Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Kylin OS Command Injection Vulnerability CVE-2020-1956 | HighExploited | 97.4% | 22 May, 2020 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2020-1054 | HighExploited | 53.9% | 21 May, 2020 | |
Moodle vulnerable to RCE BIT-moodle-2020-10738, CVE-2020-10738, GHSA-vr6v-g96p-cjc3 | High | 3.0% | 21 May, 2020 | Packagist moodle/moodle |
Command Injection in Centreon CVE-2020-13252, GHSA-jmgg-wx67-7qfv | High | 5.4% | 21 May, 2020 | Packagist centreon/centreon |
Microweber allows Unrestricted File Upload CVE-2020-13241, GHSA-89fp-j8v7-p82h | High | 0.5% | 20 May, 2020 | Packagist microweber/microweber |
Denial of Service in Gitea BIT-gitea-2020-13246, CVE-2020-13246, GHSA-g2qx-6ghw-67hm, GO-2022-0830 | High | 2.0% | 20 May, 2020 | Go code.gitea.io/gitea Go github.com/go-gitea/gitea |
Improper certificate validation in em-imap CVE-2020-13163, GHSA-4f68-49qq-h392 | High | 0.8% | 19 May, 2020 | RubyGems em-imap |
DLL Injection in kerberos CVE-2020-13110, GHSA-m2mx-rfpw-jghv | High | 0.7% | 16 May, 2020 | npm kerberos |
Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability CVE-2019-20390, GHSA-c4wx-3x5q-hf4w | High | 0.7% | 15 May, 2020 | Packagist intelliants/subrion |
Backend Same-Site Request Forgery in TYPO3 CMS BIT-typo3-2020-11069, CVE-2020-11069, GHSA-pqg8-crx9-g8m4 | High | 0.7% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Insecure Deserialization in Backend User Settings in TYPO3 CMS BIT-typo3-2020-11067, CVE-2020-11067, GHSA-2wj9-434x-9hvp | High | 2.0% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Information disclosure issue in Active Resource CVE-2020-8151, GHSA-46j2-xjgp-jrfm | High | 2.2% | 12 May, 2020 | RubyGems activeresource |
SEOmatic for CraftCMS allows Server-Side Template Injection CVE-2020-12790, GHSA-23q7-59jj-2pj4 | High | 2.2% | 11 May, 2020 | Packagist nystudio107/craft-seomatic |
Plex Media Server Remote Code Execution Vulnerability CVE-2020-5741 | HighExploited | 72.9% | 08 May, 2020 | |
Open Redirect in OAuth2 Proxy BIT-oauth2-proxy-2020-11053, CVE-2020-11053, GHSA-j7px-6hwj-hpjg | High | 0.8% | 07 May, 2020 | Go github.com/oauth2-proxy/oauth2-proxy |
OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context CVE-2020-12689, GHSA-chgw-36xv-47cw, PYSEC-2020-53 | High | 1.6% | 07 May, 2020 | PyPI keystone |
Insufficient Session Expiration in OpenStack Keystone CVE-2020-12690, GHSA-6m8p-x4qw-gh5j, PYSEC-2020-54 | High | 1.9% | 07 May, 2020 | PyPI keystone |
OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID CVE-2020-12691, GHSA-4427-7f3w-mqv6, PYSEC-2020-55 | High | 4.9% | 07 May, 2020 | PyPI keystone |
Incorrect Authorization in Dolibarr CVE-2020-12669, GHSA-rg8m-84jf-9367 | High | 2.0% | 06 May, 2020 | Packagist dolibarr/dolibarr |
Cisco ASA and FTD Information Disclosure Vulnerability CVE-2020-3259 | HighExploited | 71.5% | 06 May, 2020 | |
Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory. CVE-2018-21233, GHSA-h98h-8mxr-m8gx, PYSEC-2020-253, PYSEC-2020-269, PYSEC-2020-304 | High | 0.6% | 04 May, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Missing Authorization in TeamPass CVE-2020-11671, GHSA-gmr7-m73x-6c9q | High | 1.1% | 04 May, 2020 | Packagist nilsteampassnet/teampass |
Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper CVE-2020-10187, GHSA-j7vx-8mqj-cqp9 | High | 1.8% | 04 May, 2020 | RubyGems doorkeeper |
SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103 | HighExploited | 86.4% | 30 Apr, 2020 | PyPI salt |
TeamPass PHP arbitrary file include vulnerability CVE-2020-12479, GHSA-6jf9-8m34-96w5 | High | 2.6% | 29 Apr, 2020 | Packagist nilsteampassnet/teampass |
