Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Stored XSS vulnerability on Bounce Management Callback CVE-2021-27910, GHSA-86pv-95mj-7w5f | High | 0.7% | 30 Aug, 2021 | Packagist mautic/core |
Cachet configuration leak CVE-2021-39174, GHSA-88f9-7xxh-c688 | High | 5.0% | 28 Aug, 2021 | Packagist cachethq/cachet |
Cachet vulnerable to forced reinstall CVE-2021-39173, GHSA-r67m-m8c7-jp83 | High | 2.4% | 27 Aug, 2021 | Packagist cachethq/cachet |
Cachet vulnerable to new line injection during configuration edition CVE-2021-39172, GHSA-9jxw-cfrh-jxq6 | High | 29.2% | 27 Aug, 2021 | Packagist cachethq/cachet |
Unlimited transforms allowed for signed nodes CVE-2021-39171, GHSA-5379-r78w-42h2 | High | 1.3% | 27 Aug, 2021 | npm passport-saml |
Data Flow Sanitation Issue Fix CVE-2021-32759, GHSA-xm9f-vxmx-4m58 | High | 1.8% | 27 Aug, 2021 | Packagist openmage/magento-lts |
Layout XML Arbitrary Code Fix CVE-2021-32758, GHSA-26rr-v2j2-25fh | High | 2.0% | 27 Aug, 2021 | Packagist openmage/magento-lts |
Prototype Pollution in object-path CVE-2021-23434, GHSA-v39p-96qg-c8rf | High | 1.9% | 27 Aug, 2021 | npm object-path |
Unauthenticated SQL Injection in Cachet CVE-2021-39165, GHSA-79mg-4w23-4fqc | High | 8.2% | 26 Aug, 2021 | Packagist cachethq/cachet |
October CMS auth bypass and account takeover CVE-2021-29487, GHSA-h76r-vgf3-j6w5 | High | 0.9% | 26 Aug, 2021 | Packagist october/system |
Improper Restriction of Rendered UI Layers or Frames in yourls CVE-2021-3734, GHSA-r6g8-jmj9-g945 | High | 0.4% | 26 Aug, 2021 | Packagist yourls/yourls |
Cross-site scripting vulnerability in file upload CVE-2021-39136, GHSA-hgjr-632x-qpp3 | High | 0.9% | 25 Aug, 2021 | Packagist baserproject/basercms |
Code injection in nbgitpuller CVE-2021-39160, GHSA-mq5p-2mcr-m52j, PYSEC-2021-315 | High | 1.7% | 25 Aug, 2021 | PyPI nbgitpuller |
Istio Fragments in Path May Lead to Authorization Policy Bypass CVE-2021-39156, GHSA-hqxw-mm44-gc4r | High | 1.2% | 24 Aug, 2021 | Go istio.io/istio |
Authorization Policy Bypass Due to Case Insensitive Host Comparison CVE-2021-39155, GHSA-7774-7vr3-cc8j | High | 1.2% | 24 Aug, 2021 | Go istio.io/istio |
Improper Handling of Exceptional Conditions in detect-character-encoding CVE-2021-39157, GHSA-jqfh-8hw5-fqjr | High | 2.1% | 24 Aug, 2021 | npm detect-character-encoding |
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability CVE-2021-31010 | HighExploited | 3.7% | 24 Aug, 2021 | |
Apple iOS and iPadOS Buffer Overflow Vulnerability CVE-2021-30983 | HighExploited | 2.9% | 24 Aug, 2021 | |
Apple Multiple Products Integer Overflow or Wraparound Vulnerability CVE-2021-30952 | HighExploited | 7.0% | 24 Aug, 2021 | |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability CVE-2021-30900 | HighExploited | 5.2% | 24 Aug, 2021 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2021-30883 | HighExploited | 14.7% | 24 Aug, 2021 | |
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability CVE-2021-30869 | HighExploited | 4.2% | 24 Aug, 2021 | |
Apple Multiple Products Integer Overflow Vulnerability CVE-2021-30860 | HighExploited | 76.0% | 24 Aug, 2021 | |
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability CVE-2021-30858 | HighExploited | 13.4% | 24 Aug, 2021 | |
Ethereum Contains Consensus Flaw During Block Processing CVE-2021-39137, GHSA-9856-9gg9-qcmq, GO-2022-0254 | High | 1.3% | 24 Aug, 2021 | Go github.com/ethereum/go-ethereum |
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. CVE-2021-38557, GHSA-536p-4pcj-5mr9 | High | 2.2% | 24 Aug, 2021 | Packagist billz/raspap-webgui |
