Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching BIT-tensorflow-2020-26269, CVE-2020-26269, GHSA-9jjw-hf72-3mxw, PYSEC-2020-141, PYSEC-2020-300, PYSEC-2020-335 | High | 0.7% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Lack of validation in data format attributes in TensorFlow BIT-tensorflow-2020-26267, CVE-2020-26267, GHSA-c9f3-9wfr-wgh7, PYSEC-2020-140, PYSEC-2020-298, PYSEC-2020-333 | High | 0.2% | 10 Dec, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17144 | HighExploited | 36.5% | 10 Dec, 2020 | |
Denial of service attack via incorrect parameters in Matrix Synapse CVE-2020-26257, GHSA-hxmp-pqch-c8mm, PYSEC-2020-236 | High | 2.4% | 09 Dec, 2020 | PyPI matrix-synapse |
Improper Authentication in react-adal CVE-2020-7787, GHSA-7mpx-vg3c-cmr4 | High | 1.3% | 09 Dec, 2020 | npm react-adal |
user-readable api tokens in systemd units for JupyterHub CVE-2020-26261, GHSA-cg54-gpgr-4rm6, PYSEC-2020-52 | High | 0.5% | 09 Dec, 2020 | PyPI jupyterhub-systemdspawner |
py vulnerable to Regular Expression Denial of Service CVE-2020-29651, GHSA-hj5v-574p-mj7c, PYSEC-2020-92 | High | 4.5% | 09 Dec, 2020 | PyPI py |
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability CVE-2020-26249, GHSA-hm45-mgqm-gjm4, PYSEC-2020-98 | High | 1.3% | 08 Dec, 2020 | PyPI red-dashboard |
Apple Multiple Products Type Confusion Vulnerability CVE-2020-27932 | HighExploited | 10.3% | 08 Dec, 2020 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-27930 | HighExploited | 22.0% | 08 Dec, 2020 | |
omniauth-apple allows attacker to fake their email address during authentication CVE-2020-26254, GHSA-49r3-2549-3633 | High | 1.3% | 08 Dec, 2020 | RubyGems omniauth-apple |
Moodle Denial of Service BIT-moodle-2020-25630, CVE-2020-25630, GHSA-66xp-28cq-mrf2 | High | 1.4% | 08 Dec, 2020 | Packagist moodle/moodle |
Moodle incorrect access control BIT-moodle-2020-25629, CVE-2020-25629, GHSA-f5r8-7h4f-jr9x | High | 1.3% | 08 Dec, 2020 | Packagist moodle/moodle |
Cross-Site Scripting bypass in html-purify GHSA-5p28-63mc-cgr9 | High | Not scored | 04 Dec, 2020 | npm html-purify |
Blind SQL injection in PrestaShop productcomments module CVE-2020-26248, GHSA-5v44-7647-xfw9 | High | 12.4% | 03 Dec, 2020 | Packagist prestashop/productcomments |
Unsafe tar unpacking in HashiCorp go-slug CVE-2020-29529, GHSA-2g5j-5x95-r6hr, GO-2021-0094 | High | 2.8% | 03 Dec, 2020 | Go github.com/hashicorp/go-slug |
EC-CUBE Improper input validation vulnerability CVE-2020-5680, GHSA-6wm9-966m-73jr | High | 1.4% | 03 Dec, 2020 | Packagist ec-cube/ec-cube |
Multiple cryptographic issues in Python oic CVE-2020-26244, GHSA-4fjv-pmhg-3rfg, PYSEC-2020-69 | High | 0.8% | 02 Dec, 2020 | PyPI oic |
Integer overflow in github.com/gorilla/websocket CVE-2020-27813, GHSA-3xh2-74w9-5vxm, GHSA-jf24-p9p9-4rjh, GO-2020-0019 | High | 2.2% | 02 Dec, 2020 | Go github.com/gorilla/websocket |
Base class whitelist configuration ignored in OAuthenticator CVE-2020-26250, GHSA-384w-5v3f-q499, PYSEC-2020-68 | High | 1.1% | 01 Dec, 2020 | PyPI oauthenticator |
blosc2 heap-based buffer overflow CVE-2020-29367, GHSA-8c7c-2c8j-3xfp, PYSEC-2020-343 | High | 1.2% | 27 Nov, 2020 | PyPI blosc2 |
Regular Expression Denial of Service in djvalidator CVE-2020-7779, GHSA-v6wh-2wvh-c8x5 | High | 1.8% | 26 Nov, 2020 | npm djvalidator |
OS Command Injection in systeminformation CVE-2020-7778, GHSA-8j36-q8x7-pm6q, SNYK-JS-SYSTEMINFORMATION-1043753 | High | 2.4% | 26 Nov, 2020 | npm systeminformation |
Memory leak in Nanopb CVE-2020-26243, GHSA-85rr-4rh9-hhwh, PYSEC-2026-684 | High | 2.7% | 25 Nov, 2020 | PyPI nanopb |
Denial of service in geth CVE-2020-26242, GHSA-jm5c-rv3w-w83m, GO-2021-0103 | High | 1.5% | 25 Nov, 2020 | Go github.com/ethereum/go-ethereum Go github.com/holiman/uint256 |
Shallow copy bug in geth CVE-2020-26241, GHSA-69v6-xc2j-r2jf, GO-2022-0771 | High | 1.2% | 25 Nov, 2020 | Go github.com/ethereum/go-ethereum |
