Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Regular Expression Denial of Service (ReDoS) CVE-2021-28092, GHSA-7r28-3m3f-r2pr | High | 2.0% | 12 Mar, 2021 | npm is-svg |
Regular Expression Denial of Service (ReDoS) CVE-2021-27290, GHSA-vx3p-948g-6vhq | High | 4.7% | 12 Mar, 2021 | npm ssri |
Prototype poisoning CVE-2021-21368, GHSA-gmjw-49p4-pcfm | High | 1.6% | 12 Mar, 2021 | npm msgpack5 |
printf vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-23354, GHSA-xfhp-gmh8-r8v2, SNYK-JS-PRINTF-1072096 | High | 2.2% | 12 Mar, 2021 | npm printf |
/user/sessions endpoint allows detecting valid accounts GHSA-7vwg-39h8-8qp8 | High | Not scored | 11 Mar, 2021 | Packagist ezsystems/ezplatform-rest |
Microsoft Internet Explorer Remote Code Execution Vulnerability CVE-2021-27085 | HighExploited | 5.4% | 11 Mar, 2021 | |
Microsoft Office Remote Code Execution Vulnerability CVE-2021-27059 | HighExploited | 6.1% | 11 Mar, 2021 | |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2021-26411 | HighExploited | 81.7% | 11 Mar, 2021 | |
Infinite loop when decoding inputs in encoding/xml BIT-golang-2021-27918, CVE-2021-27918, GO-2021-0234 | High | 2.5% | 11 Mar, 2021 | Go stdlib |
Execution of untrusted code through config file CVE-2021-21371, GHSA-8278-88vv-x98r, PYSEC-2021-60 | High | 0.5% | 10 Mar, 2021 | PyPI tenable-jira-cloud |
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers CVE-2021-21265, GHSA-xhfx-hgmf-v6vp | High | 1.7% | 10 Mar, 2021 | Packagist october/backend |
jspdf vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2021-23353, GHSA-57f3-gghm-9mhc | High | 2.6% | 09 Mar, 2021 | npm jspdf |
Google Chromium Race Condition Vulnerability CVE-2021-21166 | HighExploited | 24.0% | 09 Mar, 2021 | |
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager CVE-2021-21336, GHSA-p75f-g7gx-2r7p, PYSEC-2021-44 | High | 1.5% | 08 Mar, 2021 | PyPI Products.PluggableAuthService PyPI products-pluggableauthservice |
MantisBT Insufficient Session Expiration cookie string not reset after logout CVE-2009-20001, GHSA-jm72-67rm-763j | High | 0.9% | 07 Mar, 2021 | Packagist mantisbt/mantisbt |
Denial of service in github.com/nats-io/nats-server/server BIT-nats-2020-28466, CVE-2020-28466, GHSA-m4jx-6526-vvhm, GO-2022-0855, SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967 | High | 3.7% | 07 Mar, 2021 | Go github.com/nats-io/nats-server Go github.com/nats-io/nats-server/v2 |
Improper Input Validation (RCE) CVE-2021-26814, GHSA-w36g-q975-37rg | High | 8.7% | 06 Mar, 2021 | npm wazuh |
Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node CVE-2021-27098, GHSA-h746-rm5q-8mgq | High | 0.6% | 05 Mar, 2021 | Go github.com/spiffe/spire |
Samsung Mobile Devices Improper Access Control Vulnerability CVE-2021-25337 | HighExploited | 2.8% | 04 Mar, 2021 | |
ThinkAdmin Admin Panel Access using Default Credentials CVE-2020-35296, GHSA-cxv7-6jgf-7gwf | High | 2.2% | 03 Mar, 2021 | Packagist zoujingli/thinkadmin |
markdown2 Regular Expression Denial of Service CVE-2021-26813, GHSA-jr9p-r423-9m2r, PYSEC-2021-20 | High | 2.3% | 03 Mar, 2021 | PyPI markdown2 |
Saltstack Salt Unauthenticated Arbitrary Code Execution CVE-2021-25315, GHSA-pmj6-9f8c-8g2m, PYSEC-2021-891 | High | 2.3% | 03 Mar, 2021 | PyPI salt |
Pillow Denial of Service by Uncontrolled Resource Consumption BIT-pillow-2021-27921, CVE-2021-27921, GHSA-f4w8-cv6p-x6r5, PYSEC-2021-40 | High | 3.2% | 03 Mar, 2021 | PyPI Pillow PyPI pillow |
Pillow Uncontrolled Resource Consumption BIT-pillow-2021-27922, CVE-2021-27922, GHSA-3wvg-mj6g-m9cv, PYSEC-2021-41 | High | 4.9% | 03 Mar, 2021 | PyPI pillow |