Command Injection in RaspAP 2.6.6 CVE-2021-38556, GHSA-7vph-p634-vrqf | High | 13.0% | 24 Aug, 2021 | Packagist billz/raspap-webgui |
Cross-site Request Forgery (CSRF) in joplin CVE-2021-23431, GHSA-gjwp-7v3g-99pj, SNYK-JS-JOPLIN-1325537 | High | 0.4% | 24 Aug, 2021 | npm joplin |
Directory Traversal in startserver CVE-2021-23430, GHSA-hqv3-qq72-78cv | High | 1.8% | 24 Aug, 2021 | npm startserver |
Uncontrolled Resource Consumption in transpile CVE-2021-23429, GHSA-7xrj-f5rp-j55h | High | 1.0% | 24 Aug, 2021 | npm transpile |
XStream Remote Code Execution Vulnerability CVE-2021-39144 | HighExploited | 98.1% | 23 Aug, 2021 | |
XML External Entity Injection in PyWPS CVE-2021-39371, GHSA-p9wf-3xpg-c9g5, PYSEC-2021-121 | High | 1.5% | 23 Aug, 2021 | PyPI pywps |
OS Command Injection in Centreon CVE-2020-22345, GHSA-2q95-593f-g7h7 | High | 3.8% | 18 Aug, 2021 | Packagist centreon/centreon |
Uncontrolled Resource Consumption in ansi-html CVE-2021-23424, GHSA-whgm-jr23-g3j9 | High | 1.8% | 18 Aug, 2021 | npm ansi-html |
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore CVE-2021-37702, GHSA-pp2h-95hm-hv9r | High | 1.1% | 18 Aug, 2021 | Packagist pimcore/pimcore |
Improper Handling of Unexpected Data Type in ced CVE-2021-39131, GHSA-27wq-qx3q-fxm9 | High | 1.9% | 17 Aug, 2021 | npm ced |
Command injection in @diez/generation CVE-2021-32830, GHSA-8c3f-x5f9-6h62 | High | 1.9% | 17 Aug, 2021 | npm @diez/generation |
Weak Password Recovery Mechanism for Forgotten Password CVE-2021-25957, GHSA-c32w-3cqh-f6jx | High | 1.1% | 17 Aug, 2021 | Packagist dolibarr/dolibarr |
Dolibarr vulnerable to Improper Authentication and Improper Access Control BIT-dolibarr-2021-25956, CVE-2021-25956, GHSA-fjqg-w8g6-hhq8 | High | 0.9% | 17 Aug, 2021 | Packagist dolibarr/dolibarr |
Authenticated server-side request forgery in file upload via URL. CVE-2021-37711, GHSA-gcvv-gq92-x94r | High | 1.1% | 16 Aug, 2021 | Packagist shopware/core Packagist shopware/platform |
Cross-Site Scripting via SVG media files CVE-2021-37710, GHSA-fc38-mxwr-pfhx | High | 0.7% | 16 Aug, 2021 | Packagist shopware/core Packagist shopware/platform |
Manipulation of product reviews via API CVE-2021-37707, GHSA-9f8f-574q-8jmf | High | 0.9% | 16 Aug, 2021 | Packagist shopware/core Packagist shopware/platform |
OS Command Injection in bikeshed CVE-2021-23422, GHSA-87cj-px37-rc3x, PYSEC-2021-116, SNYK-PYTHON-BIKESHED-1537646 | High | 0.8% | 16 Aug, 2021 | PyPI bikeshed |
Path Traversal in bikshed CVE-2021-23423, GHSA-hf6p-4rv2-9qrp, PYSEC-2021-117, SNYK-PYTHON-BIKESHED-1537647 | High | 1.1% | 16 Aug, 2021 | PyPI bikeshed |
Improper Resource Shutdown or Release in TYPO3 extension CVE-2021-38623, GHSA-34jq-548x-m2x9 | High | 1.0% | 13 Aug, 2021 | Packagist webcoast/deferred-image-processing |
CSRF token exposure in TYPO3 extension CVE-2021-36793, GHSA-vpw5-grxx-v396 | High | 1.0% | 13 Aug, 2021 | Packagist lms/routes |
Sensitive Data Exposure in miniorange_saml CVE-2021-36786, GHSA-g485-29gq-6h2h | High | 1.0% | 13 Aug, 2021 | Packagist miniorange/miniorange-saml |
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML. CVE-2021-37695, GHSA-m94c-37g6-cjhc | High | 1.3% | 13 Aug, 2021 | npm ckeditor4 |
Incomplete validation in `QuantizeV2` BIT-tensorflow-2021-37663, CVE-2021-37663, GHSA-g25h-jr74-qp5j, PYSEC-2021-285, PYSEC-2021-576, PYSEC-2021-774 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in MKL requantization BIT-tensorflow-2021-37665, CVE-2021-37665, GHSA-v82p-hv3v-p6qp, PYSEC-2021-287, PYSEC-2021-578, PYSEC-2021-776 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |