Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-Site Scripting in http_server CVE-2019-15600, GHSA-754x-4jwp-cqp6 | High | 2.5% | 18 Dec, 2019 | npm http_server |
Path Traversal in statics-server CVE-2019-15596, GHSA-j27j-4w6m-8fc4 | High | 1.5% | 18 Dec, 2019 | npm statics-server |
Apple Multiple Products Use-After-Free Vulnerability CVE-2019-8605 | HighExploited | 17.6% | 18 Dec, 2019 | |
Apple macOS Use-After-Free Vulnerability CVE-2019-8526 | HighExploited | 0.7% | 18 Dec, 2019 | |
Apple Multiple Products Type Confusion Vulnerability CVE-2019-8506 | HighExploited | 16.2% | 18 Dec, 2019 | |
Apple iOS Memory Corruption Vulnerability CVE-2019-7287 | HighExploited | 4.6% | 18 Dec, 2019 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2019-7286 | HighExploited | 15.9% | 18 Dec, 2019 | |
SonicWall SMA100 SQL Injection Vulnerability CVE-2019-7481 | HighExploited | 99.9% | 17 Dec, 2019 | |
TYPO3 SQL Injection in low-level Query Generator CVE-2019-19850, GHSA-59pj-7mjh-4465 | High | 0.9% | 17 Dec, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
TYPO3 Insecure Deserialization in Query Generator & Query View CVE-2019-19849, GHSA-rcgc-4xfc-564v | High | 1.3% | 17 Dec, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
TYPO3 Directory Traversal on ZIP extraction CVE-2019-19848, GHSA-77p4-wfr8-977w | High | 1.5% | 17 Dec, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
Unrestricted file uploads in Contao CVE-2019-19745, GHSA-wjx8-cgrm-hh8p | High | 1.1% | 17 Dec, 2019 | Packagist contao/contao Packagist contao/core-bundle |
Yarn Improper link resolution before file access (Link Following) CVE-2019-10773, GHSA-5xf4-f2fq-f69j, SNYK-JS-YARN-537806, | High | 1.5% | 16 Dec, 2019 | npm yarn |
npm Vulnerable to Global node_modules Binary Overwrite CVE-2019-16777, GHSA-4328-8hgf-7wjr | High | 2.0% | 13 Dec, 2019 | npm npm |
npm symlink reference outside of node_modules CVE-2019-16776, GHSA-x8qc-rrcw-4r46 | High | 3.4% | 13 Dec, 2019 | npm npm |
Arbitrary File Write in npm CVE-2019-16775, GHSA-m6cx-g6qm-p2cx | High | 2.9% | 13 Dec, 2019 | npm npm |
lodahs is malware CVE-2019-19771, GHSA-hm6q-r2jc-cpqh | High | 1.3% | 12 Dec, 2019 | npm lodahs |
bson-objectid contains Improper input validation CVE-2019-19729, GHSA-p84x-5xx8-hff9 | High | 1.1% | 11 Dec, 2019 | npm bson-objectid |
omniauth-facebook Improper Authentication vulnerability CVE-2013-4593, GHSA-33vg-hpx5-pfxg | High | 1.8% | 11 Dec, 2019 | RubyGems omniauth-facebook |
Nokogiri implementation of libxslt vulnerable to heap corruption CVE-2019-5815, GHSA-vmfx-gcfq-wvm2 | High | 1.8% | 11 Dec, 2019 | RubyGems nokogiri |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-1458 | HighExploited | 74.4% | 10 Dec, 2019 | |
Modoboa is vulnerable to an XML External Entity Injection (XXE) CVE-2019-19702, GHSA-vc42-mgr2-w34r, PYSEC-2019-105 | High | 1.5% | 10 Dec, 2019 | PyPI modoboa-dmarc |
OpenStack Keystone Credential Leakage CVE-2019-19687, GHSA-2j23-fwqm-mgwr, PYSEC-2019-29 | High | 1.8% | 09 Dec, 2019 | PyPI keystone |
Command Injection in strapi CVE-2019-19609, GHSA-9p2w-rmx4-9mw7 | High | 54.1% | 05 Dec, 2019 | npm strapi |
A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack CVE-2019-16770, GHSA-7xx3-m584-x994 | High | 2.0% | 05 Dec, 2019 | RubyGems puma |
Uncontrolled resource consumption in validators Python package CVE-2019-19588, GHSA-5qcg-w2cc-xffw, PYSEC-2019-134 | High | 1.5% | 05 Dec, 2019 | PyPI validators |
