Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cobbler Web Interface Lacks CSRF Protection CVE-2011-4952, GHSA-9fqr-pqc9-f7pj, PYSEC-2026-624 | High | 0.6% | 19 Nov, 2019 | PyPI cobbler |
Timing attacks might allow practical recovery of the long-term private key CVE-2019-10764, GHSA-mr6r-82x4-f4jj, SNYK-PHP-SIMPLITOELLIPTICPHP-534576 | High | 1.1% | 18 Nov, 2019 | Packagist simplito/elliptic-php |
Pimcore Discloses Usernames In Use CVE-2019-18986, GHSA-8889-9g3f-73rj | High | 1.2% | 15 Nov, 2019 | Packagist pimcore/pimcore |
Moodle backs up private files CVE-2012-1156, GHSA-358r-g2xw-7c83 | High | 2.1% | 14 Nov, 2019 | Packagist moodle/moodle |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2019-1429 | HighExploited | 77.3% | 12 Nov, 2019 | |
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability CVE-2019-1405 | HighExploited | 30.2% | 12 Nov, 2019 | |
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability CVE-2019-1388 | HighExploited | 8.6% | 12 Nov, 2019 | |
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability CVE-2019-1385 | HighExploited | 3.6% | 12 Nov, 2019 | |
JSON-jwt Gem lacked element count during splitting of JWE string CVE-2019-18848, GHSA-cff7-6h4q-q5pj | High | 1.3% | 12 Nov, 2019 | RubyGems json-jwt |
Istio vulnerable to denial of service CVE-2019-18817, GHSA-vc7h-cmp3-4hw5 | High | 1.2% | 12 Nov, 2019 | Go istio.io/istio |
Python Twisted trustRoot is not respected in HTTP client CVE-2014-7143, GHSA-3c45-wgjp-7v9r, PYSEC-2019-212 | High | 2.6% | 12 Nov, 2019 | PyPI twisted |
Double Free in psutil CVE-2019-18874, GHSA-qfc5-mcwq-26q8, PYSEC-2019-41 | High | 3.5% | 12 Nov, 2019 | PyPI psutil |
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes CVE-2019-18857, GHSA-gf8j-v8x5-h9qp | High | 1.0% | 11 Nov, 2019 | Packagist enshrined/svg-sanitize |
Prototype Pollution in chartkick CVE-2019-18841, GHSA-5pm8-492c-92p5 | High | 1.4% | 11 Nov, 2019 | RubyGems chartkick npm chartkick |
Missing Initialization of Resource in Apache Arrow CVE-2019-12408, GHSA-8cw2-jv5c-c825, PYSEC-2019-195 | High | 3.2% | 08 Nov, 2019 | PyPI pyarrow RubyGems red-arrow |
Missing Initialization of Resource in Apache Arrow CVE-2019-12410, GHSA-cjw4-2w9r-r8mv, PYSEC-2019-196 | High | 4.6% | 08 Nov, 2019 | PyPI pyarrow RubyGems red-arrow |
Default Express middleware security check is ignored in production GHSA-4j6x-w426-6rc6 | High | Not scored | 08 Nov, 2019 | npm @cubejs-backend/api-gateway |
Signature validation bypass in XmlSecLibs CVE-2019-3465, GHSA-pqm6-cgwr-x6pf | High | 3.0% | 07 Nov, 2019 | Packagist robrichards/xmlseclibs |
Tahoe-LAFS fails to ensure integrity CVE-2012-0051, GHSA-v62p-cjv8-35xh, PYSEC-2019-253 | High | 1.7% | 07 Nov, 2019 | PyPI tahoe-lafs |
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue CVE-2019-12331, GHSA-vvwv-h69m-wg6f | High | 1.4% | 07 Nov, 2019 | Packagist phpoffice/phpexcel Packagist phpoffice/phpspreadsheet |
simpleSAMLphp incorrectly handles XML encryption CVE-2011-4625, GHSA-5fj7-f8x3-q2mc | High | 0.7% | 06 Nov, 2019 | Packagist simplesamlphp/simplesamlphp |
Magento 2 Community Edition SSRF vulnerability CVE-2019-8156, GHSA-775w-gx3f-4j4f | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Remote code execution through catalog attribute sets CVE-2019-8231, GHSA-qpc8-m2xm-9w75 | High | 1.4% | 06 Nov, 2019 | Packagist magento/core |
