Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Memory exhaustion in Tensorflow BIT-tensorflow-2022-21733, CVE-2022-21733, GHSA-98j8-c9q4-r38g, PYSEC-2022-112, PYSEC-2022-57, PYSEC-2026-3145 | Medium | 0.8% | 03 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cross-site Scripting in Django BIT-django-2022-22818, CVE-2022-22818, GHSA-95rw-fx8r-36v6, PYSEC-2022-19 | Medium | 3.4% | 03 Feb, 2022 | PyPI django |
RosarioSIS XSS Vulnerability CVE-2021-45416, GHSA-287r-574x-f4h4 | Medium | 2.3% | 01 Feb, 2022 | Packagist francoisjacquet/rosariosis |
Cross-site Scripting and Open Redirect in plone.app.contenttypes GHSA-f7qw-5fgj-247x | Medium | Not scored | 01 Feb, 2022 | PyPI plone-app-contenttypes PyPI plone.app.contenttypes |
Command injection in gh-ost CVE-2022-21687, GHSA-rrp4-2xx3-mv29, GO-2022-0298 | Medium | 1.0% | 01 Feb, 2022 | Go github.com/github/gh-ost |
Go-Attestation Improper Input Validation with attacker-controlled TPM Quote CVE-2022-0317, GHSA-99cg-575x-774p, GO-2022-0294 | Medium | 0.1% | 01 Feb, 2022 | Go github.com/google/go-attestation |
Observable Response Discrepancy in Flask-AppBuilder CVE-2022-21659, GHSA-wfjw-w6pv-8p7f, PYSEC-2022-24 | Medium | 1.0% | 31 Jan, 2022 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input BIT-dolibarr-2022-0414, CVE-2022-0414, GHSA-f768-8pvq-mm6r | Medium | 1.0% | 31 Jan, 2022 | Packagist dolibarr/dolibarr |
Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS CVE-2022-23409, GHSA-9chx-2vqw-8vq5 | Medium | 13.8% | 31 Jan, 2022 | Packagist ether/logs |
Cross-site Scripting and Open Redirect in Products.CMFPlone GHSA-8w54-22w9-3g8f | Medium | Not scored | 28 Jan, 2022 | PyPI Products.CMFPlone PyPI products-cmfplone |
Cross-site Scripting when rendering error messages in laminas-form CVE-2022-23598, GHSA-jq4p-mq33-w375 | Medium | 1.0% | 28 Jan, 2022 | Packagist laminas/laminas-form |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0395, CVE-2022-0395, GHSA-54qq-9chj-rxhv | Medium | 0.6% | 28 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in calibreweb CVE-2022-0352, GHSA-h56g-v4vp-q9q6, PYSEC-2022-18 | Medium | 0.9% | 28 Jan, 2022 | PyPI calibreweb |
Cross-site Scripting and Open Redirect in Products.ATContentTypes CVE-2022-23599, GHSA-g4c2-ghfg-g5rh, PYSEC-2022-21 | Medium | 0.8% | 28 Jan, 2022 | PyPI Products.ATContentTypes PyPI products-atcontenttypes |
Cross-site Scripting in LiveHelperChat BIT-livehelperchat-2022-0394, CVE-2022-0394, GHSA-vwxp-9qmf-w299 | Medium | 0.5% | 28 Jan, 2022 | Packagist remdex/livehelperchat |
SQL injection in github.com/navidrome/navidrome CVE-2022-23857, GHSA-pmcr-2rhp-36hr, GO-2022-0302 | Medium | 0.9% | 27 Jan, 2022 | Go github.com/navidrome/navidrome |
Denial of Service in graphql-go CVE-2022-21708, GHSA-mh3m-8c74-74xh, GO-2022-0300 | Medium | 1.2% | 27 Jan, 2022 | Go github.com/graph-gophers/graphql-go |
Subdomain Takeover in Interactsh server CVE-2023-36474, GHSA-m36x-mgfh-8g78, GO-2022-0372 | Medium | 0.5% | 27 Jan, 2022 | Go github.com/projectdiscovery/interactsh |
Cross-site Scripting in pimcore CVE-2022-0348, GHSA-8x44-pwr2-rgc6 | Medium | 0.6% | 27 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in Crater Invoice CVE-2022-0372, GHSA-6vfw-74wr-3chh | Medium | 0.6% | 27 Jan, 2022 | Packagist bytefury/crater |
Cross-site Scripting in livehelperchat CVE-2022-0387, GHSA-w4hp-pcp8-qhf3 | Medium | 0.6% | 27 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in livehelperchat CVE-2022-0370, GHSA-8wcc-f2vq-h4gx | Medium | 0.8% | 27 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in microweber CVE-2022-0379, GHSA-prff-6j8q-vrv7 | Medium | 0.9% | 26 Jan, 2022 | Packagist microweber/microweber |
Cross-site Scripting in microweber CVE-2022-0378, GHSA-3j58-p785-f27x | Medium | 3.9% | 26 Jan, 2022 | Packagist microweber/microweber |
