Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Path Traversal in Ansible CVE-2020-1735, GHSA-gfr2-qpxh-qj9m, PYSEC-2020-7 | Medium | 0.5% | 16 Mar, 2020 | PyPI ansible |
Incorrect Permission Assignment for Critical Resource in Ansible CVE-2020-1736, GHSA-x7jh-595q-wq82, PYSEC-2020-8 | Medium | 0.4% | 16 Mar, 2020 | PyPI ansible |
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible CVE-2020-1740, GHSA-vcg8-98q8-g7mj, PYSEC-2020-12 | Medium | 0.4% | 16 Mar, 2020 | PyPI ansible |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2019-19211, GHSA-gfhf-2xr5-2fvw | Medium | 1.7% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2019-19210, GHSA-87r3-4gc8-f897 | Medium | 0.9% | 16 Mar, 2020 | Packagist dolibarr/dolibarr |
Cross-site Scripting in Contao CVE-2018-10125, GHSA-pj4j-287j-f742 | Medium | 0.8% | 16 Mar, 2020 | Packagist contao/contao Packagist contao/core Packagist contao/core-bundle |
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1753, GHSA-86hp-cj9j-33vv, PYSEC-2020-210 | Medium | 0.5% | 16 Mar, 2020 | PyPI ansible |
TOCTOU Race Condition in Yarn CVE-2019-15608, GHSA-hjxc-462x-x77j | Medium | 1.8% | 15 Mar, 2020 | npm yarn |
Cross-site Scripting in PrimeFaces CVE-2020-10544, GHSA-fw5f-7c6c-3vmv | Medium | 0.8% | 13 Mar, 2020 | Maven org.primefaces:primefaces npm primefaces |
Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen CVE-2020-7600, GHSA-2cf2-2383-h4jv, SNYK-JS-QUERYMEN-559867 | Medium | 1.2% | 12 Mar, 2020 | npm querymen |
Cross-site Scripting in yii2cmf CVE-2018-10704, GHSA-mvrg-5c4w-7qv4 | Medium | 0.9% | 12 Mar, 2020 | Packagist yidashi/yii2cmf |
Prototype Pollution in minimist CVE-2020-7598, GHSA-vh95-rmgr-6w4m | Medium | 1.9% | 11 Mar, 2020 | npm minimist |
Forced Browsing in Twisted CVE-2016-1000111, GHSA-3gqj-cmxr-p4x2, PYSEC-2020-214 | Medium | 2.8% | 11 Mar, 2020 | PyPI twisted |
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733, GHSA-g4mq-6fp5-qwcf, PYSEC-2020-5 | Medium | 0.4% | 11 Mar, 2020 | PyPI ansible |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-16107, GHSA-wg24-9xm9-593v | Medium | 0.4% | 11 Mar, 2020 | Packagist phpbb/phpbb |
Froxlor Exposure of Sensitive Information to an Unauthorized Actor CVE-2020-10237, GHSA-j9wr-mj69-cqmv | Medium | 0.2% | 09 Mar, 2020 | Packagist froxlor/froxlor |
Froxlor Information Disclosure CVE-2020-10236, GHSA-hvgf-2rf7-wrx9 | Medium | 0.3% | 09 Mar, 2020 | Packagist froxlor/froxlor |
Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util CVE-2019-10806, GHSA-6hwh-rqwf-cxxr, SNYK-JS-VEGAUTIL-559223 | Medium | 1.1% | 09 Mar, 2020 | npm vega-util |
CKEditor 4.0 vulnerability in the HTML Data Processor BIT-drupal-2020-9281, CVE-2020-9281, GHSA-vcjf-mgcg-jxjq | Medium | 4.3% | 07 Mar, 2020 | npm ckeditor4 |
InfluxDB Reflected Cross-site Scripting CVE-2018-17572, GHSA-w55x-q3gv-px85 | Medium | 0.7% | 02 Mar, 2020 | Go github.com/influxdata/influxdb |
HTTP Response Splitting (Early Hints) in Puma CVE-2020-5249, GHSA-33vf-4xgg-9r58 | Medium | 1.6% | 02 Mar, 2020 | RubyGems puma |
Cross-site Scripting in reveal.js CVE-2020-8127, GHSA-6vwx-mwp8-fh44 | Medium | 1.2% | 28 Feb, 2020 | npm reveal.js |
Uncontrolled Resource Consumption in rdf-graph-array CVE-2019-10798, GHSA-prv2-xwr7-hr57 | Medium | 1.1% | 24 Feb, 2020 | npm rdf-graph-array |
XSS in Bleach when noscript and raw tag whitelisted CVE-2020-6802, GHSA-q65m-pv3f-wr5r, PYSEC-2020-27 | Medium | 1.7% | 24 Feb, 2020 | PyPI bleach |
OS Command Injection in Rake CVE-2020-8130, GHSA-jppv-gw3r-w3q8 | Medium | 1.4% | 24 Feb, 2020 | RubyGems rake |
Ansible Sensitive Files Are Locally Readable CVE-2014-4658, GHSA-5g4v-2pc6-4hh4, PYSEC-2020-200 | Medium | 0.4% | 20 Feb, 2020 | PyPI ansible |
