Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Typo3 Information Disclosure CVE-2011-4900, GHSA-rwx5-7x5r-jgrm | Medium | 1.0% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 XSS Vulnerabilities CVE-2011-4632, GHSA-h86g-796f-hhfq | Medium | 0.7% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 XSS Vulnerability CVE-2011-4630, GHSA-29wr-24h5-95r5 | Medium | 0.7% | 06 Nov, 2019 | Packagist typo3/cms |
Typo3 Information Disclosure CVE-2011-4627, GHSA-frf4-5p2c-c3ff | Medium | 1.0% | 06 Nov, 2019 | Packagist typo3/cms |
Magento Cross-Site Scripting via admin panel CVE-2019-8157, GHSA-vrw4-34p5-pjg5 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via Attribute Set Name CVE-2019-8145, GHSA-xv69-f7x5-r4qw | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8132, GHSA-g378-6fg4-gx3v | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Composer JavaScript injection possible via html comments CVE-2019-8233, GHSA-fm68-89m8-4gjj | Medium | 0.7% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8232, GHSA-6vc8-3xf2-qrxx | Medium | 0.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability CVE-2019-8228, GHSA-988g-wfwf-5666 | Medium | 0.5% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento XSS Vulnerability CVE-2019-8227, GHSA-j49x-jjmj-9fqj | Medium | 0.5% | 06 Nov, 2019 | Packagist magento/core |
Magento Cross-site Scripting (XSS) CVE-2019-8153, GHSA-273r-v888-vgc6 | Medium | 1.5% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8152, GHSA-jjmg-xmq2-g6ff | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8148, GHSA-86pc-6mm8-542r | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8147, GHSA-v8fg-p27h-mxjp | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8146, GHSA-6m27-3r8q-c7f7 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Injection vulnerability via email templates CVE-2019-8143, GHSA-94q8-gx29-6mqv | Medium | 0.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8142, GHSA-298q-wv2h-v5vw | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Unrestricted file upload vulnerability CVE-2019-8140, GHSA-7pr3-34rg-g53m | Medium | 0.9% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8139, GHSA-gjjm-4x3g-3h33 | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8138, GHSA-85xw-3hp5-6fmc | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Bypass of sitemp access restrictions CVE-2019-8133, GHSA-62fx-3v4f-mwxm | Medium | 1.0% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8131, GHSA-vx7m-v8v2-fhwm | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via Signifyd Guarantee Option Translation Override CVE-2019-8129, GHSA-wg25-j79r-v5wp | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Cross-Site Scripting via store name CVE-2019-8128, GHSA-mhwc-4w67-xq2c | Medium | 0.6% | 06 Nov, 2019 | Packagist magento/community-edition |
Information disclosure through processing of external XML entities CVE-2019-8126, GHSA-427g-2r83-3ccm | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Insufficient Logging CVE-2019-8124, GHSA-x5q5-6wvf-2fpq | Medium | 1.0% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Insufficient Logging CVE-2019-8123, GHSA-fp5m-4mqh-849p | Medium | 0.8% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8120, GHSA-985w-mqqp-7287 | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Weak Cryptography CVE-2019-8118, GHSA-hmch-9947-82rj | Medium | 0.7% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8117, GHSA-v99w-jxr4-w6mc | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8115, GHSA-29mr-gr4c-vf9c | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Weak PRNG CVE-2019-8113, GHSA-c4r2-3f9r-rwp8 | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento Broken authentication and session managememt CVE-2019-8108, GHSA-92ph-xm9v-cg3j | Medium | 1.3% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Arbitrary File Deletion CVE-2019-8107, GHSA-2cg3-w597-rjfv | Medium | 1.0% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-8092, GHSA-56hf-w8gm-448q | Medium | 0.6% | 05 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Arbitrary File Deletion CVE-2019-8090, GHSA-653q-vqm6-gmjm | Medium | 0.9% | 05 Nov, 2019 | Packagist magento/community-edition |
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API CVE-2010-3673, GHSA-5f2f-hr23-j59j | Medium | 1.2% | 05 Nov, 2019 | Packagist typo3/cms-core |
TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper CVE-2010-3672, GHSA-p78x-93mq-qwqh | Medium | 1.0% | 05 Nov, 2019 | Packagist typo3/cms-fluid |
TYPO3 is vulnerable to Session Fixation CVE-2010-3671, GHSA-gqmh-5xmq-3fhg | Medium | 1.6% | 05 Nov, 2019 | Packagist typo3/cms-install |
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function CVE-2010-3670, GHSA-3276-p9f2-8q89 | Medium | 0.5% | 05 Nov, 2019 | Packagist typo3/cms-frontend |
Nokogiri vulnerable to DoS while parsing XML entities CVE-2013-6461, GHSA-jmhh-w7xp-wg39 | Medium | 2.2% | 05 Nov, 2019 | RubyGems nokogiri |
Nokogiri vulnerable to DoS while parsing XML documents CVE-2013-6460, GHSA-62qp-3fxm-9wxf | Medium | 2.1% | 05 Nov, 2019 | RubyGems nokogiri |
Duplicate Advisory: k8s.io/kube-state-metrics Exposure of Sensitive Information CVE-2019-10223, CVE-2019-17110, GHSA-2v6x-frw8-7r7f, GHSA-c92w-72c5-9x59, GO-2022-0621 | Medium | 1.8% | 05 Nov, 2019 | Go github.com/kubernetes/kube-state-metrics Go k8s.io/kube-state-metrics |
TYPO3 is vulnerable to Spam Abuse in the native form content element CVE-2010-3667, GHSA-48ww-8h7g-4hwq | Medium | 1.1% | 04 Nov, 2019 | Packagist typo3/cms-frontend |
TYPO3 is vulnerable to Insecure randomness in uniqid function CVE-2010-3666, GHSA-c7xr-736p-29j3 | Medium | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-install |
TYPO3 is vulnerable to Information Disclosure on the backend CVE-2010-3664, GHSA-8xp9-99h5-4vcg | Medium | 1.2% | 04 Nov, 2019 | Packagist typo3/cms-backend |
OpenStack Keystone and other components vulnerable to Improper Certificate Validation CVE-2013-2255, GHSA-qh2x-hpf9-cf2g, PYSEC-2026-2413, PYSEC-2026-2677, PYSEC-2026-3034, PYSEC-2026-656 | Medium | 1.0% | 01 Nov, 2019 | PyPI cinder PyPI keystone PyPI neutron PyPI python-keystoneclient |
TYPO3 Open Redirection vulnerability on the backend CVE-2010-3661, GHSA-j628-384g-rmgc | Medium | 0.9% | 01 Nov, 2019 | Packagist typo3/cms-backend |
TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend CVE-2010-3660, GHSA-cg45-qgcf-hf9x | Medium | 0.8% | 01 Nov, 2019 | Packagist typo3/cms-backend |