SaltStack RSA Key Generation allows remote users to decrypt communications CVE-2013-2228, GHSA-gq26-cpq6-w85r, PYSEC-2026-748 | High | 2.0% | 03 Dec, 2019 | PyPI salt |
Use of a Broken or Risky Cryptographic Algorithm in Terraform CVE-2019-19316, GHSA-4rvg-555h-r626, GHSA-h3p9-wrgx-82cm, GO-2022-0839 | High | 0.9% | 02 Dec, 2019 | Go github.com/hashicorp/terraform |
Path Traversal in Docker CVE-2014-9356, GHSA-vj3f-3286-r4pf, GO-2022-0751 | High | 4.9% | 02 Dec, 2019 | Go github.com/docker/docker |
Django allows unintended model editing CVE-2019-19118, GHSA-hvmf-r92r-27hr, PYSEC-2019-15 | High | 1.7% | 02 Dec, 2019 | PyPI Django PyPI django |
2FA bypass in Wagtail through new device path CVE-2019-16766, GHSA-89px-ww3j-g2mm, PYSEC-2019-135 | High | 1.5% | 29 Nov, 2019 | PyPI wagtail-2fa |
Code injection in FreeIPA CVE-2019-14867, GHSA-7hpj-hfcr-5qwm, PYSEC-2019-28, PYSEC-2026-636 | High | 7.4% | 27 Nov, 2019 | PyPI freeipa PyPI ipa |
typed-ast Out-of-bounds Read CVE-2019-19274, GHSA-m3jw-62m7-jjcm, PYSEC-2019-130 | High | 3.3% | 26 Nov, 2019 | PyPI typed-ast |
typed-ast Out-of-bounds Read CVE-2019-19275, GHSA-7xxv-wpxj-mx5v, PYSEC-2019-131 | High | 3.3% | 26 Nov, 2019 | PyPI typed-ast |
Ansible password prompts could expose passwords CVE-2019-14856, GHSA-6fq2-x65v-v9h7, PYSEC-2019-146 | High | 1.6% | 26 Nov, 2019 | PyPI ansible |
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability CVE-2019-15271 | HighExploited | 5.5% | 26 Nov, 2019 | |
Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2019-10217, GHSA-p75j-wc34-527c, PYSEC-2019-3 | High | 1.9% | 25 Nov, 2019 | PyPI ansible |
Google Chrome WebAudio Use-After-Free Vulnerability CVE-2019-13720 | HighExploited | 49.4% | 25 Nov, 2019 | |
Incorrect Default Permissions in keyring CVE-2012-5578, GHSA-8867-vpm3-g98g, PYSEC-2019-182 | High | 0.4% | 25 Nov, 2019 | PyPI keyring |
Pagekit File Upload vulnerability CVE-2019-19013, GHSA-692x-89xv-64jx | High | 0.8% | 22 Nov, 2019 | Packagist pagekit/pagekit |
Cross-Site Scripting in vant GHSA-9xr8-8hmc-389f | High | Not scored | 22 Nov, 2019 | npm vant |
Ansible password prompts could expose passwords CVE-2019-10206, GHSA-cqmr-rcpr-cxh3, PYSEC-2019-145 | High | 1.5% | 22 Nov, 2019 | PyPI ansible |
Argument injection in a MimeTypeGuesser in Symfony CVE-2019-18888, GHSA-xhh6-956q-4q69 | High | 2.2% | 21 Nov, 2019 | Packagist symfony/http-foundation Packagist symfony/mime Packagist symfony/symfony |
Symfony Http-Kernel has non-constant time comparison in UriSigner CVE-2019-18887, GHSA-q8hg-pf8v-cxrv | High | 1.3% | 21 Nov, 2019 | Packagist symfony/http-kernel Packagist symfony/symfony |
Improper Input Validation in Centreon Web CVE-2019-16405, GHSA-4f26-v6fr-9hmp | High | 27.2% | 21 Nov, 2019 | Packagist centreon/centreon |
Arbitrary File Write in iobroker.js-controller CVE-2019-10767, GHSA-cmch-296j-wfvw, SNYK-JS-IOBROKERJSCONTROLLER-534881 | High | 2.2% | 21 Nov, 2019 | npm iobroker.js-controller |
trytond Incorrect Authorization vulnerability CVE-2012-2238, GHSA-jfgc-5vh4-8rh5, PYSEC-2019-211 | High | 1.8% | 21 Nov, 2019 | PyPI trytond |
angular Prototype Pollution vulnerability CVE-2019-10768, GHSA-89mq-4x47-5v83, SNYK-JS-ANGULAR-534884 | High | 2.0% | 19 Nov, 2019 | npm angular |
Cloud Foundry Routing Improper Input Validation vulnerability CVE-2019-11289, GHSA-5796-p3m6-9qj4, GO-2021-0102 | High | 1.5% | 19 Nov, 2019 | Go code.cloudfoundry.org/gorouter Go github.com/cloudfoundry/gorouter |
RubyGems passenger gem allows remote attackers to delete files CVE-2012-6135, GHSA-8mw8-j583-vqfg | High | 2.3% | 19 Nov, 2019 | RubyGems passenger |