Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
ircdkit vulnerable to Denial of Service due to unhandled connection end event GHSA-f7r3-p866-q9qr | Low | Not scored | 03 Jun, 2019 | npm ircdkit |
Cross-Site Scripting in public GHSA-7jfh-2xc9-ccv7 | Low | Not scored | 31 May, 2019 | npm public |
Insecure Credential Storage in web3 GHSA-27v7-qhfv-rqq8 | Low | Not scored | 30 May, 2019 | npm web3 |
Twig Sandbox Information Disclosure CVE-2019-9942, GHSA-vxrc-68xx-x48g | Low | 1.4% | 23 Mar, 2019 | Packagist twig/twig |
Arbitrary File Write in cli CVE-2016-10538, GHSA-6cpc-mj5c-m9rq | Low | 1.0% | 31 May, 2018 | npm cli |
MySQL Connectors Privilege Escalation CVE-2017-3590, GHSA-2cf3-g243-hhfx, PYSEC-2026-682 | Low | 0.4% | 24 Apr, 2017 | PyPI mysql-connector-python |
Salt uses weak permissions on the cache data CVE-2015-8034, GHSA-6prw-8xhm-h247, PYSEC-2017-32 | Low | 0.4% | 30 Jan, 2017 | PyPI salt |
phpMyAdmin cookie-attribute injection CVE-2016-5702, GHSA-xqw9-ffx7-g998 | Low | 1.7% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
Django User Enumeration Vulnerability CVE-2016-2513, GHSA-fp6p-5xvw-m74f, PYSEC-2016-16 | Low | 3.3% | 08 Apr, 2016 | PyPI django |
OpenStack Neutron Race condition vulnerability CVE-2015-5240, GHSA-hhpj-6pj7-wpx5, PYSEC-2026-853 | Low | 1.0% | 27 Oct, 2015 | PyPI neutron |
TYPO3 cross-site scripting (XSS) CVE-2015-5956, GHSA-989h-wv8x-933p | Low | 2.0% | 16 Sep, 2015 | Packagist typo3/cms |
ceph-deploy allows local users to obtain sensitive information by reading the file CVE-2015-3010, GHSA-9w4f-3v37-6f75, PYSEC-2015-2 | Low | 0.4% | 16 Jun, 2015 | PyPI ceph-deploy |
ceph-deploy uses world-readable permissions on client.admin key CVE-2015-4053, GHSA-79jf-ccm8-43w7, PYSEC-2015-3 | Low | 0.4% | 08 Jun, 2015 | PyPI ceph-deploy |
Moodle allows attackers to bypass intended login restrictions CVE-2015-3179, GHSA-4ppg-2mx6-fqx9 | Low | 1.5% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-3178, GHSA-9fmw-m4qx-6cq8 | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not set the RISK_XSS bit for graders CVE-2015-3174, GHSA-6r7x-6q98-qcqp | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-2273, GHSA-w77v-xpxr-c6pv | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2015-2269, GHSA-cp39-43xr-2wrp | Low | 3.3% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not set the RISK_XSS bit for graders CVE-2015-0216, GHSA-2jcw-r79x-4r5v | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-0212, GHSA-jj3j-mhgc-g4m4 | Low | 1.4% | 01 Jun, 2015 | Packagist moodle/moodle |
phpMyAdmin Multiple XSS Vulnerabilities CVE-2011-3592, GHSA-5p69-rmx8-7gw7 | Low | 1.4% | 26 Dec, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save CVE-2011-3591, GHSA-3p87-w3c5-27gf | Low | 1.4% | 26 Dec, 2014 | Packagist phpmyadmin/phpmyadmin |
Moodle allows attackers to upload files containing JavaScript CVE-2014-7835, GHSA-vrf6-q7qj-69v5 | Low | 1.4% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-7830, GHSA-j4mr-vc54-h5pc | Low | 1.5% | 24 Nov, 2014 | Packagist moodle/moodle |
OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2014-3474, GHSA-j57p-g33w-95c5, PYSEC-2026-644 | Low | 1.9% | 31 Oct, 2014 | PyPI horizon |
OpenStack Oslo utility sensitive information exposure via log files CVE-2014-7231, GHSA-v933-vx5p-j7w2, PYSEC-2026-892 | Low | 0.5% | 08 Oct, 2014 | PyPI oslo-utils PyPI oslo.utils |
