Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Magento 2 Community Edition IDOR Vulnerability CVE-2019-7854, GHSA-hpxv-vpfv-7jc9 | High | 1.1% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Session Fixation Check CVE-2019-7849, GHSA-v797-hfv8-v2xm | High | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Django Denial-of-service in django.utils.text.Truncator CVE-2019-14232, GHSA-c4qh-4vgv-qc6g, PYSEC-2019-11 | High | 3.5% | 02 Aug, 2019 | PyPI Django PyPI django |
Django Denial-of-service in strip_tags() CVE-2019-14233, GHSA-h5jv-4p7w-64jg, PYSEC-2019-12 | High | 3.2% | 02 Aug, 2019 | PyPI Django PyPI django |
Uncontrolled Recursion in Django CVE-2019-14235, GHSA-v9qg-3j8p-r63v, PYSEC-2019-14 | High | 3.1% | 02 Aug, 2019 | PyPI Django PyPI django |
NULL Pointer Dereference in OpenCV. CVE-2019-14493, GHSA-3448-vrgh-85xr, PYSEC-2026-2795, PYSEC-2026-2806, PYSEC-2026-2834, PYSEC-2026-718 | High | 3.3% | 01 Aug, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Out-of-bounds Read and Out-of-bounds Write in OpenCV CVE-2019-14492, GHSA-fw99-f933-rgh8, PYSEC-2026-2798, PYSEC-2026-2821, PYSEC-2026-2837, PYSEC-2026-721 | High | 3.0% | 01 Aug, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Out-of-bounds Read in OpenCV CVE-2019-14491, GHSA-fm39-cw8h-3p63, PYSEC-2026-2797, PYSEC-2026-2818, PYSEC-2026-2836, PYSEC-2026-720 | High | 2.9% | 01 Aug, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Apache Solr DataImportHandler Code Injection Vulnerability CVE-2019-0193 | HighExploited | 83.5% | 01 Aug, 2019 | |
Moodle CSRF Vulnerability CVE-2019-10186, GHSA-wv9c-pfpm-4wc5 | High | 1.1% | 31 Jul, 2019 | Packagist moodle/moodle |
Podman Path Traversal Vulnerability leads to arbitrary file read/write CVE-2019-10152, GHSA-rh5f-2w6r-q7vj, GO-2023-1927 | High | 0.5% | 30 Jul, 2019 | Go github.com/containers/podman |
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation CVE-2019-7615, GHSA-35j2-p8fh-x966 | High | 0.6% | 30 Jul, 2019 | RubyGems elastic-apm |
Missing Encryption of Sensitive Data in yarn CVE-2019-5448, GHSA-wqfc-cr59-h64p | High | 0.7% | 30 Jul, 2019 | npm yarn |
Improper Access Control in novajoin CVE-2019-10138, GHSA-xf8c-3cgx-fcwm, PYSEC-2019-192 | High | 1.0% | 30 Jul, 2019 | PyPI novajoin |
Integer Overflow or Wraparound in NATS Server CVE-2019-13126, GHSA-jp4j-47f9-2vc3, GO-2022-0852 | High | 1.8% | 29 Jul, 2019 | Go github.com/nats-io/nats-server Go github.com/nats-io/nats-server/v2 |
Dolibarr ERP and CRM Code Injection CVE-2019-11201, GHSA-jwg3-v9xm-v6q9 | High | 2.2% | 29 Jul, 2019 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM malicious executable loading CVE-2019-11200, GHSA-2rwh-262r-r85j | High | 2.1% | 29 Jul, 2019 | Packagist dolibarr/dolibarr |
Pterodactyl vulnerable to 2FA Sniffing CVE-2019-1020002, GHSA-fg52-xjfc-9rh8, GHSA-vcm9-hx3q-qwj8 | High | 1.5% | 29 Jul, 2019 | Packagist pterodactyl/panel |
Pallets Werkzeug vulnerable to Path Traversal CVE-2019-14322, GHSA-j544-7q9p-6xp8, PYSEC-2026-1065 | High | 55.8% | 28 Jul, 2019 | PyPI werkzeug |
samlr XML nodes comment attack CVE-2018-20857, GHSA-qpxp-5j56-gg3x | High | 1.2% | 26 Jul, 2019 | RubyGems samlr |
Auth0 Passport-SharePoint does not validate JWT signature CVE-2019-13483, GHSA-45fh-g845-pj9w | High | 0.6% | 25 Jul, 2019 | npm passport-sharepoint |
mastercactapus proxyprotocol vulnerable to denial of service CVE-2019-14243, GHSA-85c5-ccm8-vr96, GO-2023-1923 | High | 4.3% | 23 Jul, 2019 | Go github.com/mastercactapus/proxyprotocol |