Missing Authorization in Crater Invoice CVE-2022-0203, GHSA-xh9g-cp3v-p8q4 | Medium | 1.2% | 26 Jan, 2022 | Packagist bytefury/crater |
Cross-site Scripting in Pimcore CVE-2022-0251, GHSA-f7q6-xxph-mfm8 | Medium | 0.7% | 26 Jan, 2022 | Packagist pimcore/pimcore |
Cross-site Scripting in livehelperchat BIT-livehelperchat-2022-0375, CVE-2022-0375, GHSA-x3g3-jh26-76cf | Medium | 0.7% | 26 Jan, 2022 | Packagist remdex/livehelperchat |
Cross-site Scripting in livehelperchat BIT-livehelperchat-2022-0374, CVE-2022-0374, GHSA-59qh-g7m4-j9m9 | Medium | 0.7% | 26 Jan, 2022 | Packagist remdex/livehelperchat |
Insufficient user authorization in Moodle BIT-moodle-2022-0334, CVE-2022-0334, GHSA-93pj-4p65-qmr9 | Medium | 0.7% | 25 Jan, 2022 | Packagist moodle/moodle |
Cross-site Scripting in grav CVE-2022-0268, GHSA-735v-wx75-xmmm | Medium | 1.4% | 25 Jan, 2022 | Packagist getgrav/grav |
loguru logs sensitive information CVE-2022-0338, GHSA-39ph-wr67-j4xq, PYSEC-2022-14 | Medium | 0.8% | 25 Jan, 2022 | PyPI loguru |
Cross-site Scripting Vulnerability in CodeIgniter4 BIT-codeigniter-2022-21715, CVE-2022-21715, GHSA-7528-7jg5-6g62 | Medium | 1.0% | 24 Jan, 2022 | Packagist codeigniter4/framework |
vditor Vulnerable to Cross-site Scripting in SVG events CVE-2021-4103, GHSA-cxm3-v4mv-6mh8 | Medium | 0.7% | 23 Jan, 2022 | npm vditor |
Cross-site Scripting in showdoc CVE-2021-4172, GHSA-7x22-pmw5-66mq | Medium | 0.6% | 22 Jan, 2022 | Packagist showdoc/showdoc |
Cross-site Scripting in phpmyadmin BIT-phpmyadmin-2022-23808, CVE-2022-23808, GHSA-vcwc-6mr9-8m7c | Medium | 7.9% | 22 Jan, 2022 | Packagist phpmyadmin/phpmyadmin |
Improper Authentication in phpmyadmin BIT-phpmyadmin-2022-23807, CVE-2022-23807, GHSA-8wf2-3ggj-78q9 | Medium | 0.7% | 22 Jan, 2022 | Packagist phpmyadmin/phpmyadmin |
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP CVE-2022-51016, GHSA-h79x-98r2-g6qc | Medium | 0.2% | 21 Jan, 2022 | Packagist pocketmine/pocketmine-mp |
Insufficient Session Expiration in Pterodactyl API GHSA-7v3x-h7r2-34jv | Medium | Not scored | 21 Jan, 2022 | Packagist pterodactyl/panel |
Invalid URL generation in bitlyshortener GHSA-rcrv-228c-gprj | Medium | Not scored | 21 Jan, 2022 | PyPI bitlyshortener |
Cross-site Scripting in pimcore CVE-2022-0285, GHSA-pm3v-qxf6-fgxv | Medium | 1.5% | 20 Jan, 2022 | Packagist pimcore/pimcore |
Improper Privilege Management in apache-airflow BIT-airflow-2021-45230, CVE-2021-45230, GHSA-4jh2-3c85-q67h, PYSEC-2022-11 | Medium | 1.7% | 20 Jan, 2022 | PyPI apache-airflow |
Cross-site Scripting in microweber CVE-2022-0278, GHSA-m8rp-q82r-c5mf | Medium | 0.7% | 20 Jan, 2022 | Packagist microweber/microweber |
Microweber Incorrect Permission Assignment for Critical Resource vulnerability CVE-2022-0277, GHSA-vcgf-vmpc-ph79 | Medium | 1.1% | 20 Jan, 2022 | Packagist microweber/microweber |
Incorrect Default Permissions in log4js CVE-2022-21704, GHSA-82v2-mx6x-wq7q | Medium | 0.3% | 19 Jan, 2022 | npm log4js |
Authorization Bypass Through User-Controlled Key in LiveHelperChat BIT-livehelperchat-2022-0266, CVE-2022-0266, GHSA-c7fm-jx59-wjf6 | Medium | 1.1% | 19 Jan, 2022 | Packagist remdex/livehelperchat |
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend CVE-2022-21690, GHSA-ch22-x2v3-v6vq, PYSEC-2022-41 | Medium | 0.8% | 18 Jan, 2022 | PyPI onionshare-cli |
Improper Access Control in Onionshare CVE-2022-21692, GHSA-gjj5-998g-v36v, PYSEC-2022-43 | Medium | 0.8% | 18 Jan, 2022 | PyPI onionshare-cli |
Incorrect Permission Assignment for Critical Resource in OnionShare CVE-2022-21694, GHSA-h29c-wcm8-883h, PYSEC-2022-45 | Medium | 1.3% | 18 Jan, 2022 | PyPI onionshare-cli |
Improper Access Control in Onionshare CVE-2022-21691, GHSA-w9m4-7w72-r766, PYSEC-2022-42 | Medium | 0.7% | 18 Jan, 2022 | PyPI onionshare-cli |
Path traversal in Onionshare CVE-2022-21693, GHSA-jgm9-xpfj-4fq6, PYSEC-2022-44 | Medium | 1.2% | 18 Jan, 2022 | PyPI onionshare-cli |