Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Django DoS in django.views.static.serve CVE-2015-0221, GHSA-jhjg-w2cp-5j44, PYSEC-2015-6 | High | 4.4% | 16 Jan, 2015 | PyPI Django PyPI django |
Django database denial-of-service with ModelMultipleChoiceField CVE-2015-0222, GHSA-6g95-x6cj-mg4v, PYSEC-2015-7 | High | 2.7% | 16 Jan, 2015 | PyPI Django PyPI django |
Plone and Zope2 do not reseed pseudo-random number generator CVE-2012-6661, GHSA-48vv-2pmq-9fvv, PYSEC-2014-51, PYSEC-2014-76 | High | 2.4% | 03 Nov, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Bottle does not properly limit content-types CVE-2014-3137, GHSA-873q-wpqr-xfgw, PYSEC-2014-77 | High | 3.1% | 25 Oct, 2014 | PyPI bottle |
python-gnupg's shell_quote function does not properly quote strings CVE-2014-1927, GHSA-r3vr-prwv-86g9, PYSEC-2014-90 | High | 3.4% | 25 Oct, 2014 | PyPI python-gnupg |
python-gnupg's shell_quote function does not properly escape characters CVE-2014-1928, GHSA-2jc8-4r6g-282j, PYSEC-2014-91 | High | 0.6% | 25 Oct, 2014 | PyPI python-gnupg |
OpenStack keystonemiddleware does not verify certificate CVE-2014-7144, GHSA-7f2c-vp52-gmfw, PYSEC-2014-26, PYSEC-2014-71 | High | 1.9% | 02 Oct, 2014 | PyPI keystonemiddleware PyPI python-keystoneclient |
Plone Code Injection vulnerability CVE-2012-5485, GHSA-7hxc-mwx7-5hmc, PYSEC-2014-27 | High | 2.1% | 30 Sep, 2014 | PyPI Plone PyPI plone |
HTTP header injection in Plone and Zope2 CVE-2012-5486, GHSA-77hv-8796-8ccp, PYSEC-2014-28, PYSEC-2014-73 | High | 2.5% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Plone Sandbox Bypass CVE-2012-5487, GHSA-9m4g-f42q-vrrh, PYSEC-2014-29 | High | 1.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Code Injection vulnerability CVE-2012-5488, GHSA-cxw7-85xm-3xrc, PYSEC-2014-30 | High | 2.6% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone and Zope2 vulnerable to unauthorized access to restricted attributes CVE-2012-5489, GHSA-879r-7f3w-8jj3, PYSEC-2014-31, PYSEC-2014-74 | High | 1.9% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Plone Sandbox Bypass CVE-2012-5493, GHSA-25jh-5h5r-h33m, PYSEC-2014-35 | High | 1.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone DoS via Crafted URL CVE-2012-5496, GHSA-gx6w-hcw3-5r37, PYSEC-2014-38 | High | 1.6% | 30 Sep, 2014 | PyPI plone |
Plone denial of service via Caching Bypass CVE-2012-5498, GHSA-97rj-p794-wq6m, PYSEC-2014-40 | High | 2.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone is vulnerable to denial of service CVE-2012-5499, GHSA-wrf2-2rch-cmr9, PYSEC-2014-41 | High | 2.5% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Arbitrary File Read CVE-2012-5501, GHSA-pvhv-qwc8-r2pg, PYSEC-2014-43 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone allows remote attackers to read hidden folder contents CVE-2012-5503, GHSA-prr5-pfr8-q9f3, PYSEC-2014-45 | High | 2.1% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Information Disclosure CVE-2012-5505, GHSA-cq5g-924m-7fxh, PYSEC-2014-47 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone denial of service via RSS Feed Request CVE-2012-5506, GHSA-79hj-474h-v4xv, PYSEC-2014-48 | High | 1.6% | 30 Sep, 2014 | PyPI plone |
Plone and Zope2 affected by Race Condition CVE-2012-5507, GHSA-3qpr-7rmg-73v8, PYSEC-2014-49, PYSEC-2014-75 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Gentoo Portage does not verify X.509 certificates from SSL servers CVE-2013-2100, GHSA-8823-xphr-qw9v, PYSEC-2014-115 | High | 1.6% | 29 Sep, 2014 | PyPI portage |
Django Incorrectly Validates URLs CVE-2014-0480, GHSA-f7cm-ccfp-3q4r, PYSEC-2014-4 | High | 2.3% | 26 Aug, 2014 | PyPI Django PyPI django |
Django denial of service via file upload naming CVE-2014-0481, GHSA-296w-6qhq-gf92, PYSEC-2014-5 | High | 2.5% | 26 Aug, 2014 | PyPI Django PyPI django |
Pillow denial of service via Crafted Block Size CVE-2014-3589, GHSA-cfmr-38g9-f2h7, PYSEC-2014-10 | High | 3.4% | 25 Aug, 2014 | PyPI pillow |