Mozilla Firefox and Thunderbird Type Confusion Vulnerability CVE-2019-11707 | HighExploited | 38.0% | 23 Jul, 2019 | |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CVE-2019-1579 | HighExploited | 44.2% | 19 Jul, 2019 | |
Infinite Loop in scapy CVE-2019-1010142, GHSA-mpf2-q34c-fc6j, PYSEC-2019-120 | High | 2.8% | 19 Jul, 2019 | PyPI scapy |
Secret insertion into debug log in Docker CVE-2019-13509, GHSA-j249-ghv5-7mxv | High | 3.7% | 18 Jul, 2019 | Go github.com/docker/docker |
b3log Wide unauthenticated file access CVE-2019-13915, GHSA-6452-jr93-r5qm, GO-2023-1924 | High | 2.6% | 18 Jul, 2019 | Go github.com/b3log/wide |
Dolibarr Cross Site Request Forgery (CSRF) CVE-2019-1010054, GHSA-hwmc-v6j6-gc2p | High | 2.2% | 18 Jul, 2019 | Packagist dolibarr/dolibarr |
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage CVE-2019-1010083, GHSA-5wv5-4vpf-pj6m, PYSEC-2019-179 | High | 1.8% | 17 Jul, 2019 | PyPI flask |
Linux Kernel Improper Privilege Management Vulnerability CVE-2019-13272 | HighExploited | 52.2% | 17 Jul, 2019 | |
Citrix SD-WAN and NetScaler Command Injection Vulnerability CVE-2019-12991 | HighExploited | 74.1% | 16 Jul, 2019 | |
python-engineio vulnerable to Cross-Site Request Forgery (CSRF) CVE-2019-13611, GHSA-j3jp-gvr5-7hwq, PYSEC-2019-170 | High | 0.9% | 16 Jul, 2019 | PyPI python-engineio |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-1132 | HighExploited | 9.9% | 15 Jul, 2019 | |
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability CVE-2019-1130 | HighExploited | 1.7% | 15 Jul, 2019 | |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability CVE-2019-1129 | HighExploited | 1.8% | 15 Jul, 2019 | |
Microsoft SQL Server Remote Code Execution Vulnerability CVE-2019-1068 | HighExploited | 57.3% | 15 Jul, 2019 | |
Microsoft Windows Privilege Escalation Vulnerability CVE-2019-0880 | HighExploited | 2.3% | 15 Jul, 2019 | |
XML Injection in python-libnmap CVE-2019-1010017, GHSA-9ccv-p7fg-m73x, PYSEC-2019-218 | High | 1.5% | 15 Jul, 2019 | PyPI python-libnmap |
Mirumee Saleor CSRF Protection Disabled CVE-2019-13594, GHSA-fgjh-x3f8-8gmh, PYSEC-2026-916 | High | 0.6% | 14 Jul, 2019 | PyPI saleor |
OS Command Injection in MiniMagick CVE-2019-13574, GHSA-r7j3-vvh2-xrpj | High | 7.6% | 12 Jul, 2019 | RubyGems mini_magick |
Wikimedia information leak vulnerability CVE-2019-12474, GHSA-2qrr-c2gh-pr35 | High | 2.0% | 10 Jul, 2019 | Packagist mediawiki/core |
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple CVE-2019-12473, GHSA-33xw-x3pr-rvqj | High | 2.3% | 10 Jul, 2019 | Packagist mediawiki/core |
MediaWiki Incorrect Access Control vulnerability CVE-2019-12472, GHSA-7mqg-5fgh-xh4r | High | 1.3% | 10 Jul, 2019 | Packagist mediawiki/core |
Wikimedia MediaWiki allows CSRF CVE-2019-12466, GHSA-27fw-r78j-h898 | High | 0.8% | 10 Jul, 2019 | Packagist mediawiki/core |
TYPO3 Vulnerable to Insecure Deserialization CVE-2019-12747, GHSA-86hp-xrhj-fhpq | High | 1.5% | 09 Jul, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
Path Traversal in serve-here.js GHSA-g8m7-qhv7-9h5x | High | Not scored | 05 Jul, 2019 | npm serve-here |
postfix-mta-sts-resolver Algorithm Downgrade vulnerability CVE-2019-16791, GHSA-h92m-42h4-82f6, PYSEC-2020-174 | High | 0.9% | 05 Jul, 2019 | PyPI postfix-mta-sts-resolver |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability CVE-2018-18325 | HighExploited | 74.0% | 03 Jul, 2019 | |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability CVE-2018-15811 | HighExploited | 76.3% | 03 Jul, 2019 | |
Path Traversal vulnerability that affects yard CVE-2019-1020001, GHSA-xfhh-rx56-rxcr | High | 2.3% | 02 Jul, 2019 | RubyGems yard |