Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token CVE-2013-4294, GHSA-5qpp-v56f-mqfm, PYSEC-2013-42 | Medium | 2.7% | 23 Sep, 2013 | PyPI keystone |
OpenStack Cinder Denial of Service using XML entities CVE-2013-4202, GHSA-mfg4-9xf4-f45q, PYSEC-2026-790 | Medium | 2.6% | 16 Sep, 2013 | PyPI cinder |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4179, GHSA-j6xh-q826-55jw, PYSEC-2026-875 | Medium | 2.7% | 16 Sep, 2013 | PyPI nova |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information CVE-2013-2256, GHSA-5mj6-643f-2g85, PYSEC-2026-866 | Medium | 1.8% | 16 Sep, 2013 | PyPI nova |
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots CVE-2013-4183, GHSA-q3rw-wcj6-8cjf, PYSEC-2013-35 | Medium | 0.4% | 16 Sep, 2013 | PyPI cinder |
Ansible Arbitrary File Overwrite Vulnerability CVE-2013-4260, GHSA-pcqv-c46v-2p4v, PYSEC-2013-2 | Medium | 0.3% | 16 Sep, 2013 | PyPI ansible |
OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4155, GHSA-wxx2-gqvv-34hx, PYSEC-2026-935 | Medium | 1.7% | 20 Aug, 2013 | PyPI swift |
Improper Link Resolution Before File Access in pip CVE-2013-1888, GHSA-4gv5-qhvr-36vv, PYSEC-2013-9 | Medium | 0.4% | 17 Aug, 2013 | PyPI pip |
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo CVE-2013-2132, GHSA-x33v-f3gp-gw2c, PYSEC-2013-30 | Medium | 4.1% | 15 Aug, 2013 | PyPI pymongo |
Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown CVE-2013-2209, GHSA-6g7x-4c7m-g63m, PYSEC-2026-913 | Medium | 2.2% | 31 Jul, 2013 | PyPI reviewboard |
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-2096, GHSA-m674-hmx2-ffhq, PYSEC-2026-876 | Medium | 0.4% | 09 Jul, 2013 | PyPI nova |
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user CVE-2013-2059, GHSA-hj89-qmx9-8qmh, PYSEC-2013-41 | Medium | 2.5% | 21 May, 2013 | PyPI keystone |
Django Data leakage via admin history log CVE-2013-0305, GHSA-r7w6-p47g-vj53, PYSEC-2013-16 | Medium | 1.8% | 02 May, 2013 | PyPI Django PyPI django |
Django is vulnerable to Denial of Service attack in formset CVE-2013-0306, GHSA-g8xg-jgj6-49r3, PYSEC-2013-17 | Medium | 2.6% | 02 May, 2013 | PyPI Django PyPI django |
OpenStack Keystone allows context-dependent attackers to bypass access restrictions CVE-2013-0282, GHSA-8833-qrvm-wc3h, PYSEC-2026-652 | Medium | 1.8% | 12 Apr, 2013 | PyPI Keystone PyPI keystone |
OpenStack Keystone Denial of Service vulnerability via a large HTTP request CVE-2013-0270, GHSA-4ppj-4p4v-jf4p, PYSEC-2026-650 | Medium | 3.2% | 12 Apr, 2013 | PyPI keystone |
XML External Entity (XXE) in Django CVE-2013-1665, GHSA-x64m-686f-fmm3, PYSEC-2026-802 | Medium | 4.5% | 03 Apr, 2013 | PyPI Django PyPI django |
XML Entity Expansion (XEE) in Django CVE-2013-1664, GHSA-qrh7-x6fp-c2mp, PYSEC-2026-801 | Medium | 4.8% | 03 Apr, 2013 | PyPI Django PyPI django |
OpenStack Glance is vulnerable to Exposure of Sensitive Information CVE-2013-1840, GHSA-c8w9-83vg-r8vv, PYSEC-2013-46 | Medium | 1.7% | 22 Mar, 2013 | PyPI glance |
OpenStack Keystone Improper Authentication vulnerability CVE-2013-1865, GHSA-22q6-wwq7-2jj9, PYSEC-2013-39 | Medium | 2.6% | 22 Mar, 2013 | PyPI keystone |
OpenStack Glance logs user name and password in cleartext CVE-2013-0212, GHSA-xv7j-2v4w-cjvh, PYSEC-2013-37 | Medium | 3.0% | 24 Feb, 2013 | PyPI glance |
MoinMoin Directory Traversal vulnerability CVE-2012-6080, GHSA-v33q-2xcj-4f3m, PYSEC-2013-5 | Medium | 4.1% | 03 Jan, 2013 | PyPI moin |
MoinMoin Multiple unrestricted file upload vulnerabilities CVE-2012-6081, GHSA-m2c4-jgmm-fvq3, PYSEC-2013-6 | Medium | 35.3% | 03 Jan, 2013 | PyPI moin |
MoinMoin Cross-site scripting (XSS) vulnerability CVE-2012-6082, GHSA-452h-rx28-49w9, PYSEC-2013-23 | Medium | 2.1% | 03 Jan, 2013 | PyPI moin |
MoinMoin Multiple vulnerable to directory traversal CVE-2012-6495, GHSA-6gx4-29v9-g9q5, PYSEC-2013-7 | Medium | 18.7% | 03 Jan, 2013 | PyPI Moin PyPI moin |