Erroneous Proof of Work calculation in geth CVE-2020-26240, GHSA-v592-xf75-856p, GO-2022-0775 | High | 1.9% | 25 Nov, 2020 | Go github.com/ethereum/go-ethereum |
Prototype Pollution in highlight.js CVE-2020-26237, GHSA-vfrc-7r7c-w9mx | High | 1.3% | 24 Nov, 2020 | npm highlight.js |
Denial of service attack due to invalid JSON CVE-2020-26890, GHSA-4mp3-385r-v63f, PYSEC-2020-237 | High | 3.0% | 24 Nov, 2020 | PyPI matrix-synapse |
Cleartext storage of session identifier BIT-typo3-2020-26228, CVE-2020-26228, GHSA-954j-f27r-cj52 | High | 0.7% | 23 Nov, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Local File Inclusion by unauthenticated users CVE-2020-15246, GHSA-xwjr-6fj7-fc6h | High | 1.7% | 23 Nov, 2020 | Packagist october/cms |
Code Injection in jsen CVE-2020-7777, GHSA-vm64-cfqx-3698 | High | 2.1% | 23 Nov, 2020 | npm jsen |
scikit-learn Denial of Service CVE-2020-28975, GHSA-jxfp-4rvq-9h9m, PYSEC-2020-108 | High | 3.6% | 21 Nov, 2020 | PyPI scikit-learn |
Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone BIT-rclone-2020-28924, CVE-2020-28924, GHSA-rmw5-xpg9-jr29, GO-2022-0878 | High | 1.4% | 19 Nov, 2020 | Go github.com/rclone/rclone |
Multiple vulnerabilities through filename manipulation in Archive_Tar BIT-drupal-2020-28948, BIT-drupal-2020-28949, CVE-2020-28948, CVE-2020-28949, DRUPAL-CORE-2020-013, GHSA-75c5-f4gw-38r9, GHSA-jh5x-hfhg-78jq | HighExploited | 84.6% | 19 Nov, 2020 | Packagist drupal/core Packagist pear/archive_tar |
Privilage Escalation in moodle BIT-moodle-2020-25699, CVE-2020-25699, GHSA-h77r-rp97-7rv4 | High | 1.6% | 19 Nov, 2020 | Packagist moodle/moodle |
Improper Access Control in moodle BIT-moodle-2020-25698, CVE-2020-25698, GHSA-vxhx-gmhm-623c | High | 1.9% | 19 Nov, 2020 | Packagist moodle/moodle |
Secret disclosure when containing characters that become URI encoded CVE-2020-26226, GHSA-r2j6-p67h-q639 | High | 1.4% | 18 Nov, 2020 | npm semantic-release |
Drupal core Unrestricted Upload of File with Dangerous Type BIT-drupal-2020-13671, CVE-2020-13671, DRUPAL-CORE-2020-012, GHSA-68jc-v27h-vhmw | HighExploited | 36.2% | 18 Nov, 2020 | Packagist drupal/core Packagist drupal/drupal |
Arbitrary code execution via the go command with cgo in cmd/go BIT-golang-2020-28367, CVE-2020-28367, GO-2022-0476 | High | 2.4% | 18 Nov, 2020 | Go toolchain |
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo BIT-golang-2020-28366, CVE-2020-28366, GO-2022-0475 | High | 2.3% | 18 Nov, 2020 | Go toolchain |
Panic during division of very large numbers in math/big BIT-golang-2020-28362, CVE-2020-28362, GO-2021-0069 | High | 3.9% | 18 Nov, 2020 | Go stdlib |
Cross-Site Scripting through Fluid view helper arguments CVE-2020-26216, GHSA-hpjm-3ww5-6cpf | High | 1.0% | 17 Nov, 2020 | Packagist typo3fluid/fluid |
AVideo vulnerable to Improper Privilege Management CVE-2020-23489, GHSA-2mgx-226x-8pwv | High | 2.3% | 16 Nov, 2020 | Packagist wwbn/avideo |
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness CVE-2020-8897, GHSA-wqgp-vphw-hphf, PYSEC-2020-261 | High | 0.4% | 16 Nov, 2020 | Maven com.amazonaws:aws-encryption-sdk-java PyPI aws-encryption-sdk |
Prototype pollution in controlled-merge CVE-2020-28268, GHSA-5pg7-v24c-9rp9 | High | 3.6% | 15 Nov, 2020 | npm controlled-merge |
Authorization bypass in Spree CVE-2020-26223, GHSA-m2jr-hmc3-qmpr | High | 1.1% | 13 Nov, 2020 | RubyGems spree_api |
Remote code execution in dependabot-core branch names when cloning CVE-2020-26222, GHSA-23f7-99jx-m54r | High | 3.1% | 13 Nov, 2020 | RubyGems dependabot-common RubyGems dependabot-omnibus |
Prototype Pollution in json-logic-js GHSA-m9hw-7xfv-wqg7 | High | Not scored | 12 Nov, 2020 | npm json-logic-js |
Timing attacks in python-rsa CVE-2020-25658, GHSA-xrx6-fmxq-rjj2, PYSEC-2020-100 | High | 1.7% | 12 Nov, 2020 | PyPI rsa |