Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Glance improper validation of the image_size_cap configuration option CVE-2014-5356, GHSA-479j-jf2p-38pg, PYSEC-2026-810 | Medium | 2.1% | 25 Aug, 2014 | PyPI glance |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3517, GHSA-xjmj-p278-4jp5, PYSEC-2026-884 | Medium | 2.0% | 07 Aug, 2014 | PyPI nova |
OpenStack Neutron allows remote authenticated users to cause a denial of service CVE-2014-3555, GHSA-4pmp-38hf-rmwj | Medium | 2.2% | 23 Jul, 2014 | PyPI neutron |
OpenStack Swift Cross-site Scriping vulnerability CVE-2014-3497, GHSA-66vj-393f-hxfv, PYSEC-2026-928 | Medium | 2.1% | 03 Jul, 2014 | PyPI swift |
Eugene Pankov Ajenti Cross-site scripting Vulnerabilities CVE-2014-4301, GHSA-2ch8-f849-pjg3, PYSEC-2014-99 | Medium | 2.3% | 18 Jun, 2014 | PyPI ajenti |
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege CVE-2014-3476, GHSA-274v-r947-v34r, PYSEC-2026-649 | Medium | 2.3% | 17 Jun, 2014 | PyPI keystone |
Djiblets Cross-site scripting Vulnerability via JSON Objects CVE-2014-3994, GHSA-w7rq-8f2g-jvqr, PYSEC-2014-78 | Medium | 2.4% | 16 Jun, 2014 | PyPI Djblets PyPI djblets |
Djblets Cross-site scripting Vulnerability CVE-2014-3995, GHSA-4xf6-xr96-7vmp, PYSEC-2014-79 | Medium | 2.1% | 16 Jun, 2014 | PyPI Djblets PyPI djblets |
OpenStack Identity (Keystone) Denial of Service CVE-2013-2014, GHSA-7332-36h8-8jh8, PYSEC-2026-651 | Medium | 3.3% | 02 Jun, 2014 | PyPI keystone |
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3840, GHSA-wpvx-26f7-65q3, PYSEC-2014-110 | Medium | 3.5% | 27 May, 2014 | PyPI mayan-edms |
SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347, GHSA-rv8h-p43r-4x5r, PYSEC-2014-86 | Medium | 2.5% | 20 May, 2014 | PyPI oauth2 |
Insecure Temporary File in Jinja2 CVE-2014-0012, GHSA-fqh9-2qgg-h84h, PYSEC-2014-82 | Medium | 0.4% | 19 May, 2014 | PyPI Jinja2 PyPI jinja2 |
lxml Cross-site Scripting Via Control Characters CVE-2014-3146, GHSA-57qw-cc2g-pv5p, PYSEC-2014-9 | Medium | 6.3% | 14 May, 2014 | PyPI lxml |
Cobbler Path Traversal vulnerability CVE-2014-3225, GHSA-xc7w-jvhx-p6q9, PYSEC-2026-797 | Medium | 8.9% | 14 May, 2014 | PyPI cobbler |
SOAPpy vulnerable to XXE attacks CVE-2014-3243, GHSA-2gh8-gr6x-7q26, PYSEC-2026-923 | Medium | 2.7% | 12 May, 2014 | PyPI SOAPpy PyPI soappy |
SOAPpy vulnerable to XML External Entity attacks CVE-2014-3242, GHSA-52wr-3vww-rmpq, PYSEC-2026-924 | Medium | 1.8% | 12 May, 2014 | PyPI SOAPpy PyPI soappy |
eyeD3 is vulnerable to arbitrary file modification via symlink attack CVE-2014-1934, GHSA-4r2w-w73w-36jm, PYSEC-2026-807 | Medium | 0.3% | 08 May, 2014 | PyPI eyeD3 PyPI eyed3 |
OpenStack Neutron Improper Authentication vulnerability CVE-2014-0056, GHSA-72p9-6gc7-q93r, PYSEC-2026-851 | Medium | 1.4% | 08 May, 2014 | PyPI neutron |
PyWBEM TOCTOU vulnerability in certificate validation CVE-2013-6444, GHSA-gh2c-6m38-c78j, PYSEC-2014-94 | Medium | 1.1% | 05 May, 2014 | PyPI pywbem |
Plone Filesystem path information leak CVE-2013-7060, GHSA-rg52-j87w-pf83, PYSEC-2014-65, PYSEC-2014-67 | Medium | 2.1% | 02 May, 2014 | PyPI Products.CMFPlone PyPI plone PyPI products-cmfplone |
Plone Privilege escalation through exposed underlying API CVE-2013-7061, GHSA-4vr8-r7qr-fpvq, PYSEC-2014-66, PYSEC-2014-68 | Medium | 1.3% | 02 May, 2014 | PyPI Plone PyPI Products.CMFPlone PyPI plone PyPI products-cmfplone |
Ajenti Cross-site scripting (XSS) vulnerability CVE-2014-2260, GHSA-9crx-p357-5vw8, PYSEC-2014-98 | Medium | 1.5% | 30 Apr, 2014 | PyPI ajenti |
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability CVE-2014-0162, GHSA-r7pj-rvwg-vxhr, PYSEC-2026-817 | Medium | 2.0% | 27 Apr, 2014 | PyPI glance |
Pillow Temporary file name leakage CVE-2014-1933, GHSA-r854-96gq-rfg3, PYSEC-2014-23 | Medium | 0.5% | 17 Apr, 2014 | PyPI Pillow PyPI pillow |
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests CVE-2014-0167, GHSA-p258-xmh3-72pv, PYSEC-2026-878 | Medium | 1.7% | 15 Apr, 2014 | PyPI nova |
OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting CVE-2014-0157, GHSA-cmg8-5c63-pg95, PYSEC-2026-822 | Medium | 1.2% | 15 Apr, 2014 | PyPI horizon |
python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware CVE-2014-0105, GHSA-gwvq-rgqf-993f, PYSEC-2014-70 | Medium | 1.1% | 15 Apr, 2014 | PyPI python-keystoneclient |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2012-6130, GHSA-mccq-3m7h-fjxg, PYSEC-2014-15 | Medium | 2.0% | 11 Apr, 2014 | PyPI roundup |
Roundup Cross-site scripting (XSS) vulnerability CVE-2012-6131, GHSA-gw2q-cgvq-9g3v, PYSEC-2014-16 | Medium | 2.0% | 11 Apr, 2014 | PyPI roundup |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2012-6132, GHSA-5v6q-xqq8-g4xj, PYSEC-2014-96 | Medium | 1.8% | 10 Apr, 2014 | PyPI roundup |
Plone Authenticated Denial of Service vulnerability CVE-2013-4188, GHSA-w3pw-qxjj-6prr, PYSEC-2014-52 | Medium | 1.3% | 11 Mar, 2014 | PyPI plone |
Plone Privilege escalation due improper authorization CVE-2013-4189, GHSA-pwpq-632g-h49g, PYSEC-2014-53 | Medium | 1.3% | 11 Mar, 2014 | PyPI Plone PyPI plone |
Plone vulnerable to cross-site scripting CVE-2013-4190, GHSA-89rq-27xp-vgv7, PYSEC-2014-54 | Medium | 1.8% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to Information Exposure when generating zip archives CVE-2013-4191, GHSA-grwx-4p5v-9g2g, PYSEC-2014-55 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to File System Path Exposure CVE-2013-4194, GHSA-mm32-jw73-9227, PYSEC-2014-58 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone Multiple open redirect vulnerabilities CVE-2013-4195, GHSA-j67j-8hrp-76xm, PYSEC-2014-59 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to information exposure via the object manager implementation CVE-2013-4196, GHSA-qphh-5fv5-2mjj, PYSEC-2014-60 | Medium | 1.4% | 11 Mar, 2014 | PyPI plone |
Plone's authenticated users able to alter their password despite of policy definition CVE-2013-4198, GHSA-qjxf-6pr8-j87v, PYSEC-2014-62 | Medium | 1.1% | 11 Mar, 2014 | PyPI Plone PyPI plone |
Creation of Temporary File With Insecure Permissions in logilab-commons CVE-2014-1839, GHSA-g5m2-22h2-rr3j, PYSEC-2014-84 | Medium | 0.4% | 11 Mar, 2014 | PyPI logilab-common |
OpenStack Nova DoS through ephemeral disk backing files CVE-2013-6437, GHSA-hrv9-4x4c-9jc8, PYSEC-2026-874 | Medium | 2.0% | 06 Mar, 2014 | PyPI nova |
OpenStack Glance sensitive information disclosure via logs CVE-2014-1948, GHSA-4xw6-hj5p-4j79, PYSEC-2014-102 | Medium | 0.3% | 14 Feb, 2014 | PyPI glance |
httplib2 incorrectly checks SSL certificate CVE-2013-2037, GHSA-q48q-77qv-cf9p, PYSEC-2014-81 | Medium | 1.3% | 18 Jan, 2014 | PyPI httplib2 |
OpenStack Nova Router metadata queries are not restricted by tenant CVE-2013-6419, GHSA-22w9-j288-8p9w, PYSEC-2026-858 | Medium | 1.9% | 07 Jan, 2014 | PyPI nova |
OpenStack Nova uses insecure keystone middleware tmpdir by default CVE-2013-2030, GHSA-pxxv-rv32-2qgv, PYSEC-2026-911 | Medium | 0.2% | 27 Dec, 2013 | PyPI python-keystoneclient |
OpenStack Compute Nova Improper Access Control CVE-2013-4497, GHSA-27q4-38qf-m25h, PYSEC-2026-859 | Medium | 1.8% | 05 Nov, 2013 | PyPI nova |
OpenStack Nova Denial of Service in network source security groups CVE-2013-4185, GHSA-ph2h-hh49-vh27, PYSEC-2026-879 | Medium | 2.1% | 29 Oct, 2013 | PyPI nova |
Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget CVE-2013-4249, GHSA-4894-5vqc-6r2r, PYSEC-2013-19 | Medium | 2.9% | 04 Oct, 2013 | PyPI django |
Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2013-6044, GHSA-9cwg-mhxf-hh59, PYSEC-2013-21 | Medium | 2.3% | 04 Oct, 2013 | PyPI Django PyPI django |
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CVE-2013-5943, PYSEC-2013-4 | Medium | 1.8% | 27 Sep, 2013 | PyPI graphite-web |
Improper Link Resolution Before File Access in Suds CVE-2013-2217, GHSA-vpqp-hx68-p2wx, PYSEC-2013-32, PYSEC-2013-33 | Medium | 0.6% | 23 Sep, 2013 | PyPI suds PyPI suds-py3 |