Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Exploitable inventory component chaining in PocketMine-MP CVE-2020-37277, GHSA-8jq6-w5cg-wm45 | High | 0.5% | 11 Nov, 2020 | Packagist pocketmine/pocketmine-mp |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-17087 | HighExploited | 5.4% | 11 Nov, 2020 | |
Subrion CMS CSRF Vulnerability CVE-2019-7357, GHSA-5mh2-82g9-72jv | High | 1.4% | 10 Nov, 2020 | Packagist intelliants/subrion |
Prototype pollution in @strikeentco/set CVE-2020-28267, GHSA-wwg2-2crq-6grr | High | 2.3% | 10 Nov, 2020 | npm @strikeentco/set |
Prototype pollution in json8-merge-patch CVE-2020-8268, GHSA-8v9x-9xqg-r8mr | High | 1.3% | 09 Nov, 2020 | npm json8-merge-patch |
Magento SQL Injection vulnerability BIT-magento-2020-24400, CVE-2020-24400, GHSA-pf6w-3pfw-fxvw | High | 2.3% | 09 Nov, 2020 | Packagist magento/community-edition |
Web Cache Poisoning in find-my-way CVE-2020-7764, GHSA-jgrh-5m3h-9c5f, SNYK-JS-FINDMYWAY-1038269 | High | 1.8% | 08 Nov, 2020 | npm find-my-way |
Denial-of-Service within Docker container CVE-2020-26213, GHSA-jhj6-5mh6-4pvf, GO-2022-0903 | High | 1.4% | 06 Nov, 2020 | Go ktbs.dev/teler |
Improper Certificate Validation in blackduck CVE-2020-27589, GHSA-f248-v4qh-x2r6, PYSEC-2020-26 | High | 1.1% | 06 Nov, 2020 | PyPI blackduck |
Nil dereference in NATS JWT, DoS of nats-server CVE-2020-26521, GHSA-h2fg-54x9-5qhq, GHSA-hmm9-r2m2-qg9w, GO-2022-0402 | High | 2.2% | 06 Nov, 2020 | Go github.com/nats-io/jwt Go github.com/nats-io/nats-server/v2 |
Arbitrary File Read in phantom-html-to-pdf CVE-2020-7763, GHSA-6h7f-qwqm-35pp, SNYK-JS-PHANTOMHTMLTOPDF-1023598 | High | 1.6% | 05 Nov, 2020 | npm phantom-html-to-pdf |
Denial of service in HashiCorp Consul BIT-consul-2020-25201, CVE-2020-25201, GHSA-496g-fr33-whrf, GO-2024-2501 | High | 2.6% | 04 Nov, 2020 | Go github.com/hashicorp/consul |
Bookstack Cross-site Scripting vulnerability CVE-2020-26211, GHSA-ch37-ch8w-cfrq, GHSA-r2cf-8778-3jgp | High | 1.1% | 03 Nov, 2020 | Packagist ssddanbrown/bookstack |
Google Chromium V8 Type Confusion Vulnerability CVE-2020-16009 | HighExploited | 48.3% | 03 Nov, 2020 | |
Path Traversal in browserless-chrome CVE-2020-7758, GHSA-8p9r-f949-699g, SNYK-JS-BROWSERLESSCHROME-1023657 | High | 2.2% | 02 Nov, 2020 | npm browserless-chrome |
Access Restriction Bypass in go-ipfs CVE-2020-10937, GHSA-r23h-3jmw-q7hr, GO-2024-2779 | High | 1.2% | 02 Nov, 2020 | Go github.com/ipfs/go-ipfs |
Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 CVE-2020-15273, GHSA-wpww-4jf4-4hx8 | High | 1.0% | 30 Oct, 2020 | Packagist baserproject/basercms |
Blog comment posting, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0 CVE-2020-15276, GHSA-fw5q-j9p4-3vxg | High | 1.0% | 30 Oct, 2020 | Packagist baserproject/basercms |
Edit template, Remote Code Execution (RCE) Vulnerability in Latest Release 4.4.0 CVE-2020-15277, GHSA-6fmv-q269-55cw | High | 2.3% | 30 Oct, 2020 | Packagist baserproject/basercms |
Regular expression denial of service in codemirror CVE-2020-7760, GHSA-4gw3-8f77-f72c | High | 5.3% | 30 Oct, 2020 | npm codemirror |
SQL Injection in pimcore CVE-2020-7759, GHSA-8jmh-c6vr-pmvm, SNYK-PHP-PIMCOREPIMCORE-1017405 | High | 1.4% | 30 Oct, 2020 | Packagist pimcore/pimcore |
Ivanti Pulse Connect Secure Code Execution Vulnerability CVE-2020-8260 | HighExploited | 96.5% | 28 Oct, 2020 | |
xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion GHSA-c27r-x354-4m68 | High | Not scored | 27 Oct, 2020 | npm xml-crypto |
RSA decryption vulnerable to Bleichenbacher timing vulnerability CVE-2020-25659, GHSA-hggm-jpg3-v476, PYSEC-2021-62 | High | 2.5% | 27 Oct, 2020 | PyPI cryptography |
