Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Total.js CMS Unauthorized Access CVE-2019-15953, GHSA-q3x9-28f7-w8rc | High | 1.5% | 05 Sep, 2019 | npm total4 |
Total.js CMS Path Traversal CVE-2019-15952, GHSA-pwvp-h579-hfxg | High | 5.1% | 05 Sep, 2019 | npm total4 |
Nagios XI Remote Code Execution Vulnerability CVE-2019-15949 | HighExploited | 77.0% | 05 Sep, 2019 | |
Rancher Vulnerable to Cross-site Request Forgery (CSRF) CVE-2019-13209, GHSA-xhg2-rvm8-w2jh, GO-2022-0755 | High | 1.1% | 04 Sep, 2019 | Go github.com/rancher/rancher |
Unintended Require in larvitbase-api CVE-2019-5479, GHSA-xf27-jqwv-gf3r | High | 1.3% | 03 Sep, 2019 | npm larvitbase-api |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability CVE-2019-13608 | HighExploited | 30.0% | 29 Aug, 2019 | |
Kubernetes kube-apiserver unauthorized access CVE-2019-11247, GHSA-fp37-c92q-4pwq | High | 2.1% | 29 Aug, 2019 | Go k8s.io/apiextensions-apiserver |
Kubelet Incorrect Privilege Assignment CVE-2019-11245, GHSA-r76g-g87f-vw8f, GO-2024-2780 | High | 0.6% | 29 Aug, 2019 | Go k8s.io/kubernetes Go k8s.io/kubernetes/cmd/kubelet |
Docker Desktop Community Edition Privilege Escalation Vulnerability CVE-2019-15752 | HighExploited | 48.8% | 28 Aug, 2019 | |
Cross-Site Request Forgery in MicroPyramid Django CRM CVE-2019-11457, GHSA-pg2f-r7pc-6fxx, PYSEC-2019-174 | High | 1.2% | 27 Aug, 2019 | PyPI django-crm |
SQL Injection in connect-pg-simple CVE-2019-15658, GHSA-xqh8-5j36-4556 | High | 1.0% | 26 Aug, 2019 | npm connect-pg-simple |
Open Redirect in httpie CVE-2019-10751, GHSA-xjjg-vmw6-c2p9, PYSEC-2019-23, SNYK-PYTHON-HTTPIE-460107 | High | 2.0% | 23 Aug, 2019 | PyPI httpie |
Elastic APM agent for Python client CGI proxy redirection flaw CVE-2019-7617, GHSA-22jh-6gx8-f944, PYSEC-2019-178 | High | 1.6% | 22 Aug, 2019 | PyPI elastic-apm |
Improper Key Verification in openpgp CVE-2019-9154, GHSA-hfmf-q43v-2ffj | High | 1.6% | 22 Aug, 2019 | npm openpgp |
Message Signature Bypass in openpgp CVE-2019-9153, GHSA-qwqc-28w3-fww6 | High | 2.0% | 22 Aug, 2019 | npm openpgp |
NLTK Vulnerable To Path Traversal CVE-2019-14751, GHSA-mr7p-25v2-35wr, PYSEC-2019-106 | High | 5.7% | 22 Aug, 2019 | PyPI nltk |
assign-deep Vulnerable to Prototype Pollution CVE-2019-10745, GHSA-66rh-8fw6-59q6 | High | 1.1% | 20 Aug, 2019 | npm assign-deep |
Dolibarr Cross-Site Request Forgery (CSRF) CVE-2019-15062, GHSA-4qq9-qg7j-fcm9 | High | 0.6% | 14 Aug, 2019 | Packagist dolibarr/dolibarr |
golang.org/x/net/http vulnerable to a reset flood CVE-2019-9512, CVE-2019-9514, GHSA-39qc-96h7-956f, GHSA-hgr8-6h9x-f7q9, GO-2022-0536 | High | 83.4% | 13 Aug, 2019 | Go golang.org/x/net Go stdlib |
Istio ReDoS Vulnerability CVE-2019-14993, GHSA-qcvw-82hh-gq38 | High | 2.3% | 13 Aug, 2019 | Go istio.io/istio |
Bagisto CSRF Vulnerability CVE-2019-14933, GHSA-pgwp-f3xh-m24g | High | 0.6% | 11 Aug, 2019 | Packagist bagisto/bagisto |
OpenStack Nova Server Resource Faults Leak External Exception Details CVE-2019-14433, GHSA-pg64-r7rr-phv8, PYSEC-2019-191 | High | 2.0% | 09 Aug, 2019 | PyPI nova |
Pallets Werkzeug Insufficient Entropy CVE-2019-14806, GHSA-gq9m-qvpx-68hc, PYSEC-2019-140 | High | 1.9% | 09 Aug, 2019 | PyPI werkzeug |
