Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Pimcore XSS Vulnerability CVE-2019-18656, GHSA-65p8-5423-fw3x | Medium | 0.7% | 31 Oct, 2019 | Packagist pimcore/pimcore |
Cross-site scripting in Jupyter Notebook CVE-2018-21030, GHSA-jqwc-jm56-wcwj, PYSEC-2019-157 | Medium | 1.4% | 31 Oct, 2019 | PyPI notebook |
Apache Airflow vulnerable to XSS and local file disclosure CVE-2019-12417, GHSA-q3p4-gw7r-wqjc, PYSEC-2019-216, PYSEC-2026-617 | Medium | 1.3% | 30 Oct, 2019 | PyPI airflow PyPI apache-airflow |
Path Traversal in MHolt Archiver CVE-2019-10743, GHSA-h74j-692g-48mq | Medium | 6.4% | 29 Oct, 2019 | Go github.com/mholt/archiver |
Mercurial Improper Certificate Validation vulnerability CVE-2010-4237, GHSA-7gf7-7wx4-mxmw, PYSEC-2026-665 | Medium | 0.8% | 29 Oct, 2019 | PyPI mercurial |
Podman Symlink Vulnerability CVE-2019-18466, GHSA-r34v-gqmw-qvgj, GO-2023-1942 | Medium | 1.4% | 28 Oct, 2019 | Go github.com/containers/libpod Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 +1 more |
hexo-admin plugin for Node.js XSS Vulnerability CVE-2019-17606, GHSA-g784-q3p3-26rm | Medium | 1.0% | 23 Oct, 2019 | npm hexo-admin |
Loofah Allows Cross-site Scripting CVE-2019-15587, GHSA-c3gv-9cxf-6f57 | Medium | 1.6% | 22 Oct, 2019 | RubyGems loofah |
direct_mail for Typo3 sensitive data exposure CVE-2019-16698, GHSA-j2w4-45qm-r674 | Medium | 0.7% | 16 Oct, 2019 | Packagist directmailteam/direct-mail |
Dolibarr Cross-site Scripting vulnerability CVE-2019-17578, GHSA-9p7q-v9gp-frq4 | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting via outgoing email setup feature CVE-2019-17577, GHSA-r4gf-ggp5-25g5 | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting via outgoing email setup feature CVE-2019-17576, GHSA-rr5g-rc28-wxwj | Medium | 0.8% | 16 Oct, 2019 | Packagist dolibarr/dolibarr |
Haml vulnerable to cross-site scripting CVE-2017-1002201, GHSA-r53w-g4xm-3gc6, SNYK-RUBY-HAML-20362 | Medium | 1.5% | 15 Oct, 2019 | RubyGems haml |
Dolibarr ERP and CRM HTML Injection CVE-2019-17223, GHSA-3264-65pg-5xm4 | Medium | 1.1% | 15 Oct, 2019 | Packagist dolibarr/dolibarr |
Ansible leaks sensitive information to logs when told not to CVE-2019-14858, GHSA-h653-95qw-h2mp, PYSEC-2019-171 | Medium | 0.4% | 14 Oct, 2019 | PyPI ansible |
Craft CMS XSS Vulnerability CVE-2019-17496, GHSA-f3xr-q258-h7m9 | Medium | 0.8% | 11 Oct, 2019 | Packagist craftcms/cms |
z-song laravel-admin XSS via the Slug or Name on the Roles screen CVE-2019-17433, GHSA-fcmh-7492-g4q9 | Medium | 0.6% | 10 Oct, 2019 | Packagist encore/laravel-admin |
Cross-site Scripting in node-red-dashboard CVE-2019-10756, GHSA-xg59-m7wx-853q, SNYK-JS-NODEREDDASHBOARD-471939 | Medium | 0.6% | 08 Oct, 2019 | npm node-red-dashboard |
Cross-site Scripting in Bootstrap-3-Typeahead CVE-2019-10215, GHSA-m2hm-hrr2-6p2q | Medium | 1.5% | 08 Oct, 2019 | Packagist bassjobsen/bootstrap-3-typeahead npm bootstrap-3-typeahead |
Centreon Sensitive Data Exposure CVE-2019-17106, GHSA-rx4j-x3fh-9qwg | Medium | 1.1% | 08 Oct, 2019 | Packagist centreon/centreon |
TeamPass Stored Cross-site Scripting CVE-2019-17205, GHSA-v969-5v7f-pmg2 | Medium | 1.0% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
TeamPass Stored Cross-site Scripting CVE-2019-17204, GHSA-qx37-225j-qr89 | Medium | 0.6% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
TeamPass Stored Cross-site Scripting CVE-2019-17203, GHSA-pqx8-q35p-pgcv | Medium | 0.6% | 05 Oct, 2019 | Packagist nilsteampassnet/teampass |
wolfCrypt leaks cryptographic information via timing side channel CVE-2019-13628, GHSA-q95h-vc86-hv77, PYSEC-2026-1066 | Medium | 0.4% | 03 Oct, 2019 | PyPI wolfcrypt |
