup sensitive data disclosure vulnerability CVE-2014-6276, GHSA-j556-q367-2gw6, PYSEC-2016-33 | Medium | 1.5% | 13 Apr, 2016 | PyPI roundup |
OpenStack Nova host data access through resize/migration CVE-2016-2140, GHSA-49jv-37hm-6gfp, PYSEC-2026-864 | Medium | 2.1% | 12 Apr, 2016 | PyPI nova |
Radicale regex metacharacters injection in the user name CVE-2015-8748, GHSA-6w8c-6jrg-qwj2, PYSEC-2016-37 | Medium | 2.2% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
OpenStack Nova Potential Xen connection password leak via StorageError CVE-2015-8749, GHSA-c36r-g737-9qp8, PYSEC-2026-870 | Medium | 2.2% | 15 Jan, 2016 | PyPI nova |
Python RSA allows attackers to spoof signatures CVE-2016-1494, GHSA-8rjr-6qq5-pj9p, PYSEC-2016-10 | Medium | 7.1% | 13 Jan, 2016 | PyPI rsa |
Django settings leak in date template filter CVE-2015-8213, GHSA-6wcr-wcqm-3mfh, PYSEC-2015-11 | Medium | 4.3% | 07 Dec, 2015 | PyPI Django PyPI django |