Sensitive data written to disk unencrypted in Spark CVE-2019-10099, GHSA-fp5j-3fpf-mhj5, PYSEC-2019-114 | High | 1.3% | 07 Aug, 2019 | Maven org.apache.spark:spark-core_2.11 PyPI pyspark |
PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm CVE-2016-5431, GHSA-xm5f-hc9r-76f3 | High | 1.0% | 07 Aug, 2019 | Packagist gree/jose |
Magento 2 Community Edition Information Leak CVE-2019-7951, GHSA-5j25-5hjr-w7m2 | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Access Control Bypass CVE-2019-7950, GHSA-2fhr-f6q6-c4p2 | High | 2.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE CVE-2019-7942, GHSA-vvf9-fxhv-4rgj | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7932, GHSA-969v-mwp3-4mr3 | High | 2.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Unrestricted File Upload CVE-2019-7930, GHSA-3h69-4frw-g2jm | High | 2.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition DoS vulnerability CVE-2019-7928, GHSA-hrg3-4q56-p2q5 | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SSRF vulnerability CVE-2019-7923, GHSA-hvcp-jvx5-4pmp | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition DoS vulnerability CVE-2019-7915, GHSA-prw8-gqwp-f7fh | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition SSRF vulnerability CVE-2019-7913, GHSA-hppc-rpfp-r8qw | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Filter extension bypass via crafted store configuration keys CVE-2019-7912, GHSA-f8h9-7rpq-7qcc | High | 1.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Server-Side Request Forgery vulnerability CVE-2019-7911, GHSA-33cj-w75f-49m2 | High | 1.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7903, GHSA-jhvh-mjfg-5m99 | High | 2.1% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7896, GHSA-2x55-mg9r-24f7 | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7895, GHSA-mw5w-cf76-73m8 | High | 1.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability via SSRF CVE-2019-7892, GHSA-w3r8-fxv5-58pp | High | 1.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition IDOR Vulnerability CVE-2019-7890, GHSA-3pgc-7jf3-5x5g | High | 0.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cryptographic Flaw CVE-2019-7886, GHSA-c2gg-rrhc-fvvg | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7885, GHSA-mp9r-rh95-f8f8 | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-7876, GHSA-6qh6-v99h-vh4c | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition Packagist magento/product-community-edition |
Magento 2 Community Edition Unsafe File Upload CVE-2019-7871, GHSA-v527-6h5r-cfg8 | High | 1.3% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition CSRF Vulnerability CVE-2019-7865, GHSA-wmrg-w9vg-7jqx | High | 0.5% | 02 Aug, 2019 | Packagist magento/community-edition Packagist magento/product-community-edition |
Magento 2 Community Edition Unsafe File Upload CVE-2019-7861, GHSA-j837-vm6w-6qcv | High | 2.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Weak PRNG CVE-2019-7860, GHSA-8v9h-m7pj-hx7c | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Path Traversal Vulnerability CVE-2019-7859, GHSA-hqhf-8jgc-h5hx | High | 1.5% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cryptographic Flaw CVE-2019-7858, GHSA-7h8v-f2g9-39fx | High | 0.7% | 02 Aug, 2019 | Packagist magento/community-edition |