TeamPass files are available without authentication CVE-2020-12478, GHSA-83h6-22cp-f22w | High | 8.6% | 29 Apr, 2020 | Packagist nilsteampassnet/teampass |
Incorrect Authorization in TeamPass CVE-2020-12477, GHSA-fv48-hjhp-94c7 | High | 1.8% | 29 Apr, 2020 | Packagist nilsteampassnet/teampass |
Subrion CMS CSV injection via Export Language CVE-2020-12468, GHSA-4f4h-jgjp-3vfg | High | 0.9% | 29 Apr, 2020 | Packagist intelliants/subrion |
Http request which redirect to another hostname do not strip authorization header in @actions/http-client CVE-2020-11021, GHSA-9w6v-m7wp-jwg4 | High | 1.8% | 29 Apr, 2020 | npm @actions/http-client |
Grafana world readable configuration files BIT-grafana-2020-12459, CVE-2020-12459, GHSA-m25m-5778-fm22, GO-2024-2519 | High | 0.3% | 29 Apr, 2020 | Go github.com/grafana/grafana |
Grafana information disclosure BIT-grafana-2020-12458, CVE-2020-12458, GHSA-3jq7-8ph8-63xm, GO-2024-2513 | High | 0.5% | 29 Apr, 2020 | Go github.com/grafana/grafana |
Unsafe object creation in json RubyGem CVE-2020-10663, GHSA-jphg-qwrw-7w9g | High | 6.8% | 28 Apr, 2020 | RubyGems json |
Uncontrolled Resource Consumption in fun-map CVE-2020-7644, GHSA-p33m-7w7f-gmj8, SNYK-JS-FUNMAP-564436 | High | 1.2% | 28 Apr, 2020 | npm fun-map |
Insufficient Session Expiration in Kiali CVE-2020-1762, GHSA-465w-gg5p-85c9, GO-2022-0626 | High | 1.2% | 27 Apr, 2020 | Go github.com/kiali/kiali |
Lookup function information discolosure in helm BIT-helm-2020-11013, CVE-2020-11013, GHSA-q8q8-93cv-v6h8 | High | 1.4% | 24 Apr, 2020 | Go helm.sh/helm/v3 |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6820 | HighExploited | 7.1% | 24 Apr, 2020 | |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6819 | HighExploited | 3.0% | 24 Apr, 2020 | |
Incorrect Default Permissions in Binance tss-lib CVE-2020-12118, GHSA-399h-cmvp-qgx5, GO-2022-0769 | High | 1.3% | 23 Apr, 2020 | Go github.com/binance-chain/tss-lib |
SQL injection in Tortoise ORM CVE-2020-11010, GHSA-9j2c-x8qm-qmjq, PYSEC-2020-144 | High | 1.1% | 20 Apr, 2020 | PyPI tortoise-orm |
Dolibarr Cross-Site Request Forgery Vulnerability BIT-dolibarr-2020-11825, CVE-2020-11825, GHSA-m66x-wm27-xxpc | High | 1.0% | 16 Apr, 2020 | Packagist dolibarr/dolibarr |
SilverStripe Folders migrated from 3.x may be unsafe to upload to BIT-silverstripe-2020-9280, CVE-2020-9280, GHSA-592m-4533-rxq9 | High | 1.7% | 15 Apr, 2020 | Packagist silverstripe/assets Packagist silverstripe/framework Packagist silverstripe/userforms |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-1027 | HighExploited | 4.7% | 15 Apr, 2020 | |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability CVE-2020-1020 | HighExploited | 65.0% | 15 Apr, 2020 | |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2020-0968 | HighExploited | 30.7% | 15 Apr, 2020 | |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability CVE-2020-0938 | HighExploited | 69.0% | 15 Apr, 2020 | |
CSRF and DNS Rebinding in Oasis CVE-2020-11003, GHSA-j438-45hc-vjhm | High | 0.5% | 14 Apr, 2020 | npm @fraction/oasis |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability CVE-2020-11738 | HighExploited | 97.8% | 13 Apr, 2020 | |
Information disclosure through error object in auth0.js CVE-2020-5263, GHSA-prfq-f66g-43mp | High | 0.9% | 09 Apr, 2020 | npm auth0-js |
Argo CD Insecure default administrative password BIT-argo-cd-2020-8828, CVE-2020-8828, GHSA-h8jc-jmrf-9h8f | High | 1.8% | 08 Apr, 2020 | Go github.com/argoproj/argo-cd |
Improper Restriction of Excessive Authentication Attempts in Argo API BIT-argo-cd-2020-8827, CVE-2020-8827, GHSA-xcqr-9h24-vrgw, GO-2022-0892 | High | 2.2% | 08 Apr, 2020 | Go github.com/argoproj/argo-cd |