Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Plone Cross-site Scripting vulnerability CVE-2011-1949, GHSA-h6hq-c896-w882, PYSEC-2011-15 | Medium | 1.9% | 06 Jun, 2011 | PyPI Plone PyPI plone |
feedparser Cross-site Scripting vulnerability CVE-2009-5065, GHSA-3mwg-gp5g-fv3q, PYSEC-2011-18 | Medium | 4.5% | 11 Apr, 2011 | PyPI feedparser |
feedparser Cross-site Scripting vulnerability CVE-2011-1157, GHSA-2p78-8hh6-96xc, PYSEC-2011-20 | Medium | 2.5% | 11 Apr, 2011 | PyPI feedparser |
feedparser Cross-site Scripting vulnerability CVE-2011-1158, GHSA-4m72-rmm9-2qjr, PYSEC-2011-21 | Medium | 2.3% | 11 Apr, 2011 | PyPI feedparser |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2011-1058, GHSA-m9j7-xcj7-42j9, PYSEC-2011-6 | Medium | 2.5% | 22 Feb, 2011 | PyPI moin |
Cross-site scripting in django CVE-2011-0697, GHSA-8m3r-rv5g-fcpq, PYSEC-2011-11, PYSEC-2011-31 | Medium | 2.6% | 14 Feb, 2011 | PyPI Django PyPI django |
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack CVE-2010-4338, GHSA-5pjj-7m4p-wfh2, PYSEC-2026-886 | Medium | 0.3% | 20 Jan, 2011 | PyPI ocrodjvu |
Improper date handling in Django CVE-2010-4535, GHSA-7wph-fc4w-wqp2, PYSEC-2011-29, PYSEC-2011-9 | Medium | 3.4% | 10 Jan, 2011 | PyPI Django PyPI django |
Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code CVE-2010-2477, GHSA-7gfc-2v6g-6w9f, PYSEC-2010-29 | Medium | 2.3% | 06 Nov, 2010 | PyPI paste |
Directory Traversal in pyftpdlib CVE-2007-6736, GHSA-f8wg-36r9-7f4q, PYSEC-2010-20 | Medium | 1.9% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper privilege management in pyftpdlib CVE-2007-6741, GHSA-8xgx-75qw-6268, PYSEC-2010-25 | Medium | 1.8% | 19 Oct, 2010 | PyPI pyftpdlib |
Directory traversal in pyftpdlib CVE-2008-7262, GHSA-jw88-wxv5-7c4f, PYSEC-2010-4 | Medium | 2.0% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper input validation in pyftpdlib CVE-2008-7264, GHSA-8p2c-fghc-9hj4, PYSEC-2010-6 | Medium | 1.3% | 19 Oct, 2010 | PyPI pyftpdlib |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib CVE-2009-5010, GHSA-mpg6-rgp4-35rr, PYSEC-2010-7 | Medium | 1.4% | 19 Oct, 2010 | PyPI pyftpdlib |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib CVE-2009-5011, GHSA-62xg-239j-vxg7, PYSEC-2010-8 | Medium | 0.9% | 19 Oct, 2010 | PyPI pyftpdlib |
Uncontrolled Resource Consumption in pyftpdlib CVE-2009-5013, GHSA-8gv6-x88p-3f6h, PYSEC-2010-10 | Medium | 1.7% | 19 Oct, 2010 | PyPI pyftpdlib |
Zope Object Database Denial of Service vulnerability CVE-2010-3495, GHSA-j6m4-frxh-p4x8, PYSEC-2010-27 | Medium | 1.3% | 19 Oct, 2010 | PyPI zodb3 |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2010-2491, GHSA-frgf-rv99-862x, PYSEC-2010-31 | Medium | 2.6% | 24 Sep, 2010 | PyPI roundup |
Cross-site scripting in django CVE-2010-3082, GHSA-fxpg-gg9g-76gj, PYSEC-2010-12 | Medium | 1.9% | 14 Sep, 2010 | PyPI Django PyPI django |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2010-2487, GHSA-5m2m-27cg-7v4v, PYSEC-2010-16 | Medium | 2.7% | 05 Aug, 2010 | PyPI moin |
MoinMoin cross-site scripting (XSS) vulnerability CVE-2010-2969, GHSA-2j76-26qq-7rvv, PYSEC-2010-17 | Medium | 2.6% | 05 Aug, 2010 | PyPI moin |
MoinMoin cross-site scripting (XSS) vulnerability CVE-2010-2970, GHSA-gxh5-r8gp-pjc3, PYSEC-2010-18 | Medium | 2.6% | 05 Aug, 2010 | PyPI Moin PyPI moin |
Cross-site Scripting in python-cjson CVE-2009-4924, GHSA-95jp-77w6-qj52, PYSEC-2010-26 | Medium | 1.4% | 02 Jul, 2010 | PyPI python-cjson |
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson CVE-2010-1666, GHSA-cqmh-mpx2-g633, PYSEC-2010-30 | Medium | 1.7% | 02 Jul, 2010 | PyPI python-cjson |
Mako contains Cross-site Scripting vulnerability CVE-2010-2480, GHSA-7q8x-38mc-p84f, PYSEC-2010-1 | Medium | 1.8% | 02 Jul, 2010 | PyPI mako |