Unauthorized privilege escalation in Mod module CVE-2020-15278, GHSA-mp9m-g7qj-6vqr, PYSEC-2020-267 | High | 1.1% | 27 Oct, 2020 | PyPI red-discordbot |
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs GHSA-r82c-j4mq-5xfw | High | Not scored | 27 Oct, 2020 | PyPI bitlyshortener |
Regular Expression Denial of Service in dat.gui CVE-2020-7755, GHSA-chwr-hf3w-c984, SNYK-JS-DATGUI-1016275 | High | 2.1% | 27 Oct, 2020 | npm dat.gui |
Regular Expression Denial of Service in trim CVE-2020-7753, GHSA-w5p7-h5w8-2hfq | High | 3.8% | 27 Oct, 2020 | npm trim |
Out-of-bounds Read in Facebook Hermes CVE-2020-1915, GHSA-x4cf-6jr3-3qvp | High | 1.6% | 26 Oct, 2020 | npm hermes-engine |
systeminformation command injection vulnerability CVE-2020-7752, GHSA-94xh-2fmc-xf5j, SNYK-JS-SYSTEMINFORMATION-1021909 | High | 6.7% | 26 Oct, 2020 | npm systeminformation |
Prototype pollution in pathval CVE-2020-7751, GHSA-g6ww-v8xp-vmwg, SNYK-JS-PATHVAL-596926 | High | 1.5% | 26 Oct, 2020 | npm pathval |
Improper Authorization in Strapi CVE-2020-27665, GHSA-4p55-xj37-fx7g | High | 1.2% | 22 Oct, 2020 | npm strapi-plugin-content-type-builder |
Segfault in `tf.quantization.quantize_and_dequantize` BIT-tensorflow-2020-15265, CVE-2020-15265, GHSA-rrfp-j2mp-hq9c, PYSEC-2020-138, PYSEC-2020-295, PYSEC-2020-330 | High | 0.9% | 21 Oct, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Float cast overflow undefined behavior BIT-tensorflow-2020-15266, CVE-2020-15266, GHSA-xwhf-g6j5-j5gc, PYSEC-2020-139, PYSEC-2020-296, PYSEC-2020-331 | High | 0.9% | 21 Oct, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
RCE via PHP Object injection via SOAP Requests CVE-2020-15244, GHSA-jrgf-vfw2-hj26 | High | 1.3% | 21 Oct, 2020 | Packagist openmage/magento-lts |
Oracle WebLogic Server Unspecified Vulnerability CVE-2020-14883 | HighExploited | 97.7% | 21 Oct, 2020 | |
Oracle Business Intelligence Enterprise Edition Path Transversal CVE-2020-14864 | HighExploited | 97.2% | 21 Oct, 2020 | |
Injection and Cross-site Scripting in osm-static-maps CVE-2020-7749, GHSA-pxcf-v868-m492 | High | 1.6% | 20 Oct, 2020 | npm osm-static-maps |
Prototype pollution in @tsed/core CVE-2020-7748, GHSA-77xq-cpvg-7xm2, SNYK-JS-TSEDCORE-1019382 | High | 1.7% | 20 Oct, 2020 | npm @tsed/core |
Inline attribute values were not processed. CVE-2020-15263, GHSA-589w-hccm-265x | High | 0.7% | 19 Oct, 2020 | Packagist orchid/platform |
Regular expression denial of service in npm-user-validate CVE-2020-7754, GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p | High | 3.3% | 16 Oct, 2020 | npm npm-user-validate |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-9907 | HighExploited | 3.2% | 16 Oct, 2020 | |
Arbitrary Code Execution in Gitea BIT-gitea-2020-14144, CVE-2020-14144, GHSA-3h6c-c475-jm7v | High | 95.4% | 16 Oct, 2020 | Go code.gitea.io/gitea |
Prototype Pollution in mathjs CVE-2020-7743, GHSA-x2fc-mxcx-w4mf | High | 3.9% | 13 Oct, 2020 | npm mathjs |
PyroCMS Vulnerable to CSRF CVE-2020-25263, GHSA-vg2g-698h-v9w3 | High | 0.6% | 08 Oct, 2020 | Packagist pyrocms/pyrocms |
Prototype Pollution in simpl-schema CVE-2020-7742, GHSA-9mx2-prfp-8hqp, SNYK-JS-SIMPLSCHEMA-1016157 | High | 1.5% | 07 Oct, 2020 | npm simpl-schema |
Server-Side Request Forgery in node-pdf-generator CVE-2020-7740, GHSA-hcq6-h8v2-r5wm | High | 2.0% | 06 Oct, 2020 | npm node-pdf-generator |
Server-Side Request Forgery in phantomjs-seo CVE-2020-7739, GHSA-j9pj-hx76-92v6 | High | 1.4% | 06 Oct, 2020 | npm phantomjs-seo |
Unpreventable top-level navigation CVE-2020-15174, GHSA-2q4g-w47c-4674 | High | 1.3% | 06 Oct, 2020 | npm electron |
WEBRick vulnerable to HTTP Request/Response Smuggling BIT-ruby-2020-25613, BIT-ruby-min-2020-25613, CVE-2020-25613, GHSA-gwfg-cqmg-cf8f | High | 3.8% | 06 Oct, 2020 | RubyGems webrick |