phpMyAdmin cross-site scripting Vulnerability via ENUM value CVE-2014-7217, GHSA-wv8g-fx9j-q2jg | Low | 1.6% | 03 Oct, 2014 | Packagist phpmyadmin/phpmyadmin |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface CVE-2014-3594, GHSA-8g68-2hcj-h8vg, PYSEC-2026-641 | Low | 2.1% | 22 Aug, 2014 | PyPI horizon |
phpMyAdmin cross-site scripting vulnerability in crafted view name CVE-2014-5274, GHSA-q586-xpwr-jc3j | Low | 1.0% | 22 Aug, 2014 | Packagist phpmyadmin/phpmyadmin |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3551, GHSA-m8f5-9wg8-2c3h | Low | 1.7% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-3544, GHSA-c9jp-244j-vh78 | Low | 4.7% | 29 Jul, 2014 | Packagist moodle/moodle |
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names CVE-2014-4986, GHSA-jqmr-wqgp-8mh2 | Low | 1.6% | 20 Jul, 2014 | Packagist phpmyadmin/phpmyadmin |
Typo3 XSS Vulnerabilities CVE-2014-3943, GHSA-qqh2-h6gw-6x8x | Low | 1.4% | 03 Jun, 2014 | Packagist typo3/cms |
OpenStack Heat template URL information leakage CVE-2014-3801, GHSA-86qj-4h55-fvpw, PYSEC-2026-889 | Low | 1.6% | 23 May, 2014 | PyPI openstack-heat |
OpenStack Nova host data leak to vm instance in rescue mode CVE-2014-0134, GHSA-w429-xc55-hc48, PYSEC-2014-112 | Low | 1.5% | 08 May, 2014 | PyPI nova |
Local Privilege Escalation in npm CVE-2013-4116, GHSA-v3jv-wrf4-5845 | Low | 0.4% | 22 Apr, 2014 | npm npm |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-2571, GHSA-75c6-xqwr-v2r9 | Low | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |
Plone Denial of Service vulnerability via decompressing large zip archives CVE-2013-4199, GHSA-xfjq-9rxq-ph6m, PYSEC-2014-63 | Low | 1.1% | 11 Mar, 2014 | PyPI plone |
OpenStack Nova denial of service through compressed disk images CVE-2013-4463, GHSA-5644-2v3h-5w4x, PYSEC-2026-865 | Low | 0.4% | 06 Feb, 2014 | PyPI nova |
RPLY Predictable Tmpfile Names Allows Cache Spoofing CVE-2014-1604, GHSA-9gcf-pq99-rjw3, PYSEC-2014-117, PYSEC-2014-17 | Low | 0.4% | 28 Jan, 2014 | PyPI RPLY PyPI rply |
pyxdg Arbitrary File Overwrite via Race Condition CVE-2014-1624, GHSA-7372-q459-jxhr, PYSEC-2014-95 | Low | 0.3% | 28 Jan, 2014 | PyPI pyxdg |
OpenStack Nova live snapshots use an insecure local directory CVE-2013-7048, GHSA-grp5-h379-j75x, PYSEC-2026-873 | Low | 0.5% | 23 Jan, 2014 | PyPI nova |
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework CVE-2013-7078, GHSA-qj69-chjp-g4f5 | Low | 1.6% | 19 Jan, 2014 | Packagist typo3/cms-core |
Libcloud does not properly scrub data when destroying a DigitalOcean node CVE-2013-6480, GHSA-g892-9h8m-r69r, PYSEC-2014-97 | Low | 2.1% | 07 Jan, 2014 | PyPI apache-libcloud |
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component CVE-2013-7074, GHSA-r8m7-792j-5jvq | Low | 1.1% | 21 Dec, 2013 | Packagist typo3/cms |
OpenStack Identity Keystone Privilege Escalation vulnerability CVE-2013-4477, GHSA-f889-wfwm-6p7m, PYSEC-2026-831 | Low | 0.4% | 02 Nov, 2013 | PyPI keystone |
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2013-4469, GHSA-2w87-5qcj-j6gx, PYSEC-2026-860 | Low | 0.4% | 02 Nov, 2013 | PyPI nova |
python-keystoneclient unsecure user password update CVE-2013-2013, GHSA-8q2m-pwxf-jc7g, PYSEC-2013-24 | Low | 0.4% | 01 Oct, 2013 | PyPI python-keystoneclient |
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors CVE-2013-4278, GHSA-43cm-73px-5v4m, PYSEC-2026-862 | Low | 1.5% | 16 Sep, 2013 | PyPI nova |
Ansible uses a socket with predictable filename in /tmp CVE-2013-4259, GHSA-fj24-ghp9-39v3, PYSEC-2013-1 | Low | 0.3% | 16 Sep, 2013 | PyPI Ansible PyPI ansible |