Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Twisted SSH client and server deny of service during SSH handshake. CVE-2022-21716, GHSA-rv6r-3f5q-9rgx, PYSEC-2022-160 | High | 3.5% | 03 Mar, 2022 | PyPI twisted |
Arm Mali GPU Kernel Driver Unspecified Vulnerability CVE-2022-22706 | HighExploited | 1.1% | 03 Mar, 2022 | |
Incorrect Authorization in @uppy/companion CVE-2022-0528, GHSA-q24h-5rq3-63j9 | High | 1.0% | 03 Mar, 2022 | npm @uppy/companion |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component CVE-2022-24722, GHSA-cm9w-c4rj-r2cf | High | 1.1% | 02 Mar, 2022 | RubyGems view_component |
containerd CRI plugin: Insecure handling of image volumes CVE-2022-23648, GHSA-crp2-qrr5-8pq7, GO-2022-0344 | High | 27.4% | 02 Mar, 2022 | Go github.com/containerd/containerd |
Code injection in dolibarr/dolibarr BIT-dolibarr-2022-0819, CVE-2022-0819, GHSA-42qm-c3cf-9wv2 | High | 42.7% | 02 Mar, 2022 | Packagist dolibarr/dolibarr |
Path Traversal in @finastra/ssr-pages CVE-2022-24718, GHSA-w6cx-qg2q-rvq8 | High | 1.1% | 01 Mar, 2022 | npm @finastra/ssr-pages |
Rate limit missing in microweber CVE-2022-0777, GHSA-7r79-mrp6-8mhq | High | 1.2% | 01 Mar, 2022 | Packagist microweber/microweber |
HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling CVE-2022-24685, GHSA-3382-r9q8-4hfg, GO-2022-0577 | High | 1.5% | 01 Mar, 2022 | Go github.com/hashicorp/nomad |
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 BIT-codeigniter-2022-24712, CVE-2022-24712, GHSA-4v37-24gm-h554 | High | 0.6% | 28 Feb, 2022 | Packagist codeigniter4/framework |
Unrestricted Upload of File with Dangerous Type in MODX Revolution CVE-2022-26149, GHSA-j8jp-9x42-4pj5 | High | 9.3% | 26 Feb, 2022 | Packagist modx/revolution |
Vulnerable dependencies in Nokogiri CVE-2022-51000, GHSA-fq42-c5rg-92c2 | High | Not scored | 25 Feb, 2022 | RubyGems nokogiri |
OS Command injection in Apache Airflow BIT-airflow-2022-24288, CVE-2022-24288, GHSA-3v7g-4pg3-7r6j, PYSEC-2022-30 | High | 78.4% | 25 Feb, 2022 | PyPI apache-airflow |
Cross site scripting in @awsui/components-react CVE-2022-24709, GHSA-mf22-92pm-m8p8 | High | 0.7% | 24 Feb, 2022 | npm @awsui/components-react |
Multi-Factor Authentication issue in Laravel Fortify CVE-2022-25838, GHSA-6w4v-qr4m-97gg | High | 0.9% | 24 Feb, 2022 | Packagist laravel/fortify |
WatchGuard Firebox and XTM Privilege Escalation Vulnerability CVE-2022-23176 | HighExploited | 10.9% | 24 Feb, 2022 | |
File upload restriction bypass in Zenario CMS CVE-2022-23043, GHSA-6r86-2jm9-9mh4 | High | 1.5% | 24 Feb, 2022 | Packagist tribalsystems/zenario |
Improper Authentication in Capsule Proxy CVE-2022-23652, GHSA-9cwv-cppx-mqjm, GO-2022-0329 | High | 1.4% | 23 Feb, 2022 | Go github.com/clastix/capsule-proxy |
Authenticated remote code execution in October CMS CVE-2022-21705, GHSA-79jw-2f46-wv22 | High | 8.6% | 23 Feb, 2022 | Packagist october/system |
Unauthenticated control plane denial of service attack in Istio CVE-2022-23635, GHSA-856q-xv3c-7f2f | High | 1.7% | 23 Feb, 2022 | Go istio.io/istio |
Insecure Storage of Sensitive Information in Microweber CVE-2022-0724, GHSA-j8cx-j9j2-f29w | High | 1.3% | 23 Feb, 2022 | Packagist microweber/microweber |
Insertion of Sensitive Information Into Debugging Code in Microweber CVE-2022-0721, GHSA-mjvc-j6rv-9xj8 | High | 1.4% | 23 Feb, 2022 | Packagist microweber/microweber |
Cross-site Scripting in Microweber CVE-2022-0719, GHSA-hj8g-cw8x-2c6m | High | 0.9% | 23 Feb, 2022 | Packagist microweber/microweber |
Insecure Temporary File in mlflow BIT-mlflow-2022-0736, CVE-2022-0736, GHSA-vqj2-4v8m-8vrq, PYSEC-2022-28 | High | 1.6% | 23 Feb, 2022 | PyPI mlflow |