OpenStack Nova Information leak in libvirt LVM-backed instances CVE-2012-5625, GHSA-rwhr-h69g-8qmq, PYSEC-2012-41, PYSEC-2012-42 | Medium | 1.4% | 26 Dec, 2012 | PyPI nova |
OpenStack Keystone intended authorization restrictions bypass CVE-2012-5571, GHSA-qvpr-qm6w-6rcc, PYSEC-2012-35 | Medium | 2.1% | 18 Dec, 2012 | PyPI Keystone PyPI keystone |
OpenStack Glance arbitrary deletion of non-protected images CVE-2012-4573, GHSA-6rrm-xxvh-7r87, PYSEC-2012-29 | Medium | 3.3% | 11 Nov, 2012 | PyPI glance |
OpenStack Glance arbitrary deletion of non-protected images CVE-2012-5482, GHSA-vwr9-9f8v-vp5m, PYSEC-2012-30 | Medium | 2.7% | 11 Nov, 2012 | PyPI glance |
Apache Libcloud vulnerable to certificate impersonation CVE-2012-3446, GHSA-prcq-52f8-fp44, PYSEC-2012-12 | Medium | 1.2% | 04 Nov, 2012 | PyPI apache-libcloud |
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed CVE-2012-4457, GHSA-x8h4-xf47-pqc3, PYSEC-2026-834 | Medium | 2.3% | 09 Oct, 2012 | PyPI Keystone PyPI keystone |
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles CVE-2012-4413, GHSA-mrxv-65rv-6hxq, PYSEC-2026-833 | Medium | 1.9% | 18 Sep, 2012 | PyPI keystone |
Beaker Sensitive Information Disclosure vulnerability CVE-2012-3458, GHSA-39vm-p9mr-4r27, PYSEC-2012-1 | Medium | 2.5% | 15 Sep, 2012 | PyPI beaker |
MoinMoin Improper Access Control CVE-2012-4404, GHSA-g4mx-rm5q-vh24, PYSEC-2012-10 | Medium | 2.1% | 10 Sep, 2012 | PyPI moin |
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by CVE-2012-3540, PYSEC-2012-18 | Medium | 2.9% | 05 Sep, 2012 | PyPI horizon |
OpenStack Nova Long server names grow nova-api log files significantly CVE-2012-1585, GHSA-pjvw-p2v5-wf6q, PYSEC-2026-880 | Medium | 2.1% | 17 Aug, 2012 | PyPI nova |
OpenStack Keystone token expiration issues CVE-2012-3426, GHSA-xp97-6w7r-4cjc, PYSEC-2012-34 | Medium | 2.3% | 31 Jul, 2012 | PyPI Keystone PyPI keystone |
OpenStack Nova Directory traversal vulnerability CVE-2012-3360, GHSA-m454-cm7h-rqhh, PYSEC-2012-38 | Medium | 3.0% | 22 Jul, 2012 | PyPI nova |
OpenStack Nova Arbitrary file injection/corruption through directory traversal issues CVE-2012-3361, GHSA-cm54-3vvf-f5p8, PYSEC-2012-39 | Medium | 2.6% | 22 Jul, 2012 | PyPI nova |
OpenStack Compute (Nova) Improper Input Validation CVE-2012-2654, GHSA-46r8-9cj7-pw6g, PYSEC-2012-37 | Medium | 2.6% | 21 Jun, 2012 | PyPI nova |
PyCrypto makes Use of Insufficiently Random Values CVE-2012-2417, GHSA-v367-p58w-98h5, PYSEC-2012-16 | Medium | 2.4% | 17 Jun, 2012 | PyPI PyCrypto PyPI pycrypto |
OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2012-2094, GHSA-j772-hpmw-32rm, PYSEC-2012-32 | Medium | 2.4% | 05 Jun, 2012 | PyPI horizon |
OpenStack Horizon Session Fixation CVE-2012-2144, GHSA-w7h9-8wr4-hwqh, PYSEC-2012-33 | Medium | 2.1% | 05 Jun, 2012 | PyPI horizon |
Virtualenv Allows Symlink Attack on /tmp/ CVE-2011-4617, GHSA-3jhc-wjqf-5f2c, PYSEC-2011-23 | Medium | 0.3% | 31 Dec, 2011 | PyPI virtualenv |
OpenStack Nova Multiple directory traversal vulnerabilities CVE-2011-4596, GHSA-qr62-r9xc-r2gj, PYSEC-2026-881 | Medium | 1.8% | 23 Dec, 2011 | PyPI nova |
Celery local privilege escalation vulnerability CVE-2011-4356, GHSA-rpc6-h455-3rx5, PYSEC-2011-17 | Medium | 0.3% | 05 Dec, 2011 | PyPI celery |
Session manipulation in Django CVE-2011-4136, GHSA-x88j-93vc-wpmp, PYSEC-2011-1 | Medium | 2.3% | 19 Oct, 2011 | PyPI Django PyPI django |
Plone XSS Vulnerability CVE-2011-1340, GHSA-cvwc-g7fw-7xrj, PYSEC-2026-896 | Medium | 1.2% | 05 Aug, 2011 | PyPI plone |
Fabric vulnerable to symlink attack on tmp files CVE-2011-2185, GHSA-xwg2-qc6c-7c3q, PYSEC-2026-808 | Medium | 0.3% | 27 Jul, 2011 | PyPI fabric |
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool CVE-2011-1948, GHSA-p7h9-vf92-5fj5, PYSEC-2011-14, PYSEC-2026-2965, PYSEC-2026-2966 | Medium | 2.4% | 06 Jun, 2011 | PyPI Plone PyPI Products.CMFPlone PyPI Products.PasswordResetTool PyPI plone +2 more |