Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability CVE-2020-5735 | HighExploited | 36.2% | 08 Apr, 2020 | |
xdlocalstorage does not verify request origin CVE-2020-11610, GHSA-mr5m-2385-2vcp | High | 1.4% | 07 Apr, 2020 | npm xdlocalstorage |
Improper Input Validation in xdLocalStorage CVE-2015-9545, GHSA-76qm-4f93-fg6f | High | 1.3% | 07 Apr, 2020 | npm xdLocalStorage npm xdlocalstorage |
Improper Input Validation in xdLocalStorage CVE-2015-9544, GHSA-vrc7-6g8w-jh56 | High | 1.3% | 07 Apr, 2020 | npm xdLocalStorage npm xdlocalstorage |
OS Command Injection in fsa CVE-2020-7615, GHSA-3p94-vj97-fm4q | High | 1.1% | 07 Apr, 2020 | npm fsa |
Clamscan vulnerable to command injection CVE-2020-7613, GHSA-5v25-xr56-phph, SNYK-JS-CLAMSCAN-564113 | High | 2.1% | 07 Apr, 2020 | npm clamscan |
Regular Expression Denial of Service in Acorn GHSA-6chw-6frg-f759 | High | Not scored | 03 Apr, 2020 | npm acorn |
Sonatype Nexus Repository Remote Code Execution Vulnerability CVE-2020-10199 | HighExploited | 99.1% | 01 Apr, 2020 | |
Open Redirect in ecstatic GHSA-9q64-mpxx-87fg | High | Not scored | 01 Apr, 2020 | npm ecstatic |
Path Traversal in Buildah CVE-2020-10696, GHSA-fx8w-mjvm-hvpc, GO-2022-0828 | High | 2.7% | 31 Mar, 2020 | Go github.com/containers/buildah |
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905, GHSA-frxj-5j27-f8rf, PYSEC-2020-206 | High | 0.7% | 31 Mar, 2020 | PyPI ansible |
Firewall configured with unanimous strategy was not actually unanimous in Symfony BIT-symfony-2020-5275, CVE-2020-5275, GHSA-g4m9-5hpf-hx72 | High | 1.1% | 30 Mar, 2020 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
regular expression denial-of-service (ReDoS) in Bleach CVE-2020-6817, GHSA-vqhp-cxgc-6wmm, PYSEC-2020-340, SNYK-PYTHON-BLEACH-561754 | High | 0.7% | 30 Mar, 2020 | PyPI bleach |
Hard coded cryptographic key in Kiali CVE-2020-1764, GHSA-64rh-r86q-75ff, GO-2022-0631 | High | 3.5% | 26 Mar, 2020 | Go github.com/kiali/kiali |
FrozenNode Laravel-Administrator unrestricted file upload CVE-2020-10963, GHSA-9r2j-rg24-fvpj | High | 14.7% | 25 Mar, 2020 | Packagist frozennode/administrator |
Incorrect Account Used for Signing GHSA-vg44-fw64-cpjx | High | Not scored | 24 Mar, 2020 | npm @metamask/eth-ledger-bridge-keyring npm eth-ledger-bridge-keyring |
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible CVE-2020-10684, GHSA-p62g-jhg6-v3rq, PYSEC-2020-207 | High | 0.3% | 24 Mar, 2020 | PyPI ansible |
CodeIgniter Improper Privilege Management BIT-codeigniter-2020-10793, CVE-2020-10793, GHSA-jwqp-wh5g-4gmm | High | 1.9% | 23 Mar, 2020 | Packagist codeigniter4/framework |
phpMyAdmin SQL injection vulnerability BIT-phpmyadmin-2020-10802, CVE-2020-10802, GHSA-f4cr-3xmc-2wpm | High | 1.8% | 22 Mar, 2020 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin SQL Injection BIT-phpmyadmin-2020-10804, CVE-2020-10804, GHSA-h65r-8fp8-w7cx | High | 2.4% | 22 Mar, 2020 | Packagist phpmyadmin/phpmyadmin |
Machine-In-The-Middle in lix CVE-2020-10800, GHSA-q8xg-8xwf-m598 | High | 1.4% | 21 Mar, 2020 | npm lix |
Uncontrolled Resource Consumption in fastify-multipart CVE-2020-8136, GHSA-p9f8-gqjf-m75j | High | 1.5% | 20 Mar, 2020 | npm fastify-multipart |
Server-side request forgery in Ghost CMS BIT-ghost-2020-8134, CVE-2020-8134, GHSA-q4h8-7qff-gh6c | High | 1.2% | 20 Mar, 2020 | npm ghost |
SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19029, GHSA-jr34-mff8-pc6f, GHSA-qcfv-8v29-469w, GO-2022-0853 | High | 2.1% | 20 Mar, 2020 | Go github.com/goharbor/harbor |
Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor CVE-2019-19025, GHSA-gcqm-v682-ccw6, GHSA-rffr-c932-cpxv, GO-2022-0876 | High | 1.0% | 20 Mar, 2020 | Go github.com/goharbor/harbor |