Plone Cross-site Scripting vulnerability in PortalTransforms CVE-2010-2422, GHSA-qj7x-wm9q-qjx8, PYSEC-2010-19 | Medium | 2.0% | 24 Jun, 2010 | PyPI Plone PyPI plone |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2010-0828, GHSA-fc72-v54c-x9jg, PYSEC-2010-28 | Medium | 2.3% | 05 Apr, 2010 | PyPI moin |
Moderate severity vulnerability that affects Zope2 CVE-2010-1104, GHSA-v7q8-wvvh-c97p, PYSEC-2026-765 | Medium | 2.0% | 25 Mar, 2010 | PyPI Zope2 PyPI zope2 |
MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration CVE-2010-0668, GHSA-574f-mh6m-c6qm, PYSEC-2010-15 | Medium | 2.2% | 26 Feb, 2010 | PyPI moin |
Buildbot vulnerable to cross-site scripting CVE-2009-2967, GHSA-mj3x-wprp-mvj9, PYSEC-2009-2 | Medium | 2.3% | 26 Aug, 2009 | PyPI buildbot |
Buildbot Cross-site scripting (XSS) vulnerability CVE-2009-2959, GHSA-jqqh-999x-w26w, PYSEC-2009-1 | Medium | 2.0% | 25 Aug, 2009 | PyPI buildbot |
Roundup Improper Access Control CVE-2009-2737, GHSA-9rj9-5wcv-xgf2, PYSEC-2026-744 | Medium | 2.3% | 11 Aug, 2009 | PyPI Roundup PyPI roundup |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2009-1482, GHSA-4pfg-2frf-f67v, PYSEC-2009-6 | Medium | 2.5% | 29 Apr, 2009 | PyPI moin |
Moderate severity vulnerability that affects Products.PlonePAS CVE-2009-0662, GHSA-pq3x-96c3-xgjg, PYSEC-2009-17, PYSEC-2026-739 | Medium | 1.0% | 23 Apr, 2009 | PyPI Products.PlonePAS PyPI plone PyPI products-plonepas |
MoinMoin improper access control on the included page for the rst parser CVE-2008-6548, GHSA-jhxw-4hw4-mhh7, PYSEC-2009-11 | Medium | 1.0% | 30 Mar, 2009 | PyPI moin |
MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature CVE-2009-0312, GHSA-cx94-3h5x-cc57, PYSEC-2026-676 | Medium | 2.4% | 28 Jan, 2009 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2009-0260, GHSA-7hjm-hqgj-xv9f, PYSEC-2026-670 | Medium | 5.5% | 23 Jan, 2009 | PyPI moin |
Trac has vulnerability in HTML sanitizer filter CVE-2008-5647, GHSA-ww53-wxxr-8f9w, PYSEC-2008-7 | Medium | 1.1% | 17 Dec, 2008 | PyPI Trac PyPI trac |
Plone Cross-site Scripting vulnerability in the LiveSearch module CVE-2008-4571, GHSA-46f9-f8jm-mw2x, PYSEC-2026-730 | Medium | 1.2% | 15 Oct, 2008 | PyPI Plone PyPI plone |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-3381, GHSA-q7q4-5g8p-33fq, PYSEC-2008-13 | Medium | 2.1% | 30 Jul, 2008 | PyPI moin |
Trac Open Redirect vulnerability CVE-2008-2951, GHSA-rcmj-xp8f-f6q4, PYSEC-2008-4 | Medium | 1.8% | 27 Jul, 2008 | PyPI trac |
Trac Cross-site Scripting (XSS) vulnerability CVE-2008-3328, GHSA-x6jf-c7wh-7m7w, PYSEC-2008-5 | Medium | 1.3% | 27 Jul, 2008 | PyPI trac |
Mercurial Directory traversal vulnerability CVE-2008-2942, GHSA-v2gw-x5jf-pgwv, PYSEC-2026-666 | Medium | 1.9% | 30 Jun, 2008 | PyPI mercurial |
Django Cross-site scripting (XSS) vulnerability CVE-2008-2302, GHSA-54qj-48vx-cr9f, PYSEC-2008-1 | Medium | 1.3% | 23 May, 2008 | PyPI django |
Roundup vulnerability related to Cross-site scripting (XSS) CVE-2008-1474, GHSA-c3qv-mf8h-434r, PYSEC-2008-9 | Medium | 1.5% | 24 Mar, 2008 | PyPI roundup |
Plone credentials stored in session cookie CVE-2008-1396, GHSA-hjp5-hv33-q58g, PYSEC-2026-732 | Medium | 1.1% | 20 Mar, 2008 | PyPI plone |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-1098, GHSA-8fj9-pj4p-4vq7, PYSEC-2026-672 | Medium | 1.8% | 05 Mar, 2008 | PyPI moin |
MoinMoin Improper Access Control CVE-2008-1099, GHSA-jj2f-57jg-5rm6, PYSEC-2026-677 | Medium | 2.0% | 05 Mar, 2008 | PyPI moin |
MoinMoin Cross-site scripting (XSS) vulnerability CVE-2008-0780, GHSA-53wj-6m7w-j6mj, PYSEC-2026-667 | Medium | 1.8% | 14 Feb, 2008 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-0781, GHSA-775g-4482-pm94, PYSEC-2026-669 | Medium | 2.6% | 14 Feb, 2008 | PyPI moin |