Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Trend Micro OfficeScan Directory Traversal Vulnerability CVE-2019-18187 | HighExploited | 25.1% | 28 Oct, 2019 | |
Incorrect Default Permissions in keyring CVE-2012-5577, GHSA-p86x-652p-6385, PYSEC-2019-181 | High | 1.8% | 28 Oct, 2019 | PyPI keyring |
Panic on invalid DSA public keys in crypto/dsa CVE-2019-17596, GO-2022-0213 | High | 4.7% | 24 Oct, 2019 | Go stdlib |
Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource CVE-2019-18409, GHSA-hhwc-8g49-j8jx | High | 0.3% | 24 Oct, 2019 | RubyGems ruby_parser-legacy |
Server-Side Request Forgery in unoconv CVE-2019-17400, GHSA-27p5-7cw6-m45h, PYSEC-2019-213 | High | 2.2% | 21 Oct, 2019 | PyPI unoconv |
Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments CVE-2019-25766, GHSA-v7x3-7hw7-pcjg | High | 0.4% | 21 Oct, 2019 | npm renovate |
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability CVE-2019-18197, GHSA-242x-7cm6-4w8j | High | 4.4% | 18 Oct, 2019 | RubyGems nokogiri |
XML Entity Expansion and Improper Input Validation in Kubernetes API server CVE-2019-11253, GHSA-pmqp-h87c-mr78, GO-2022-0703 | High | 25.9% | 17 Oct, 2019 | Go k8s.io/kubernetes |
url_redirect for Typo3 SQLi Vulnerability CVE-2019-16682, GHSA-hcpv-xh8q-f3vq | High | 0.8% | 16 Oct, 2019 | Packagist sfroemken/url_redirect |
Oracle Solaris Privilege Escalation Vulnerability CVE-2019-3010 | HighExploited | 13.5% | 16 Oct, 2019 | |
Regular Expression Denial of Service in csv-parse CVE-2019-17592, GHSA-582f-p4pg-xc74 | High | 2.3% | 14 Oct, 2019 | npm csv-parse |
graphite.composer.views.send_email vulnerable to SSRF CVE-2017-18638, GHSA-vfj6-275q-4pvm, PYSEC-2019-151 | High | 15.3% | 11 Oct, 2019 | PyPI graphite-web |
Android Kernel Use-After-Free Vulnerability CVE-2019-2215 | HighExploited | 72.1% | 11 Oct, 2019 | |
High severity vulnerability that affects indico GHSA-67cx-rhhq-mfhq | High | Not scored | 11 Oct, 2019 | PyPI indico |
Microsoft Windows Privilege Escalation Vulnerability CVE-2019-1322 | HighExploited | 18.8% | 10 Oct, 2019 | |
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability CVE-2019-1315 | HighExploited | 3.5% | 10 Oct, 2019 | |
koji hub allows arbitrary upload destinations CVE-2019-17109, GHSA-7498-c9fm-g64p, PYSEC-2019-183 | High | 3.2% | 09 Oct, 2019 | PyPI koji |
MantisBT Remote Code Execution CVE-2019-15715, GHSA-v23g-wjvq-2fpf | High | 30.0% | 09 Oct, 2019 | Packagist mantisbt/mantisbt |
Ansible Uses Plugins That Disclose Credentials CVE-2019-14846, GHSA-pm48-cvv2-29q5, PYSEC-2019-4 | High | 0.5% | 08 Oct, 2019 | PyPI ansible |
ecdsa Denial of Service vulnerability in signature verification and signature malleability CVE-2019-14853, GHSA-2mrj-435v-c2cr, GHSA-pwfw-mgfj-7g3g, PYSEC-2019-177 | High | 2.4% | 08 Oct, 2019 | PyPI ecdsa |
Centreon Does Not Set HTTPOnly Flag CVE-2019-17104, GHSA-j224-7qr4-8646 | High | 1.9% | 08 Oct, 2019 | Packagist centreon/centreon |
Malicious URL drafting attack against iodines static file server may allow path traversal CVE-2024-22050, GHSA-85rf-xh54-whp3 | High | 0.9% | 07 Oct, 2019 | RubyGems iodine |
DOS attack in Pillow when processing specially crafted image files CVE-2019-16865, GHSA-j7mj-748x-7p78, PYSEC-2019-110 | High | 3.1% | 04 Oct, 2019 | PyPI pillow |
Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM. This could lead to denial of service, elevation of privilege, or unspecified other impact. CVE-2019-17180, PYSEC-2019-125 | High | 0.7% | 04 Oct, 2019 | PyPI steam |
