Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
libxslt Type Confusion vulnerability that affects Nokogiri CVE-2019-13118, GHSA-cf46-6xxh-pc75 | High | 5.1% | 01 Jul, 2019 | RubyGems nokogiri |
Moodle all messaging conversations could be viewed CVE-2019-10154, GHSA-ww45-x87c-wgff | High | 1.3% | 26 Jun, 2019 | Packagist moodle/moodle |
RubyGems Escape sequence injection vulnerability in api response handling CVE-2019-8323, GHSA-3h4r-pjv6-cph9 | High | 3.3% | 17 Jun, 2019 | RubyGems rubygems-update |
RubyGems Escape sequence injection vulnerability in gem owner CVE-2019-8322, GHSA-mh37-8c3g-3fgc | High | 3.3% | 17 Jun, 2019 | RubyGems rubygems-update |
RubyGems Escape sequence injection vulnerability in verbose CVE-2019-8321, GHSA-fr32-gr5c-xq5c | High | 3.3% | 17 Jun, 2019 | RubyGems rubygems-update |
RubyGems Escape sequence injection in errors CVE-2019-8325, GHSA-4wm8-fjv7-j774 | High | 3.3% | 17 Jun, 2019 | RubyGems rubygems-update |
Code injection in RubyGems CVE-2019-8324, GHSA-76wm-422q-92mq | High | 3.2% | 17 Jun, 2019 | RubyGems rubygems-update |
Directory Traversal in lactate GHSA-68gr-cmcp-g3mj | High | Not scored | 14 Jun, 2019 | npm lactate |
Prototype Pollution in @apollo/gateway GHSA-74cr-77xc-8g6r | High | Not scored | 13 Jun, 2019 | npm @apollo/gateway |
Shopware Insecure Deserialization Vulnerability CVE-2019-12799, GHSA-rf8f-hqjv-986p | High | 54.1% | 13 Jun, 2019 | Packagist shopware/shopware |
Cross-Site Scripting in ids-enterprise GHSA-49r3-3h96-rwj6 | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Cross-Site Scripting in ids-enterprise GHSA-hpfq-8wx8-cgqw | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Cross-Site Scripting in ids-enterprise GHSA-crfx-5phg-hmw9 | High | Not scored | 13 Jun, 2019 | npm ids-enterprise |
Command Injection in wiki-plugin-datalog GHSA-pm52-wwrw-c282 | High | Not scored | 13 Jun, 2019 | npm wiki-plugin-datalog |
Regular Expression Denial of Service (ReDoS) GHSA-h6ch-v84p-w6p9 | High | Not scored | 13 Jun, 2019 | npm diff |
Parse Server before v3.4.1 vulnerable to Denial of Service CVE-2019-1020012, GHSA-2479-qvv7-47qq | High | 1.4% | 13 Jun, 2019 | npm parse-server |
Command Injection in fs-path GHSA-gc94-6w89-hpqr | High | Not scored | 12 Jun, 2019 | npm fs-path |
Microsoft Task Scheduler Privilege Escalation Vulnerability CVE-2019-1069 | HighExploited | 6.2% | 12 Jun, 2019 | |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability CVE-2019-1064 | HighExploited | 6.9% | 12 Jun, 2019 | |
Path Traversal in localhost-now GHSA-73cw-jxmm-qpgh | High | Not scored | 11 Jun, 2019 | npm localhost-now |
Remote Code Execution in node-os-utils GHSA-j9f8-8h89-j69x | High | Not scored | 11 Jun, 2019 | npm node-os-utils |
Denial of Service in http-proxy-agent GHSA-8w57-jfpm-945m | High | Not scored | 11 Jun, 2019 | npm http-proxy-agent |
Prototype Pollution in querystringify GHSA-hxcm-v35h-mg2x | High | Not scored | 07 Jun, 2019 | npm querystringify |
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank CVE-2018-19801, GHSA-7vvr-h4p5-m7fh, PYSEC-2019-163 | High | 2.0% | 07 Jun, 2019 | PyPI aubio |
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function CVE-2018-19802, GHSA-c6jq-h4jp-72pr, PYSEC-2019-164 | High | 2.3% | 07 Jun, 2019 | PyPI aubio |
