Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Ipsilon denial of service via a duplicate SP name CVE-2015-5217, GHSA-6875-ff47-r6p6, PYSEC-2015-41 | Medium | 1.3% | 17 Nov, 2015 | PyPI ipsilon |
Ipsilon denial of service by deleting a SAML2 Service Provider (SP) CVE-2015-5301, GHSA-9qp4-79q8-58pr, PYSEC-2015-42 | Medium | 1.5% | 17 Nov, 2015 | PyPI ipsilon |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction CVE-2015-7713, GHSA-67rh-9p29-vrxr, PYSEC-2026-867 | Medium | 3.7% | 29 Oct, 2015 | PyPI nova |
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service CVE-2015-5286, GHSA-gvjg-r9fv-7qx9, PYSEC-2026-812 | Medium | 2.4% | 26 Oct, 2015 | PyPI glance |
OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions CVE-2015-5251, GHSA-q748-mcwg-xmqv, PYSEC-2026-816 | Medium | 2.1% | 26 Oct, 2015 | PyPI glance |
OpenStack Object Storage (Swift) Sensitive Data Exposure CVE-2015-5223, GHSA-q45h-chc8-hvp6, PYSEC-2026-934 | Medium | 2.6% | 26 Oct, 2015 | PyPI swift |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service CVE-2015-3280, GHSA-mfmj-gwg3-vhw7, PYSEC-2026-877 | Medium | 3.4% | 26 Oct, 2015 | PyPI nova |
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook CVE-2015-6938, GHSA-4vwq-x64q-j4cj, PYSEC-2015-24, PYSEC-2015-26 | Medium | 2.8% | 21 Sep, 2015 | PyPI ipython PyPI notebook |
OpenStack Nova instance migration process does not stop when instance is deleted CVE-2015-3241, GHSA-3vx7-xff6-h2vx, PYSEC-2026-861 | Medium | 3.5% | 08 Sep, 2015 | PyPI nova |
OpenStack Neutron Improper Input Validation vulnerability CVE-2015-3221, GHSA-wf44-4mgj-rwvx, PYSEC-2026-856 | Medium | 11.4% | 26 Aug, 2015 | PyPI neutron |
Django denial of service via empty session record creation CVE-2015-5963, GHSA-pgxh-wfw4-jx2v, PYSEC-2015-22 | Medium | 5.2% | 24 Aug, 2015 | PyPI Django PyPI django |
Denial-of-service possibility in logout() view by filling session store CVE-2015-5964, GHSA-x38m-486c-2wr9, PYSEC-2015-23 | Medium | 5.0% | 24 Aug, 2015 | PyPI Django PyPI django |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2015-3219, GHSA-rhjj-f6gq-6gx2, PYSEC-2015-40 | Medium | 3.2% | 20 Aug, 2015 | PyPI horizon |
OpenStack Cinder file disclosure in image convert CVE-2015-1851, GHSA-9hcj-h2qc-689p, PYSEC-2026-789 | Medium | 2.6% | 25 Jun, 2015 | PyPI cinder |
Django allows user sessions hijacking via an empty string in the session key CVE-2015-3982, GHSA-6wgp-fwfm-mxp3, PYSEC-2015-19 | Medium | 1.8% | 02 Jun, 2015 | PyPI Django PyPI django |
OpenStack Keystone Logs Passwords CVE-2015-3646, GHSA-jwpw-ppj5-7h4w, PYSEC-2026-655 | Medium | 2.9% | 12 May, 2015 | PyPI keystone |
OpenStack Swift Unauthorized delete of versioned Swift object CVE-2015-1856, GHSA-cc77-5vw4-7pwg, PYSEC-2026-931 | Medium | 4.0% | 17 Apr, 2015 | PyPI swift |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity CVE-2015-0259, GHSA-x8xr-rm9r-7mvf, PYSEC-2026-883 | Medium | 1.1% | 01 Apr, 2015 | PyPI nova |
Django cross-site scripting (XSS) attack via user-supplied redirect URLs CVE-2015-2317, GHSA-7fq8-4pv5-5w5c, PYSEC-2015-9 | Medium | 5.0% | 25 Mar, 2015 | PyPI Django PyPI django |
Python Requests Session Fixation CVE-2015-2296, GHSA-pg2w-x9wp-vw92, PYSEC-2015-17 | Medium | 3.2% | 18 Mar, 2015 | PyPI requests |
Django Cross-site Scripting Vulnerability CVE-2015-2241, GHSA-6565-fg86-6jcx, PYSEC-2015-8 | Medium | 2.1% | 12 Mar, 2015 | PyPI django |
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method. CVE-2015-1613, PYSEC-2015-33 | Medium | 1.3% | 16 Feb, 2015 | PyPI rhodecode |
OpenStack Glance Bypass the storage quota and Denial of service CVE-2014-9623, GHSA-j4mh-9wq6-8rg6, PYSEC-2026-813 | Medium | 2.9% | 23 Jan, 2015 | PyPI glance |
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme CVE-2015-1195, GHSA-pwrj-f53c-f89j, PYSEC-2026-815 | Medium | 2.8% | 21 Jan, 2015 | PyPI glance |