Duplicate Advisory: Possible remote code execution via a remote procedure call CVE-2019-16328, GHSA-9ggp-4jpr-7ppj, GHSA-pj4g-4488-wmxm, PYSEC-2019-118 | High | 13.0% | 03 Oct, 2019 | PyPI rpyc |
Buffer Overflow in centra GHSA-v6cj-r88p-92rm | High | Not scored | 30 Sep, 2019 | npm centra |
Request smuggling due to accepting invalid headers in net/http via net/textproto CVE-2019-16276, GO-2022-0212 | High | 5.3% | 30 Sep, 2019 | Go stdlib |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-16993, GHSA-vj3x-vfm4-hvxc | High | 0.8% | 30 Sep, 2019 | Packagist phpbb/phpbb |
Out-of-bounds Write in OpenCV CVE-2019-9423, GHSA-8849-5h85-98qw, PYSEC-2026-2796, PYSEC-2026-2811, PYSEC-2026-2835, PYSEC-2026-719 | High | 0.3% | 27 Sep, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Incorrect Authorization in runc CVE-2019-16884, GHSA-fgv8-vj5c-2ppq, GO-2021-0085 | High | 4.4% | 25 Sep, 2019 | Go github.com/opencontainers/runc Go github.com/opencontainers/selinux |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2019-1367 | HighExploited | 52.4% | 23 Sep, 2019 | |
High severity vulnerability that affects generator-jhipster GHSA-mc84-xr9p-938r | High | Not scored | 23 Sep, 2019 | npm generator-jhipster |
Home Assistant information disclosure vulnerability CVE-2018-21019, GHSA-mh78-8f49-vjg3, PYSEC-2019-221 | High | 1.7% | 23 Sep, 2019 | PyPI homeassistant |
Arbitrary File Read in html-pdf CVE-2019-15138, GHSA-x4w5-r546-x9qh | High | 1.8% | 20 Sep, 2019 | npm html-pdf |
Authorization Bypass Through User-Controlled Key in Bagisto CVE-2019-16403, GHSA-pwrf-q7h8-jjr7 | High | 1.4% | 18 Sep, 2019 | Packagist bagisto/bagisto |
Pimcore Unrestricted Upload of File with Dangerous Type CVE-2019-16318, GHSA-cxj7-4jpj-2q38, SNYK-PHP-PIMCOREPIMCORE-451598 | High | 1.4% | 14 Sep, 2019 | Packagist pimcore/pimcore |
Pimcore RCE via PHAR upload CVE-2019-16317, GHSA-352x-hc2f-fwff, SNYK-PHP-PIMCOREPIMCORE-451599 | High | 1.7% | 14 Sep, 2019 | Packagist pimcore/pimcore |
Symlink Arbitrary File Overwrite in bower CVE-2019-5484, GHSA-p6mr-pxg4-68hx | High | 2.6% | 13 Sep, 2019 | npm bower |
Path Traversal in algo-httpserv GHSA-cgjv-rghq-qhgp | High | Not scored | 11 Sep, 2019 | npm algo-httpserv |
Microsoft Excel Remote Code Execution Vulnerability CVE-2019-1297 | HighExploited | 21.8% | 11 Sep, 2019 | |
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability CVE-2019-1253 | HighExploited | 11.6% | 11 Sep, 2019 | |
Microsoft Windows Privilege Escalation Vulnerability CVE-2019-1215 | HighExploited | 19.3% | 11 Sep, 2019 | |
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability CVE-2019-1214 | HighExploited | 1.4% | 11 Sep, 2019 | |
LMDB invalid write CVE-2019-16226, GHSA-r8g9-w4f3-9crm, PYSEC-2019-238 | High | 1.6% | 11 Sep, 2019 | PyPI lmdb |
py-lmdb Divide by Zero interruptions CVE-2019-16228, GHSA-ggwq-vrgp-6gv4, PYSEC-2019-240 | High | 1.8% | 11 Sep, 2019 | PyPI lmdb |
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning messa CVE-2019-12105, PYSEC-2019-126 | High | 2.3% | 10 Sep, 2019 | PyPI supervisor |
SQL Injection in LibreNMS CVE-2019-12465, GHSA-878x-85hc-gc4g | High | 1.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Path Traversal in LibreNMS CVE-2019-12464, GHSA-r336-jxfr-4c3c | High | 2.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Improper Encoding or Escaping of Output and Injection in LibreNMS CVE-2019-12463, GHSA-w5r2-gvgf-mpm8 | High | 1.4% | 09 Sep, 2019 | Packagist librenms/librenms |
SQL Injection in LibreNMS CVE-2019-10671, GHSA-g9xh-3w5g-229r | High | 1.3% | 09 Sep, 2019 | Packagist librenms/librenms |