Privilege Escalation in Cloud Native Computing Foundation Harbor CVE-2019-19023, GHSA-q6cj-6jvq-jwmh, GO-2022-0863 | High | 1.6% | 20 Mar, 2020 | Go github.com/goharbor/harbor |
phpBB arbitrary CSS injection CVE-2019-16108, GHSA-8hc2-hvrc-x4qr | High | 1.1% | 20 Mar, 2020 | Packagist phpbb/phpbb |
Infinite Loop in jsonparser CVE-2020-10675, GHSA-rmh2-65xw-9m6q, GO-2021-0089 | High | 2.6% | 19 Mar, 2020 | Go github.com/buger/jsonparser |
django-nopassword stores secrets in cleartext CVE-2019-10682, GHSA-37cf-r3w2-gjfw, PYSEC-2020-229 | High | 1.2% | 18 Mar, 2020 | PyPI django-nopassword |
Trend Micro Multiple Products Content Validation Escape Vulnerability CVE-2020-8468 | HighExploited | 6.2% | 18 Mar, 2020 | |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability CVE-2020-8467 | HighExploited | 10.9% | 18 Mar, 2020 | |
Golang Facebook Thrift servers vulnerable to denial of service CVE-2019-11939, GHSA-w3r9-r9w7-8h48, GO-2021-0082 | High | 1.6% | 18 Mar, 2020 | Go github.com/facebook/fbthrift |
VMware Multiple Products Privilege Escalation Vulnerability CVE-2020-3950 | HighExploited | 7.3% | 17 Mar, 2020 | |
Subrion CMS CSRF Vulnerability CVE-2018-21037, GHSA-g8j7-w673-4mjp | High | 0.5% | 17 Mar, 2020 | Packagist intelliants/subrion |
Helm uses crypto package vulnerable to panic from malformed X.509 certificate BIT-golang-2020-7919, CVE-2020-7919, GHSA-cjjc-xp8v-855w, GO-2022-0229 | High | 2.6% | 16 Mar, 2020 | Go github.com/helm/helm Go golang.org/x/crypto Go helm.sh/helm/v3 Go stdlib |
Traefik has an Improper Certificate Handling issue CVE-2020-9321, GHSA-7h6j-2268-fhcm, GO-2022-0808 | High | 0.7% | 16 Mar, 2020 | Go github.com/containous/traefik Go github.com/containous/traefik/v2 Go github.com/traefik/traefik |
Unraid Authentication Bypass Vulnerability CVE-2020-5849 | HighExploited | 93.2% | 16 Mar, 2020 | |
Dolibarr ERP and CRM SQLi CVE-2019-19209, GHSA-jh3j-xfv2-f9m9 | High | 2.1% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Improper Control of Generation of Code in doT CVE-2020-8141, GHSA-297x-8xj4-vcxv | High | 2.2% | 15 Mar, 2020 | npm dot |
2FA bypass through deleting devices in wagtail-2fa CVE-2020-5240, GHSA-9gjv-6qq6-v7qm, PYSEC-2020-219 | High | 1.0% | 13 Mar, 2020 | PyPI wagtail-2fa |
Sort order SQL injection in Administrate CVE-2020-5257, GHSA-2p5p-m353-833w | High | 0.9% | 13 Mar, 2020 | RubyGems administrate |
OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks CVE-2020-9543, GHSA-jx7v-gmqc-6xrj, PYSEC-2020-63 | High | 1.3% | 12 Mar, 2020 | PyPI manila |
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability CVE-2020-0787 | HighExploited | 42.5% | 12 Mar, 2020 | |
Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify CVE-2019-10808, GHSA-9534-h433-2rjf | High | 2.0% | 11 Mar, 2020 | npm utilitify |
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability CVE-2020-0069 | HighExploited | 1.4% | 10 Mar, 2020 | |
Android Kernel Out-of-Bounds Write Vulnerability CVE-2020-0041 | HighExploited | 3.2% | 10 Mar, 2020 | |
Prototype Pollution in Dojox CVE-2020-5259, GHSA-3hw5-q855-g6cw | High | 2.0% | 10 Mar, 2020 | npm dojox |
Prototype pollution in dojo CVE-2020-5258, GHSA-jxfh-8wgv-vfr2 | High | 4.0% | 10 Mar, 2020 | npm dojo |
Denial of Service in uap-core when processing crafted User-Agent strings GHSA-pcqq-5962-hvcw | High | Not scored | 10 Mar, 2020 | RubyGems user_agent_parser |
Insufficient Verification of Data Authenticity in Eclipse Theia CVE-2019-17636, GHSA-f7vx-j8mp-3h2x | High | 0.6% | 10 Mar, 2020 | npm @theia/mini-browser |