Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MoinMoin Directory traversal vulnerability CVE-2008-0782, GHSA-6766-r2rx-mfw9, PYSEC-2026-668 | Medium | 14.9% | 14 Feb, 2008 | PyPI moin |
FTP backend for Duplicity Discloses Passwords to Process Listing CVE-2007-5201, GHSA-wxcw-rqxc-hj85, PYSEC-2026-633 | Medium | 0.4% | 04 Oct, 2007 | PyPI duplicity |
MoinMoin Improper ACL handling for calendars and includes CVE-2007-2637, GHSA-cmg7-xr2j-4r9v, PYSEC-2026-675 | Medium | 1.5% | 13 May, 2007 | PyPI moin |
Trac Cross-site Scripting (XSS) vulnerability CVE-2007-1405, GHSA-w7x2-57f7-3p3x, PYSEC-2007-2 | Medium | 1.1% | 10 Mar, 2007 | PyPI trac |
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters CVE-2007-0901, GHSA-9gj2-ph57-56f5, PYSEC-2026-673 | Medium | 1.8% | 13 Feb, 2007 | PyPI Moin PyPI moin |
MoinMoin Insertion of Sensitive Information into Log File CVE-2007-0902, GHSA-mxh8-xgq9-w782, PYSEC-2026-679 | Medium | 1.4% | 13 Feb, 2007 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2007-0857, GHSA-m84w-vgwf-p893, PYSEC-2026-678 | Medium | 2.4% | 08 Feb, 2007 | PyPI moin |
Django Improper Access Control CVE-2007-0405, GHSA-mwv2-398h-v489, PYSEC-2026-629 | Medium | 1.3% | 23 Jan, 2007 | PyPI Django PyPI django |
Plone allows a user to masquerade as a group CVE-2006-4249, GHSA-r7j4-82xw-8m9p, PYSEC-2006-10, PYSEC-2006-6 | Medium | 1.0% | 07 Dec, 2006 | PyPI Plone PyPI plone |
Zope allows remote attackers to read arbitrary files CVE-2006-4684, GHSA-hm8g-jxjj-gfm3, PYSEC-2006-8 | Medium | 2.5% | 19 Sep, 2006 | PyPI zope2 |
Libextractor multiple heap-based buffer overflows CVE-2006-2458, GHSA-f836-7jqw-3684, PYSEC-2006-4 | Medium | 9.0% | 18 May, 2006 | PyPI extractor |
Plone allows remote users to modify arbitrary portraits CVE-2006-1711, GHSA-jcwh-rj6j-vm75, PYSEC-2026-733 | Medium | 4.0% | 11 Apr, 2006 | PyPI plone |
Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability CVE-2005-4644, GHSA-6vhp-hp77-6w52, PYSEC-2005-1 | Medium | 1.5% | 31 Dec, 2005 | PyPI trac |
mailman Cross-site scripting (XSS) vulnerability CVE-2004-1177, GHSA-rh6c-jh4c-9fg3, PYSEC-2026-659 | Medium | 1.8% | 10 Jan, 2005 | PyPI mailman |
Roundup Directory traversal vulnerability CVE-2004-1444, GHSA-q7mf-hp9m-cx6f, PYSEC-2026-745 | Medium | 8.9% | 31 Dec, 2004 | PyPI Roundup PyPI roundup |
Mailman Sensitive Information Disclosure CVE-2004-0412, GHSA-hj4h-vqpq-95wg, PYSEC-2026-658 | Medium | 3.0% | 18 Aug, 2004 | PyPI mailman |
Mailman Cross-site scripting (XSS) vulnerability CVE-2003-0038, GHSA-82rm-28q9-435p, PYSEC-2026-657 | Medium | 4.8% | 07 Feb, 2003 | PyPI mailman |
Zope Server vulnerable to DoS via header injection CVE-2002-0687, GHSA-vwrc-g9q6-f675, PYSEC-2026-761 | Medium | 1.5% | 23 Jul, 2002 | PyPI zope |
Zope allows attackers to modify raw image and file data CVE-2000-1212, GHSA-7whr-j8vf-r4wj, PYSEC-2026-756 | Medium | 1.5% | 18 Dec, 2000 | PyPI zope |