Pillow Denial of Service by Uncontrolled Resource Consumption BIT-pillow-2021-27923, CVE-2021-27923, GHSA-95q3-8gr9-gm8w, PYSEC-2021-42 | High | 3.0% | 03 Mar, 2021 | PyPI pillow |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-27065 | HighExploited | 99.9% | 03 Mar, 2021 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-26858 | HighExploited | 93.7% | 03 Mar, 2021 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-26857 | HighExploited | 95.8% | 03 Mar, 2021 | |
Veritas Backup Exec Agent Command Execution Vulnerability CVE-2021-27878 | HighExploited | 24.0% | 01 Mar, 2021 | |
Veritas Backup Exec Agent File Access Vulnerability CVE-2021-27876 | HighExploited | 13.5% | 01 Mar, 2021 | |
SaltStack Salt command injection via a crafted process name CVE-2020-28243, GHSA-phhw-3wc9-8q75, PYSEC-2021-73 | High | 4.3% | 27 Feb, 2021 | PyPI salt |
SaltStack Salt Improper Certificate Validation CVE-2020-28972, GHSA-w589-r335-4f55, PYSEC-2021-74 | High | 3.1% | 27 Feb, 2021 | PyPI salt |
SaltStack Salt Improper SSL Certificate Validation CVE-2020-35662, GHSA-qx72-q6w3-qgc7, PYSEC-2021-75 | High | 3.0% | 27 Feb, 2021 | PyPI salt |
Prototype Pollution in Node-Red CVE-2021-21297, GHSA-xp9c-82x8-7f67 | High | 1.4% | 26 Feb, 2021 | npm @node-red/runtime |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2021-1732 | HighExploited | 78.4% | 25 Feb, 2021 | |
Denial of Service (DoS) in restify-paginate CVE-2020-27543, GHSA-qr9h-vr5p-pwwx | High | 2.6% | 25 Feb, 2021 | npm restify-paginate |
Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers CVE-2020-14359, GHSA-jh6m-3pqw-242h | High | 0.9% | 23 Feb, 2021 | Go github.com/keycloak/keycloak-gatekeeper |
Django Channels leakage of session identifiers using legacy AsgiHandler CVE-2020-35681, GHSA-v542-8q9x-cffc, PYSEC-2021-113 | High | 2.7% | 22 Feb, 2021 | PyPI channels |
Sandbox escape through template_object in smarty CVE-2021-26119, GHSA-w5hr-jm4j-9jvq | High | 8.5% | 22 Feb, 2021 | Packagist smarty/smarty |
URIjs Hostname spoofing via backslashes in URL CVE-2021-27516, GHSA-p6j9-7xhc-rhwp | High | 2.5% | 22 Feb, 2021 | npm urijs |
Integer Overflow in png-img CVE-2020-28248, GHSA-q5wr-fvpq-p67g | High | 2.2% | 20 Feb, 2021 | npm png-img |
Regular expression Denial of Service in @progfay/scrapbox-parser CVE-2021-27405, GHSA-9fhw-r42p-5c7r | High | 1.8% | 19 Feb, 2021 | npm @progfay/scrapbox-parser |
Denial of service in prismjs CVE-2021-23341, GHSA-h4hr-7fg3-h35w | High | 3.2% | 18 Feb, 2021 | npm prismjs |
Server-side Request Forgery (SSRF) via img tags in reportlab CVE-2020-28463, GHSA-mpvw-25mg-59vx, PYSEC-2021-146, SNYK-PYTHON-REPORTLAB-1022145 | High | 1.3% | 18 Feb, 2021 | PyPI reportlab |
Path traversal in pimcore/pimcore CVE-2021-23340, GHSA-h7f9-cvh5-qw7f, SNYK-PHP-PIMCOREPIMCORE-1070132 | High | 1.3% | 18 Feb, 2021 | Packagist pimcore/pimcore |
Denial of service in three CVE-2020-28496, GHSA-fq6p-x6j3-cmmq | High | 2.5% | 18 Feb, 2021 | npm three |
GramAddict bot uses dependency with reverse tcp backdoor CVE-2020-36245, GHSA-q5h6-49gg-2wfg, PYSEC-2021-65 | High | 1.5% | 17 Feb, 2021 | PyPI GramAddict PyPI gramaddict |
Path traversal in bolt/core CVE-2021-27367, GHSA-q88g-qx42-xfrh | High | 1.7% | 17 Feb, 2021 | Packagist bolt/core |
Improper Access Control in Apache Airflow BIT-airflow-2021-26559, CVE-2021-26559, GHSA-ffw3-6mp6-jmvj, PYSEC-2021-2 | High | 2.8% | 17 Feb, 2021 | PyPI apache-airflow |
Accellion FTA OS Command Injection Vulnerability CVE-2021-27102 | HighExploited | 3.7% | 16 Feb, 2021 |