Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Improper Key Verification in ipns GHSA-j59f-6m4q-62h6 | High | Not scored | 30 May, 2019 | npm ipns |
Arbitrary File Overwrite in fstream CVE-2019-13173, GHSA-xf7w-r453-m56c | High | 2.4% | 30 May, 2019 | npm fstream |
Directory Traversal in ltt.js GHSA-6qh5-wx38-q92g | High | Not scored | 30 May, 2019 | npm ltt.js |
Server-Side Request Forgery in terriajs-server GHSA-p72p-rjr2-r439 | High | Not scored | 29 May, 2019 | npm terriajs-server |
Containous Traefik Exposes Password Hashes CVE-2019-12452, GHSA-r3fq-cmmw-cpmm, GO-2023-1919 | High | 2.5% | 29 May, 2019 | Go github.com/traefik/traefik |
Deserialization of untrusted data in Symfony CVE-2019-10912, GHSA-w2fr-65vp-mxw3 | High | 2.3% | 16 May, 2019 | Packagist symfony/cache Packagist symfony/phpunit-bridge Packagist symfony/symfony Packagist typo3/cms +1 more |
Improper authentication in Symfony CVE-2019-10911, GHSA-cchx-mfrc-fwqr | High | 1.2% | 16 May, 2019 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Microsoft GDI Remote Code Execution Vulnerability CVE-2019-0903 | HighExploited | 21.7% | 16 May, 2019 | |
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability CVE-2019-0863 | HighExploited | 5.2% | 16 May, 2019 | |
Incorrect Permission Assignment for Critical Resource in Singularity CVE-2019-11328, GHSA-557g-r22w-9wvx | High | 2.1% | 14 May, 2019 | Go github.com/sylabs/singularity |
Regular Expression Denial of Service in remarkable CVE-2019-12041, GHSA-q22g-8fr4-qpj4 | High | 1.3% | 13 May, 2019 | npm remarkable |
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG CVE-2019-11842, GHSA-gwf7-vfjf-wf6x, PYSEC-2019-185, PYSEC-2026-2620 | High | 1.8% | 09 May, 2019 | PyPI matrix-sydent PyPI matrix-synapse |
TYPO3 Image Processing susceptible to Code Execution CVE-2019-11832, GHSA-3w4h-r27h-4r2w | High | 3.9% | 09 May, 2019 | Packagist typo3/cms Packagist typo3/cms-core |
Unsafe deserialization in SmtpTransport in CakePHP CVE-2019-11458, GHSA-qhrx-hcm6-pmrw | High | 2.0% | 08 May, 2019 | Packagist cakephp/cakephp |
Denial of Service in axios CVE-2019-10742, GHSA-42xw-2xvc-qx8m | High | 6.1% | 07 May, 2019 | npm axios |
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2018-4063 | HighExploited | 27.3% | 06 May, 2019 | |
Improper Input Validation and Buffer Over-read in mqtt-packet CVE-2019-5432, GHSA-wv67-9jq7-8r69 | High | 1.8% | 06 May, 2019 | npm mqtt-packet |
Improper Input Validation and Excessive Iteration in Go Facebook Thrift CVE-2019-3564, GHSA-x4rg-4545-4w7w, GO-2021-0088 | High | 2.0% | 06 May, 2019 | Go github.com/facebook/fbthrift |
phpBB Denial of Service CVE-2019-9826, GHSA-6pgr-x867-h7jx | High | 2.0% | 02 May, 2019 | Packagist phpbb/phpbb |
Improper Input Validation in tar-fs CVE-2018-20835, GHSA-x2mc-8fgj-3wmr | High | 2.4% | 30 Apr, 2019 | npm tar-fs |
Arbitrary File Overwrite in tar CVE-2018-20834, GHSA-j44m-qm6p-hp7m | High | 3.1% | 30 Apr, 2019 | npm tar |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability CVE-2019-9621 | HighExploited | 81.0% | 30 Apr, 2019 | |
OmniAuth Ruby gem Cross-site Request Forgery in request phase CVE-2015-9284, GHSA-ww4x-rwq6-qpgf | High | 1.5% | 26 Apr, 2019 | RubyGems omniauth |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability CVE-2019-11539 | HighExploited | 98.5% | 26 Apr, 2019 | |
Flarum mishandles invalidation of user email tokens CVE-2019-11514, GHSA-g6w5-439m-jhwv | High | 1.3% | 25 Apr, 2019 | Packagist flarum/flarum |
Improper Input Validation in libseccomp-golang CVE-2017-18367, GHSA-58v3-j75h-xr49, GO-2020-0007 | High | 2.4% | 24 Apr, 2019 | Go github.com/seccomp/libseccomp-golang |
Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow CVE-2018-10055, GHSA-q492-f7gr-27rp, PYSEC-2019-204, PYSEC-2019-222, PYSEC-2019-229 | High | 0.5% | 24 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Input Validation in Google TensorFlow CVE-2018-7577, GHSA-qx2v-j445-g354, PYSEC-2019-207, PYSEC-2019-225, PYSEC-2019-232 | High | 0.5% | 24 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
NULL Pointer Dereference in Google TensorFlow CVE-2019-9635, GHSA-mfg7-x5m7-6p8w, PYSEC-2019-210, PYSEC-2019-228, PYSEC-2019-235 | High | 0.5% | 24 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TensorFlow leads to exploitation CVE-2018-7576, GHSA-jfq2-rj7f-9gvf, PYSEC-2019-206, PYSEC-2019-224, PYSEC-2019-231 | High | 0.5% | 23 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow CVE-2018-8825, GHSA-frxx-2m33-6wcr, PYSEC-2019-208, PYSEC-2019-226, PYSEC-2019-233 | High | 0.8% | 23 Apr, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Oracle BI Publisher Unauthorized Access Vulnerability CVE-2019-2616 | HighExploited | 92.2% | 23 Apr, 2019 | |
LXD vulnerable to Race Condition CVE-2015-1340, GHSA-8mpq-fmr3-6jxv, GO-2021-0071 | High | 0.9% | 22 Apr, 2019 | Go github.com/lxc/lxd |
Openstack nova qcow format could expose host filesystem information CVE-2011-3147, GHSA-hqfx-4x4w-vmwp, PYSEC-2026-690 | High | 0.7% | 22 Apr, 2019 | PyPI nova |
Improper Input Validation in python-dbusmock CVE-2015-1326, GHSA-74xw-82v7-hmrm, PYSEC-2019-155 | High | 1.8% | 22 Apr, 2019 | PyPI python-dbusmock |
Kubernetes did not effectively clear service account credentials CVE-2019-11243, GHSA-gc2p-g4fg-29vh, GO-2025-3645 | High | 1.7% | 22 Apr, 2019 | Go k8s.io/kubernetes |
Improper Certificate Validation in urllib3 CVE-2019-11324, GHSA-mh33-7rrq-662w, PYSEC-2019-133 | High | 2.9% | 18 Apr, 2019 | PyPI urllib3 |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability CVE-2019-3398 | HighExploited | 97.0% | 18 Apr, 2019 | |
Contao CSRF Token Bypass CVE-2019-10642, GHSA-hwmh-9jj9-8c9c | High | 0.5% | 17 Apr, 2019 | Packagist contao/contao Packagist contao/core-bundle |
Gitea Remote Code Execution CVE-2019-11229, GHSA-hpmr-prr2-cqc4, GO-2022-0846 | High | 55.0% | 15 Apr, 2019 | Go github.com/go-gitea/gitea |
Gitea Improper Input Validation CVE-2019-11228, GHSA-q47x-6mqq-4w92, GO-2022-0862 | High | 1.3% | 15 Apr, 2019 | Go github.com/go-gitea/gitea |
Subrion CMS vulnerable to CSRF in blog/delete CVE-2017-18366, GHSA-c939-g732-48r8 | High | 0.7% | 15 Apr, 2019 | Packagist intelliants/subrion |
SQL Injection in sequelize CVE-2019-11069, GHSA-2777-2vq8-c4v4 | High | 1.8% | 10 Apr, 2019 | npm sequelize |
Apache Airflow vulnerable to CSRF Attacks CVE-2019-0229, GHSA-w6j4-3gh2-9f5j, PYSEC-2019-215 | High | 1.6% | 10 Apr, 2019 | PyPI apache-airflow |
Rancher Project Members Have Continued Access to Namespaces After Being Removed From Them CVE-2019-6287, GHSA-6r7x-4q7g-h83j, GO-2024-2764 | High | 1.0% | 10 Apr, 2019 | Go github.com/rancher/rancher |
Access Control Bypass CVE-2018-20321, GHSA-9qq2-xhmc-h9qr, GO-2022-0644 | High | 1.8% | 10 Apr, 2019 | Go github.com/rancher/rancher |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0859 | HighExploited | 4.2% | 09 Apr, 2019 | |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability CVE-2019-0841 | HighExploited | 41.4% | 09 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0803 | HighExploited | 45.2% | 09 Apr, 2019 | |
Microsoft Internet Explorer Type Confusion Vulnerability CVE-2019-0752 | HighExploited | 81.7% | 09 Apr, 2019 |