Cookie exposure in requestretry CVE-2022-0654, GHSA-hjp8-2cm3-cc45 | High | 1.4% | 23 Feb, 2022 | npm requestretry |
Use of Hard-coded Cryptographic Key in Netmaker CVE-2022-23650, GHSA-86f3-hf24-76q4, GO-2022-0328 | High | 1.6% | 22 Feb, 2022 | Go github.com/gravitl/netmaker |
Incorrect Default Permissions in Cobbler CVE-2021-45083, GHSA-5946-mpw5-pqxx, PYSEC-2022-38 | High | 0.3% | 20 Feb, 2022 | PyPI cobbler |
Cross-site Scripting in microweber CVE-2022-0690, GHSA-rgp5-m2pq-3fmg | High | 1.1% | 19 Feb, 2022 | Packagist microweber/microweber |
Unrestricted Upload of File with Dangerous Type in showdoc CVE-2022-0409, GHSA-6x3j-x9rp-whxp | High | 0.9% | 19 Feb, 2022 | Packagist showdoc/showdoc |
SSRF in Kitodo.Presentation CVE-2022-24980, GHSA-x832-r2rj-4g5p | High | 1.2% | 19 Feb, 2022 | Packagist kitodo/presentation |
Command Injection in Cobbler CVE-2021-45082, GHSA-6cm4-gm85-972c, PYSEC-2022-37 | High | 0.5% | 19 Feb, 2022 | PyPI cobbler |
Cross-site Scripting in Prism CVE-2022-23647, GHSA-3949-f494-cm99 | High | 1.4% | 18 Feb, 2022 | npm prismjs |
CRLF Injection in microweber CVE-2022-0666, GHSA-3wwj-wh2w-g4xp | High | 44.3% | 18 Feb, 2022 | Packagist microweber/microweber |
Generation of Error Message Containing Sensitive Information in microweber CVE-2022-0660, GHSA-hhrj-wp42-32v3 | High | 6.9% | 18 Feb, 2022 | Packagist microweber/microweber |
Arbitrary file reads in HashiCorp Nomad CVE-2022-24683, GHSA-wmrx-57hm-mw7r, GO-2022-0584 | High | 1.5% | 18 Feb, 2022 | Go github.com/hashicorp/nomad |
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0 CVE-2022-23646, GHSA-fmvm-x8mv-47mj | High | 1.8% | 17 Feb, 2022 | npm next |
Server crash if running Python 3.10 w/ Sanic 20.12 GHSA-7p79-6x2v-5h88 | High | Not scored | 16 Feb, 2022 | PyPI sanic |
Skip the router TLS configuration when the host header is an FQDN CVE-2022-23632, GHSA-hrhx-6h34-j5hc, GO-2022-0325 | High | 1.7% | 16 Feb, 2022 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
Uncontrolled Resource Consumption in promhttp CVE-2022-21698, GHSA-cg3q-j54f-5p7p, GO-2022-0322 | High | 6.0% | 16 Feb, 2022 | Go github.com/prometheus/client_golang |
Red Hat Polkit Incorrect Authorization Vulnerability CVE-2021-3560 | HighExploited | 22.2% | 16 Feb, 2022 | |
Improper input validation in Drupal core BIT-drupal-2022-25271, CVE-2022-25271, DRUPAL-CORE-2022-003, GHSA-fmfv-x8mp-5767 | High | 1.3% | 16 Feb, 2022 | Packagist drupal/core |
Improper Privilege Management in Snipe-IT CVE-2022-0611, GHSA-j57w-3c39-gpp5 | High | 1.2% | 16 Feb, 2022 | Packagist snipe/snipe-it |
Improper Authorization in librenms CVE-2022-0587, GHSA-ppfm-rj6p-38q6 | High | 1.0% | 15 Feb, 2022 | Packagist librenms/librenms |
Noise vulnerable to denial of service CVE-2021-4239, GHSA-6cr6-fmvc-vw2p, GHSA-g9mp-8g3h-3c5c, GO-2022-0425 | High | 0.4% | 15 Feb, 2022 | Go github.com/flynn/noise |
Improper Access Control in librenms CVE-2022-0580, GHSA-33wf-4crm-2322 | High | 1.2% | 14 Feb, 2022 | Packagist librenms/librenms |
Google Chromium V8 Use-After-Free Vulnerability CVE-2021-4102 | HighExploited | 7.8% | 11 Feb, 2022 | |
Puma used with Rails may lead to Information Exposure CVE-2022-23634, GHSA-rmj8-8hhh-gv5h | High | 2.1% | 11 Feb, 2022 | RubyGems puma |
Exposure of information in Action Pack CVE-2022-23633, GHSA-wh98-p28r-vrc9 | High | 2.2% | 11 Feb, 2022 | RubyGems actionpack |
Linux Kernel Heap-Based Buffer Overflow Vulnerability CVE-2022-0185 | HighExploited | 25.2% | 11 Feb, 2022 | |
Uncaught Exception in fastify-multipart CVE-2021-23597, GHSA-qh73-qc3p-rjv2, SNYK-JS-FASTIFYMULTIPART-2395480 | High | 2.0% | 11 Feb, 2022 | npm fastify-multipart |