Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Arbitrary File Deletion vulnerability in OctoberCMS CVE-2020-5296, GHSA-jv6v-fvvx-4932 | Medium | 1.4% | 03 Jun, 2020 | Packagist october/cms |
Local File read vulnerability in OctoberCMS CVE-2020-5295, GHSA-r23f-c2j5-rx2f | Medium | 7.4% | 03 Jun, 2020 | Packagist october/cms |
DoS via malicious record IDs in WatermelonDB CVE-2020-4035, GHSA-38f9-m297-6q9g | Medium | 0.8% | 03 Jun, 2020 | npm @nozbe/watermelondb |
Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico CVE-2020-13597, GHSA-pf59-j7c2-rh6x | Medium | 0.9% | 03 Jun, 2020 | Go github.com/projectcalico/calico |
containernetworking/plugins vulnerable to MitM attacks CVE-2020-10749, GHSA-fx6x-h9g4-56f8, GO-2023-1915 | Medium | 2.1% | 03 Jun, 2020 | Go github.com/containernetworking/plugins |
XSS in Django BIT-django-2020-13596, CVE-2020-13596, GHSA-2m34-jcjv-45xf, PYSEC-2020-32 | Medium | 2.9% | 03 Jun, 2020 | PyPI Django PyPI django |
Grafana XSS via adding a link in General feature CVE-2018-18625, GHSA-6wh2-8hw7-jw94, GO-2024-2483 | Medium | 1.4% | 02 Jun, 2020 | Go github.com/grafana/grafana |
Grafana XSS via a column style CVE-2018-18624, GHSA-9hv8-4frf-cprf, GO-2024-2516 | Medium | 1.4% | 02 Jun, 2020 | Go github.com/grafana/grafana |
Grafana XSS in Dashboard Text Panel CVE-2018-18623, GHSA-cmq2-j8v8-2q44, GO-2022-0342 | Medium | 1.8% | 02 Jun, 2020 | Go github.com/grafana/grafana |
Improper Input Validation in Docker Engine CVE-2020-13401, GHSA-qrrc-ww9x-r43g | Medium | 2.9% | 02 Jun, 2020 | Go github.com/docker/docker-ce |
MediaWiki Open Redirect vulnerability BIT-mediawiki-2020-10959, CVE-2020-10959, GHSA-mqhw-wq8p-vf5r | Medium | 1.4% | 02 Jun, 2020 | Packagist mediawiki/core |
Arbitrary File Read in Snyk Broker CVE-2020-7650, GHSA-2fmp-7xwf-wvwr, SNYK-JS-SNYKBROKER-570609 | Medium | 1.1% | 29 May, 2020 | npm snyk-broker |
Arbitrary File Read in Snyk Broker CVE-2020-7648, GHSA-9xv2-548x-5h79, SNYK-JS-SNYKBROKER-570607 | Medium | 1.1% | 29 May, 2020 | npm snyk-broker |
Arbitrary File Read in Snyk Broker CVE-2020-7653, GHSA-4vj3-f849-5r48, SNYK-JS-SNYKBROKER-570612 | Medium | 1.1% | 29 May, 2020 | npm snyk-broker |
Arbitrary File Read in Snyk Broker CVE-2020-7652, GHSA-x7m2-6g99-84w5, SNYK-JS-SNYKBROKER-570611 | Medium | 1.7% | 29 May, 2020 | npm snyk-broker |
Arbitrary File Read in Snyk Broker CVE-2020-7651, GHSA-45hw-29x7-9x95, SNYK-JS-SNYKBROKER-570610 | Medium | 1.1% | 29 May, 2020 | npm snyk-broker |
Cross-Site Scripting in Kaminari CVE-2020-11082, GHSA-r5jw-62xg-j433 | Medium | 1.5% | 28 May, 2020 | RubyGems kaminari |
Fork CMS Cross-site Scripting Vulnerability CVE-2020-13633, GHSA-74gc-hf33-5353 | Medium | 0.7% | 27 May, 2020 | Packagist forkcms/forkcms |
Centreon Sensitive Data Exposure vulnerability CVE-2020-10945, GHSA-h5qv-p378-3hhr | Medium | 0.6% | 27 May, 2020 | Packagist centreon/centreon |
Ability to forge per-form CSRF tokens in Rails CVE-2020-8166, GHSA-jp5v-5gx4-jmj9 | Medium | 1.7% | 26 May, 2020 | RubyGems actionpack |
bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section CVE-2020-13487, GHSA-p9xp-xghp-gqvp | Medium | 1.6% | 26 May, 2020 | Packagist bbpress/bbpress |
Knock Knock plugin Open redirection vulnerability CVE-2020-13486, GHSA-m69r-4h68-xq7j | Medium | 0.7% | 25 May, 2020 | Packagist verbb/knock-knock |
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action CVE-2020-13459, GHSA-p7rm-gh9g-5fr8 | Medium | 0.5% | 25 May, 2020 | Packagist verbb/image-resizer |
Grafana XSS via the OpenTSDB datasource BIT-grafana-2020-13430, CVE-2020-13430, GHSA-7m2x-qhrq-rp8h, GO-2024-2515 | Medium | 1.9% | 24 May, 2020 | Go github.com/grafana/grafana |