Dolibarr stored Cross-site Scripting in an Email Template section CVE-2019-16688, GHSA-9h46-g4c9-7976 | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting in a User Profile in a Signature section CVE-2019-16687, GHSA-m9q9-4m25-23gc | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr Cross-site Scripting in a User Note section CVE-2019-16686, GHSA-m44p-cfwj-wwr6 | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
Dolibarr stored Cross-site Scripting vulnerability CVE-2019-16685, GHSA-fvxr-767j-f28v | Medium | 0.8% | 27 Sep, 2019 | Packagist dolibarr/dolibarr |
phpBB Cross-Site Request Forgery (CSRF) CVE-2019-13376, GHSA-6mh2-98gr-wv76 | Medium | 0.7% | 27 Sep, 2019 | Packagist phpbb/phpbb |
SilverStripe Versioned Files module Unpublished files are exposed publicly CVE-2019-16409, GHSA-xm6j-x342-gwq9 | Medium | 1.2% | 26 Sep, 2019 | Packagist silverstripe/framework Packagist symbiote/silverstripe-versionedfiles |
TeamPass Cross-site Scripting (XSS) vulnerability CVE-2019-16904, GHSA-rpmr-fwh5-24fm | Medium | 0.7% | 26 Sep, 2019 | Packagist nilsteampassnet/teampass |
Broken access control on files CVE-2019-14273, GHSA-43jj-2rwc-2m3f | Medium | 1.1% | 26 Sep, 2019 | Packagist silverstripe/framework |
SilverStripe asset-admin Cross-site Scripting (XSS) CVE-2019-14272, GHSA-jgw2-f5mx-rg7h | Medium | 0.7% | 26 Sep, 2019 | Packagist silverstripe/framework |
MediaWiki information disclosure CVE-2019-16738, GHSA-7hwr-f745-5rwq | Medium | 1.8% | 26 Sep, 2019 | Packagist mediawiki/core |
Cross-Site Scripting in @novnc/novnc CVE-2017-18635, GHSA-49rv-g7w5-m8xx | Medium | 4.8% | 25 Sep, 2019 | npm @novnc/novnc |
Rubyzip denial of service CVE-2019-16892, GHSA-5m2v-hc64-56h6 | Medium | 1.6% | 25 Sep, 2019 | RubyGems rubyzip |
Lack of access control on upoaded files CVE-2019-12245, GHSA-jvx5-rm6q-gx7p | Medium | 1.4% | 25 Sep, 2019 | Packagist silverstripe/assets Packagist silverstripe/framework |
Silverstripe Flash Clipboard Reflected XSS CVE-2019-12205, GHSA-rfvw-5848-gxc5 | Medium | 0.9% | 25 Sep, 2019 | Packagist silverstripe/admin Packagist silverstripe/framework |
Session fixation in change password form CVE-2019-12203, GHSA-w7r7-r8r9-vrg2 | Medium | 0.4% | 25 Sep, 2019 | Packagist silverstripe/framework |
Joomla! XSS in Default Templates CVE-2019-16725, GHSA-v84j-vh7x-g7j6 | Medium | 0.7% | 24 Sep, 2019 | Packagist joomla/joomla-cms |
Devise Token Auth vulnerable to Cross-site Scripting CVE-2019-16751, GHSA-mvqr-r76c-wm5f | Medium | 0.9% | 24 Sep, 2019 | RubyGems devise_token_auth |
Cross-Site Scripting in dompurify CVE-2019-16728, GHSA-chqj-j4fh-rw7m | Medium | 1.5% | 24 Sep, 2019 | npm dompurify |
Pagekit User enumeration CVE-2019-16669, GHSA-jh2j-7248-9p3c | Medium | 1.1% | 21 Sep, 2019 | Packagist pagekit/pagekit |
XSS vulnerability in company name field in Mautic CVE-2018-11200, GHSA-9hx7-rg7w-xm79 | Medium | 0.8% | 20 Sep, 2019 | Packagist mautic/core |
Beego has a file creation race condition CVE-2019-16354, CVE-2019-16355, GHSA-f6px-w8rh-7r89, GHSA-hf4p-4j9r-3cvx, GO-2021-0084 | Medium | 0.4% | 16 Sep, 2019 | Go github.com/astaxie/beego Go github.com/beego/beego |
Cross-site scripting in Dolibarr CVE-2019-16197, GHSA-m553-9wmx-533h | Medium | 3.0% | 16 Sep, 2019 | Packagist dolibarr/dolibarr |
phpMyAdmin Cross-Site Request Forgery (CSRF) CVE-2019-12922, GHSA-4c9q-64gq-xhx4 | Medium | 10.7% | 13 Sep, 2019 | Packagist phpmyadmin/phpmyadmin |
Out-of-bounds Read in OpenCV CVE-2019-16249, GHSA-x3rm-644h-67m8, PYSEC-2026-2803, PYSEC-2026-2833, PYSEC-2026-2842, PYSEC-2026-726 | Medium | 1.7% | 11 Sep, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Cross-site scripting in padrino-contrib CVE-2019-16145, GHSA-rwpr-83g3-96g7 | Medium | 0.8% | 09 Sep, 2019 | RubyGems padrino-contrib |
Cross-site Scripting in LimeSurvey CVE-2019-16173, GHSA-r5f2-4wf4-cv66 | Medium | 3.7% | 09 Sep, 2019 | Packagist limesurvey/limesurvey |