Deserialization vulnerability exists in parso CVE-2019-12760, GHSA-22mf-97vh-x8rw, PYSEC-2019-109 | High | 1.5% | 06 Jun, 2019 | PyPI parso |
Code Injection in PyXDG CVE-2019-12761, GHSA-r6v3-hpxj-r8rv, PYSEC-2019-199, SNYK-PYTHON-PYXDG-174562 | High | 2.1% | 06 Jun, 2019 | PyPI pyxdg |
HashiCorp Consul Incorrect Access Control vulnerability CVE-2019-12291, GHSA-h65h-v7fw-4p38, GO-2023-1852 | High | 1.2% | 06 Jun, 2019 | Go github.com/hashicorp/consul |
Rancher code injection via fluentd config commands CVE-2019-12303, GHSA-53pj-67m4-9w98, GO-2024-2762 | High | 2.0% | 06 Jun, 2019 | Go github.com/rancher/rancher |
Rancher Privilege Escalation Vulnerability CVE-2019-12274, GHSA-gc62-j469-9gjm, GO-2023-1991 | High | 1.1% | 06 Jun, 2019 | Go github.com/rancher/rancher |
Signature Verification Bypass in jwt-simple GHSA-8v5f-hp78-jgxq | High | Not scored | 06 Jun, 2019 | npm jwt-simple |
RubyGems Delete directory using symlink when decompressing tar CVE-2019-8320, GHSA-5x32-c9mf-49cc | High | 4.2% | 06 Jun, 2019 | RubyGems rubygems-update |
Istio may not check inbound TCP connections against istio-policy CVE-2019-12243, GHSA-6g5f-f5pm-mjrg | High | 1.2% | 05 Jun, 2019 | Go istio.io/istio |
Prototype Pollution in handlebars GHSA-q42p-pg8m-cqh6 | High | Not scored | 05 Jun, 2019 | npm handlebars |
High severity vulnerability that affects gun GHSA-886v-mm6p-4m66 | High | Not scored | 05 Jun, 2019 | npm gun |
Fortinet FortiOS and FortiProxy Improper Authorization CVE-2018-13382 | HighExploited | 81.7% | 04 Jun, 2019 | |
Code Injection in js-yaml GHSA-8j8c-7jfh-h6hx | High | Not scored | 04 Jun, 2019 | npm js-yaml |
NoSQL Injection in sequelize GHSA-wfp9-vr4j-f49j | High | Not scored | 04 Jun, 2019 | npm sequelize |
Denial of Service in ws GHSA-5v72-xg48-5rpm | High | Not scored | 04 Jun, 2019 | npm ws |
NoSQL Injection in loopback-connector-mongodb GHSA-m734-r4g6-34f9 | High | Not scored | 04 Jun, 2019 | npm loopback-connector-mongodb |
Cross-Site Scripting (XSS) in cloudcmd GHSA-m8fw-534v-xm85 | High | Not scored | 04 Jun, 2019 | npm cloudcmd |
Openstack Octavia Access Control Vulnerability CVE-2019-3895, GHSA-jjgh-m322-fjx6, PYSEC-2019-194 | High | 1.6% | 03 Jun, 2019 | PyPI octavia |
Cross-Site Scripting in react-svg GHSA-8xqr-4cpm-wx7g | High | Not scored | 31 May, 2019 | npm react-svg |
Out-of-bounds Read in base64-url GHSA-j4mr-9xw3-c9jx | High | Not scored | 31 May, 2019 | npm base64-url |
Path Traversal in angular-http-server GHSA-vmhw-fhj6-m3g5 | High | Not scored | 31 May, 2019 | npm angular-http-server |
Prototype Pollution in deap GHSA-xrmp-99wj-p6jc | High | Not scored | 31 May, 2019 | npm deap |
Denial of Service in foreman GHSA-xm28-fw2x-fqv2 | High | Not scored | 31 May, 2019 | npm foreman |
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 | HighExploited | 25.4% | 31 May, 2019 | |
Hybrid Group Gobot Improper Certificate Validation vulnerability CVE-2019-12496, GHSA-vfxc-r2gx-v2vq, GO-2021-0083 | High | 0.7% | 31 May, 2019 | Go github.com/hybridgroup/gobot |
Cross-Site Scripting in bracket-template GHSA-jj6g-7j8p-7gf2 | High | Not scored | 30 May, 2019 | npm bracket-template |