Magento Remote code execution through support/output path modification CVE-2019-8230, GHSA-qp43-2vhf-cj8g | High | 1.4% | 06 Nov, 2019 | Packagist magento/core |
Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability CVE-2019-8229, GHSA-w8vh-5v64-j3vr | High | 1.4% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8159, GHSA-47h6-hfpv-7phj | High | 3.3% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento remote code execution vulnerability CVE-2019-8154, GHSA-4v2q-hjx3-c4vr | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Server-Side Request Forgery (SSRF) CVE-2019-8151, GHSA-f73h-224c-62qr | High | 1.7% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8150, GHSA-p783-gj6m-9r88 | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8141, GHSA-9wr9-fw9v-8fgr | High | 2.4% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8137, GHSA-jrjx-8gmw-jj2q | High | 1.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento SQL injection via marketing account with access to email templates variables CVE-2019-8134, GHSA-45gj-78hc-4mvc | High | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento SQL injection vulnerability CVE-2019-8130, GHSA-x42g-82pp-4v6g | High | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SQLi Vulnerability CVE-2019-8127, GHSA-2x2q-2xpv-mcf9 | High | 1.3% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8122, GHSA-5v5p-x8c2-mqxp | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8119, GHSA-j63v-wcf9-c9hm | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8114, GHSA-crv7-r357-gw3w | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition Packagist magento/project-community-edition |
Magento 2 Community Edition Security Bypass CVE-2019-8112, GHSA-p9vf-4jx2-5hpp | High | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8111, GHSA-2crc-5vq6-386r | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8110, GHSA-gfcq-wh3g-c6h4 | High | 1.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability via CSRF CVE-2019-8109, GHSA-x72m-p4qc-p7rv | High | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento Information Disclosure via File upload functionality CVE-2019-8093, GHSA-32x5-6p4q-q8jh | High | 1.3% | 05 Nov, 2019 | Packagist magento/community-edition |
Improper Authentication in pip CVE-2013-5123, GHSA-c5h8-cq4v-cvfm, PYSEC-2019-160 | High | 8.0% | 05 Nov, 2019 | PyPI pip |
PhantomJS Arbitrary File Read CVE-2019-17221, GHSA-x43g-gj9x-838x | High | 3.4% | 05 Nov, 2019 | npm phantomjs |
TYPO3 Arbitrary Code Execution vulnerability on the backend CVE-2010-3663, GHSA-wjpc-gjf7-9938 | High | 2.4% | 04 Nov, 2019 | Packagist typo3/cms-backend |
TYPO3 SQL injection vulnerability on the backend CVE-2010-3662, GHSA-4rvc-5hrh-qmwf | High | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-backend |
SciPy creates insecure temporary directories CVE-2013-4251, GHSA-xp76-357g-9wqq, PYSEC-2019-156 | High | 0.4% | 04 Nov, 2019 | PyPI scipy |
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass CVE-2013-4751, GHSA-q8j7-fjh7-25v5 | High | 1.4% | 01 Nov, 2019 | Packagist symfony/symfony Packagist symfony/validator |
Cezerin Unauthorized Acces CVE-2019-18608, GHSA-6pq6-crw9-522h | High | 1.0% | 29 Oct, 2019 | npm cezerin |
Out-of-bounds read in Apache Thrift CVE-2019-0210, GHSA-jq7p-26h5-w78r, GO-2021-0101 | High | 6.5% | 29 Oct, 2019 | Go github.com/apache/thrift |