Ansible sets unsafe permissions for sources.list CVE-2014-4659, GHSA-6667-f46p-pg88, PYSEC-2020-201 | Medium | 0.4% | 20 Feb, 2020 | PyPI ansible |
Ansible discloses credential information CVE-2014-4660, GHSA-5xm4-jmpw-p6j3, PYSEC-2020-202 | Medium | 0.4% | 20 Feb, 2020 | PyPI ansible |
Improper Certificate Validation in Puppet CVE-2020-7942, GHSA-gqvf-892r-vjm5 | Medium | 0.8% | 19 Feb, 2020 | RubyGems puppet |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability CVE-2020-3153 | MediumExploited | 28.5% | 19 Feb, 2020 | |
SilverStripe Denial of Service on flush and development URL tools CVE-2019-12246, GHSA-5fr8-xhqq-4p3q | Medium | 0.7% | 19 Feb, 2020 | Packagist silverstripe/framework |
Prototype Pollution in undefsafe CVE-2019-10795, GHSA-332q-7ff2-57h2, SNYK-JS-UNDEFSAFE-548940 | Medium | 1.1% | 18 Feb, 2020 | npm undefsafe |
component-flatten vulnerable to Prototype Pollution CVE-2019-10794, GHSA-g6r3-hhg9-qf58 | Medium | 0.7% | 18 Feb, 2020 | npm component-flatten |
Prototype Pollution in dot-object CVE-2019-10793, GHSA-j9cf-pr2x-5273, SNYK-JS-DOTOBJECT-548905 | Medium | 1.1% | 18 Feb, 2020 | npm dot-object |
Injection in bodymen CVE-2019-10792, GHSA-8h84-8j4f-p97q, SNYK-JS-BODYMEN-548897 | Medium | 1.0% | 18 Feb, 2020 | npm bodymen |
Reflected XSS in SilverStripe CVE-2019-19325, GHSA-qvrv-2x7x-78x2 | Medium | 0.7% | 17 Feb, 2020 | Packagist silverstripe/framework |
Cross-site Scripting in Joplin CVE-2020-9038, GHSA-6r7x-hc8m-985r | Medium | 3.6% | 17 Feb, 2020 | npm joplin |
Cross-Site Request Forgery in Moodle BIT-moodle-2020-1692, CVE-2020-1692, GHSA-9328-7pcw-vw69 | Medium | 0.6% | 17 Feb, 2020 | Packagist moodle/moodle |
Dolibarr ERP and CRM contain XSS Vulnerability BIT-dolibarr-2020-9016, CVE-2020-9016, GHSA-jh69-6vv2-wfp5 | Medium | 0.9% | 16 Feb, 2020 | Packagist dolibarr/dolibarr |
Improper Certificate Validation in Heartland & Global Payments PHP SDK CVE-2019-20455, GHSA-pm77-c4q7-3fwj | Medium | 1.0% | 14 Feb, 2020 | Packagist globalpayments/php-sdk |
PrestaShop Stored Cross-Site Scripting Vulnerability CVE-2013-4791, GHSA-crpg-2mm2-jjqf | Medium | 0.6% | 14 Feb, 2020 | Packagist prestashop/prestashop |
XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode CVE-2019-10785, GHSA-pg97-ww7h-5mjr, SNYK-JS-DOJOX-548257, | Medium | 1.8% | 13 Feb, 2020 | npm dojox |
Podman has Files or Directories Accessible to External Parties CVE-2020-1726, GHSA-vmhj-p9hw-vgrf, GO-2023-1544 | Medium | 1.5% | 11 Feb, 2020 | Go github.com/containers/libpod Go github.com/containers/libpod/v2 Go github.com/containers/podman Go github.com/containers/podman/v2 |
Moodle Persistent Cross-site Scripting (XSS) CVE-2019-18210, GHSA-q6vw-27c6-jv9c | Medium | 0.8% | 11 Feb, 2020 | Packagist moodle/moodle |
Cross-site scripting in SocksJS-node CVE-2020-8823, GHSA-hh8v-jmh3-9437, SNYK-JS-SOCKJS-548397 | Medium | 1.9% | 10 Feb, 2020 | npm sockjs |
bbPress Cross-site Scripting (XSS) vulnerability CVE-2011-1150, GHSA-483f-wxw9-3rpq | Medium | 0.9% | 05 Feb, 2020 | Packagist bbpress/bbpress |
Improper Validation and Sanitization in url-parse CVE-2020-8124, GHSA-46c4-8wrp-j99v | Medium | 1.7% | 04 Feb, 2020 | npm url-parse |
Uncontrolled Resource Consumption in strapi CVE-2020-8123, GHSA-23fp-fmrv-f5px | Medium | 1.1% | 04 Feb, 2020 | npm strapi-admin |
Catastrophic backtracking in regex allows Denial of Service in Waitress CVE-2020-5236, GHSA-73m2-3pwg-5fgc, PYSEC-2020-155 | Medium | 2.4% | 04 Feb, 2020 | PyPI waitress |
Kubernetes kubectl cp Vulnerable to Symlink Attack CVE-2019-11251, GHSA-6qfg-8799-r575, GO-2022-0802 | Medium | 2.6% | 03 Feb, 2020 | Go k8s.io/kubernetes |