Django WSGI Header Spoofing Vulnerability CVE-2015-0219, GHSA-7qfw-j7hp-v45g, PYSEC-2015-4 | Medium | 7.0% | 16 Jan, 2015 | PyPI Django PyPI django |
Django Cross-site Scripting Vulnerability CVE-2015-0220, GHSA-gv98-g628-m9x5, PYSEC-2015-5 | Medium | 3.1% | 16 Jan, 2015 | PyPI Django PyPI django |
pip lack of randomness in build directory CVE-2014-8991, GHSA-53mr-44pp-crf4, PYSEC-2014-11 | Medium | 0.4% | 24 Nov, 2014 | PyPI pip |
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to blo CVE-2014-5277, GHSA-8w94-cf6g-c8mg, GO-2022-0636, PYSEC-2014-80 | Medium | 1.9% | 17 Nov, 2014 | PyPI docker-py |
OpenStack Identity Keystone Improper Privilege Management CVE-2014-0204, GHSA-c4p9-87h3-7vr4, PYSEC-2026-654 | Medium | 1.4% | 03 Nov, 2014 | PyPI keystone |
Plone contains Cross-site Request Forgery CVE-2012-5500, GHSA-2q75-f7cp-w86q, PYSEC-2014-42 | Medium | 1.1% | 03 Nov, 2014 | PyPI plone |
Exposure of Sensitive Information in Plone CVE-2012-5508, GHSA-wprr-mc54-c62q, PYSEC-2014-50 | Medium | 2.3% | 03 Nov, 2014 | PyPI Plone PyPI plone |
Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name CVE-2014-3473, GHSA-8vwv-2v7v-jmgr, PYSEC-2026-642 | Medium | 1.7% | 31 Oct, 2014 | PyPI horizon |
OpenStack Nova VMware instance leak potentially leading to compute DoS CVE-2014-8333, GHSA-g63p-mfcm-54c4, PYSEC-2026-872 | Medium | 2.0% | 31 Oct, 2014 | PyPI nova |
OpenStack Compute (Nova) Denial of Service vulnerability CVE-2014-3708, GHSA-43hc-pwvx-pmfg, PYSEC-2026-863 | Medium | 2.8% | 31 Oct, 2014 | PyPI nova |
Cobbler vulnerable to code injection via unsafe YAML loading CVE-2011-4953, GHSA-hpj3-5p46-g87w, PYSEC-2026-793 | Medium | 2.2% | 27 Oct, 2014 | PyPI cobbler |
OpenStack Swift metadata constraints are not correctly enforced CVE-2014-7960, GHSA-g6x3-55qv-x6p2, PYSEC-2026-933 | Medium | 3.0% | 17 Oct, 2014 | PyPI swift |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1829, GHSA-cfj3-7x9c-4p3h, PYSEC-2014-13 | Medium | 2.2% | 15 Oct, 2014 | PyPI requests |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1830, GHSA-652x-xj99-gmcc, PYSEC-2014-14 | Medium | 2.0% | 15 Oct, 2014 | PyPI requests |
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3641, GHSA-qhch-g8qr-p497, PYSEC-2026-791 | Medium | 1.9% | 08 Oct, 2014 | PyPI cinder |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service CVE-2014-3608, GHSA-92hc-c226-32q7, PYSEC-2026-869 | Medium | 1.7% | 06 Oct, 2014 | PyPI nova |
OpenStack Identity Keystone Exposure of Sensitive Information CVE-2014-3621, GHSA-8v8f-vc72-pmhc, PYSEC-2026-653 | Medium | 2.1% | 02 Oct, 2014 | PyPI keystone |
Plone Cross-site scripting Vulnerability CVE-2012-5490, GHSA-q46g-v7r4-9vhr, PYSEC-2014-32 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Information Disclosure CVE-2012-5491, GHSA-f8pg-wp5j-rjxx, PYSEC-2014-33 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Metadata Disclosure CVE-2012-5492, GHSA-6w93-4c4p-xv2x, PYSEC-2014-34 | Medium | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5494, GHSA-3g6w-4m7x-97v6, PYSEC-2014-36 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone User account enumeration via crafted URL CVE-2012-5497, GHSA-683w-84m7-p8pw, PYSEC-2014-39 | Medium | 2.1% | 30 Sep, 2014 | PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5502, GHSA-hr59-35cr-qf43, PYSEC-2014-44 | Medium | 1.0% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5504, GHSA-5whw-5cmm-9jw4, PYSEC-2014-46 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Django Middleware Enables Session Hijacking CVE-2014-0482, GHSA-625g-gx8c-xcmg, PYSEC-2014-6 | Medium | 2.0% | 26 Aug, 2014 | PyPI Django PyPI django |
Django data leakage via querystring manipulation in admin CVE-2014-0483, GHSA-rw75-m7gp-92m3, PYSEC-2014-7 | Medium | 2.0% | 26 Aug, 2014 | PyPI Django PyPI django |