meinheld vulnerable to HTTP Request Smuggling CVE-2020-7658, GHSA-63h2-9cc8-fc7m, PYSEC-2020-239, SNYK-PYTHON-MEINHELD-569140 | Medium | 0.7% | 22 May, 2020 | PyPI meinheld |
Cross-site scripting in Contentful CVE-2020-13258, GHSA-g5j6-r3x9-gf2m, PYSEC-2026-626 | Medium | 2.1% | 21 May, 2020 | PyPI contentful |
HTTP Request Smuggling in netius CVE-2020-7655, GHSA-wm2m-xrrp-j74c, PYSEC-2020-242, SNYK-PYTHON-NETIUS-569141 | Medium | 0.8% | 21 May, 2020 | PyPI netius |
CRLF injection in httplib2 CVE-2020-11078, GHSA-gg84-qgv9-w4pq, PYSEC-2020-46 | Medium | 2.4% | 20 May, 2020 | PyPI httplib2 |
Dolibarr Stored Cross-site Scripting BIT-dolibarr-2020-13240, CVE-2020-13240, GHSA-f848-r5g6-6gpf | Medium | 0.7% | 20 May, 2020 | Packagist dolibarr/dolibarr |
Dolibarr Stored Cross-site Scripting via file upload BIT-dolibarr-2020-13239, CVE-2020-13239, GHSA-fvf9-2hjp-w936 | Medium | 0.7% | 20 May, 2020 | Packagist dolibarr/dolibarr |
Cross-Site Scripting in jquery CVE-2020-7656, GHSA-q4m3-2j7h-f7xw, SNYK-JS-JQUERY-569619 | Medium | 6.4% | 19 May, 2020 | Maven org.webjars.npm:jquery NuGet jQuery RubyGems jquery-rails npm jquery |
XSS in Dolibarr CVE-2020-13094, GHSA-cxvr-r92m-q9hw | Medium | 1.1% | 18 May, 2020 | Packagist dolibarr/dolibarr |
Subrion CMS XSS CVE-2019-20389, GHSA-xvgx-668j-f67p | Medium | 0.9% | 15 May, 2020 | Packagist intelliants/subrion |
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744, GHSA-vp9j-rghq-8jhh, PYSEC-2020-208 | Medium | 0.3% | 15 May, 2020 | PyPI ansible |
Cross-Site Scripting in TYPO3 CMS Link Handling BIT-typo3-2020-11065, CVE-2020-11065, GHSA-4j77-gg36-9864 | Medium | 0.5% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in TYPO3 CMS Form Engine BIT-typo3-2020-11064, CVE-2020-11064, GHSA-43gj-mj2w-wh46 | Medium | 0.5% | 13 May, 2020 | Packagist typo3/cms Packagist typo3/cms-core |
Cross-Site Scripting in SVG Sanitizer CVE-2020-11070, GHSA-59cf-m7v5-wh5w | Medium | 0.5% | 13 May, 2020 | Packagist t3g/svg-sanitizer |
Missing Authorization in TYPO3 extension CVE-2020-12700, GHSA-qwmj-72mp-q3m2 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Open redirect in direct_mail CVE-2020-12699, GHSA-952m-m83c-3xm6 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Missing Authorization in TYPO3 extension CVE-2020-12698, GHSA-9pm8-xcj6-2m33 | Medium | 0.8% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Denial of service in direct_mail CVE-2020-12697, GHSA-5gm6-r79q-hfgw | Medium | 1.3% | 13 May, 2020 | Packagist directmailteam/direct-mail |
Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2020-1746, GHSA-j2h6-73x8-22c4, PYSEC-2020-13 | Medium | 0.4% | 12 May, 2020 | PyPI ansible |
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10685, GHSA-77g3-3j5w-64w4, PYSEC-2020-1 | Medium | 0.4% | 11 May, 2020 | PyPI ansible |
Cross-Site Scripting in BookStack CVE-2020-11055, GHSA-5vf7-q87h-pg6w | Medium | 0.8% | 07 May, 2020 | Packagist ssddanbrown/bookstack |
IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 | MediumExploited | 68.5% | 07 May, 2020 | |
OpenStack Keystone does not check signature TTL of the EC2 credential auth method CVE-2020-12692, GHSA-rqw2-hhrf-7936, PYSEC-2020-56 | Medium | 0.7% | 07 May, 2020 | PyPI keystone |
gopkg.in/macaron.v1 Open Redirect vulnerability CVE-2020-12666, GHSA-733f-44f3-3frw, GO-2020-0039 | Medium | 1.4% | 05 May, 2020 | Go gopkg.in/macaron.v1 |
Potential Observable Timing Discrepancy in Wagtail CVE-2020-11037, GHSA-jjjr-3jcw-f8v6, PYSEC-2020-153 | Medium | 0.3% | 30 Apr, 2020 | PyPI wagtail |
Path Traversal in Ansible CVE-2020-10691, GHSA-3c67-gc48-983w, PYSEC-2020-2 | Medium | 0.3% | 30 Apr, 2020 | PyPI ansible |
Open redirect vulnerability in Sourcegraph CVE-2020-12283, GHSA-mx43-r985-5h4m | Medium | 1.3% | 30 Apr, 2020 | Go github.com/sourcegraph/sourcegraph |