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events CVE-2014-5251, GHSA-gmvp-5rf9-mxcm, PYSEC-2014-107 | High | 1.6% | 25 Aug, 2014 | PyPI keystone |
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events CVE-2014-5252, GHSA-v8fq-gq9j-3v7h, PYSEC-2014-108 | High | 1.5% | 25 Aug, 2014 | PyPI keystone |
OpenStack Keystone Domain-scoped tokens don't get revoked CVE-2014-5253, GHSA-77w8-qv8m-386h, PYSEC-2014-109 | High | 1.5% | 25 Aug, 2014 | PyPI keystone |
SaltStack Salt Insecure Temporary File Creation CVE-2014-3563, GHSA-mfr3-9cj8-h2qm, PYSEC-2014-18 | High | 0.4% | 22 Aug, 2014 | PyPI salt |
IPython Notebook vulnerable to improper validation of the origin of websocket requests CVE-2014-3429, GHSA-75cw-5cgv-g853, PYSEC-2014-21 | High | 4.7% | 07 Aug, 2014 | PyPI ipython |
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters CVE-2013-7323, GHSA-c2fx-8r76-gh36, PYSEC-2014-89 | High | 2.9% | 09 Jun, 2014 | PyPI python-gnupg |
SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346, GHSA-4433-4cxq-vv73, PYSEC-2014-85 | High | 2.4% | 20 May, 2014 | PyPI oauth2 |
Incorrect Privilege Assignment in Jinja2 CVE-2014-1402, GHSA-8r7q-cvjq-x353, PYSEC-2014-8 | High | 0.4% | 19 May, 2014 | PyPI Jinja2 PyPI jinja2 |
Django Allows Open Redirects CVE-2014-3730, GHSA-vq3h-3q7v-9prw, PYSEC-2014-20 | High | 3.1% | 16 May, 2014 | PyPI Django PyPI django |
PyWBEM TOCTOU vulnerability in certificate validation CVE-2013-6418, GHSA-f9q5-46qg-74x4, PYSEC-2014-93 | High | 1.7% | 05 May, 2014 | PyPI pywbem |
Transifex command-line client has improper certificate validation CVE-2013-7110, GHSA-jf99-2rj4-jxrm, PYSEC-2014-72 | High | 0.8% | 02 May, 2014 | PyPI transifex-client |
Django Reuses Cached CSRF Token CVE-2014-0473, GHSA-89hj-xfx5-7q66, PYSEC-2014-2 | High | 2.0% | 23 Apr, 2014 | PyPI Django PyPI django |
Django Vulnerable to MySQL Injection CVE-2014-0474, GHSA-wqjj-hx84-v449, PYSEC-2014-3 | High | 4.9% | 23 Apr, 2014 | PyPI Django PyPI django |
PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles CVE-2014-1932, GHSA-x895-2wrm-hvp7, PYSEC-2014-22 | High | 0.5% | 17 Apr, 2014 | PyPI pillow |
OpenStack Identity (Keystone) DoS through V3 API authentication chaining CVE-2014-2828, GHSA-6mv3-p2gr-wgqf, PYSEC-2014-106 | High | 3.2% | 15 Apr, 2014 | PyPI keystone |
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend CVE-2014-2237, GHSA-23x9-8hxr-978c, PYSEC-2014-105 | High | 1.4% | 01 Apr, 2014 | PyPI keystone |
OpenStack Nova VMWare driver leaks rescued images CVE-2014-2573, GHSA-jv34-xvjq-ppch, PYSEC-2014-113 | High | 0.7% | 25 Mar, 2014 | PyPI nova |
Plone is vulnerable to email spoofing CVE-2013-4192, GHSA-f5h9-3hpf-9j8m, PYSEC-2014-56 | High | 1.1% | 11 Mar, 2014 | PyPI plone |
Plone Unrestricted Filed Manipulation vulnerability via content edit forms CVE-2013-4193, GHSA-6fgf-x7wg-hp8r, PYSEC-2014-57 | High | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone Improper Access Control Vulnerability CVE-2013-4197, GHSA-jjvw-3h9j-p7jf, PYSEC-2014-61 | High | 1.3% | 11 Mar, 2014 | PyPI plone |
Improper Link Resolution Before File Access in logilab-commons CVE-2014-1838, GHSA-rr52-wg7f-8875, PYSEC-2014-83 | High | 0.3% | 11 Mar, 2014 | PyPI logilab-common |
python-bugzilla has improper validation of X.509 certificates CVE-2013-2191, GHSA-2q4h-27m7-rj67, PYSEC-2014-88 | High | 0.9% | 08 Feb, 2014 | PyPI python-bugzilla |
OpenStack Nova Live migration can leak root disk into ephemeral storage CVE-2013-7130, GHSA-99rx-9x8v-9j8p, PYSEC-2014-111 | High | 2.4% | 06 Feb, 2014 | PyPI nova |
OpenStack Swift Discloses Secret URLs to Timing Attack CVE-2014-0006, GHSA-cf9m-q836-vf26, PYSEC-2014-116 | High | 1.9% | 23 Jan, 2014 | PyPI swift |
python-keystoneclient missing expiration check in PKI token validation CVE-2013-2104, GHSA-4rrr-j7ff-r844, PYSEC-2014-69 | High | 2.1% | 21 Jan, 2014 | PyPI python-keystoneclient |