Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value CVE-2013-5002, GHSA-p632-5w74-x8xx | Low | 1.0% | 31 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
Typo3 Function Menu API XSS Vulnerability CVE-2012-6148, GHSA-rgf6-9q7g-55qg | Low | 1.2% | 01 Jul, 2013 | Packagist typo3/cms |
Typo3 Backend API XSS Vulnerability CVE-2012-6147, GHSA-qmmw-ch2q-j6xx | Low | 1.8% | 01 Jul, 2013 | Packagist typo3/cms |
Typo3 Backend History Module Vulnerable to XSS CVE-2012-6145, GHSA-w563-rq37-cvq5 | Low | 1.2% | 01 Jul, 2013 | Packagist typo3/cms |
OpenStack Keystone Sensitive information disclosure via log files CVE-2013-2006, GHSA-rxrm-xvp4-jqvh, PYSEC-2013-40 | Low | 0.6% | 21 May, 2013 | PyPI keystone |
Oracle JRE Unspecified Vulnerability CVE-2013-2423 | LowExploited | 85.2% | 17 Apr, 2013 | |
Moodle's login_as feature leaks information from external repositories CVE-2013-1835, GHSA-cc94-hwj3-rf65 | Low | 1.7% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module CVE-2013-1833, GHSA-89f3-74m6-g27g | Low | 1.5% | 25 Mar, 2013 | Packagist moodle/moodle |
OpenStack Glance is vulnerable to Exposure of Sensitive Information CVE-2013-1840, GHSA-c8w9-83vg-r8vv, PYSEC-2013-46 | Low | 1.4% | 22 Mar, 2013 | PyPI glance |
Oracle JRE Sandbox Bypass Vulnerability CVE-2013-0431 | LowExploited | 90.1% | 31 Jan, 2013 | |
phpMyAdmin multiple cross-site scripting vulnerabilities CVE-2012-5339, GHSA-rfpg-2fp8-2fph | Low | 1.4% | 25 Oct, 2012 | Packagist phpmyadmin/phpmyadmin |
Typo3 Backend Configuration XSS Vulnerability CVE-2012-3529, GHSA-7gg8-3r6j-5g55 | Low | 0.8% | 05 Sep, 2012 | Packagist typo3/cms |
Typo3 Backend XSS Vulnerability CVE-2012-3528, GHSA-7w6c-5pr4-7qvp | Low | 2.0% | 05 Sep, 2012 | Packagist typo3/cms |
Typo3 Backend XSS Vulnerabilities CVE-2012-1606, GHSA-7wwr-p84q-qr3q | Low | 1.6% | 04 Sep, 2012 | Packagist typo3/cms |
phpMyAdmin Multiple XSS Vulnerabilities CVE-2012-4579, GHSA-q7v2-w38r-pv7v | Low | 0.8% | 21 Aug, 2012 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page CVE-2012-4345, GHSA-r3pq-mp8v-cp33 | Low | 1.4% | 21 Aug, 2012 | Packagist phpmyadmin/phpmyadmin |
OpenStack Nova Scheduler denial of service through scheduler_hints CVE-2012-3371, GHSA-xxgm-qpj5-4886, PYSEC-2012-40 | Low | 1.9% | 17 Jul, 2012 | PyPI Nova PyPI nova |
Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules CVE-2012-2101, GHSA-hq3f-9gf7-73r8, PYSEC-2012-36 | Low | 1.5% | 07 Jun, 2012 | PyPI nova |
TYPO3 Cross-Site Scripting vulnerability in the Install Tool CVE-2010-5100, GHSA-9hh2-8cw6-hfv7 | Low | 1.1% | 21 May, 2012 | Packagist typo3/cms-install |
TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object CVE-2010-5098, GHSA-3mqf-fwc6-vwqw | Low | 1.8% | 21 May, 2012 | Packagist typo3/cms-frontend |
TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality CVE-2010-5097, GHSA-9hw3-4gvp-8mv5 | Low | 1.6% | 21 May, 2012 | Packagist typo3/cms-frontend |
GoLismero symlink attack CVE-2012-0054, GHSA-vwxc-3cfr-37jq, PYSEC-2012-31 | Low | 0.3% | 19 Mar, 2012 | PyPI golismero |
Symphony CMS vulnerable to Cross-site Scripting CVE-2011-4340, GHSA-wvq5-72qp-grjw | Low | 1.8% | 12 Feb, 2012 | Packagist symphonycms/symphony-2 |
Loggerhead XSS via filename CVE-2011-0728, GHSA-qjmg-77xh-7mjw, PYSEC-2026-840 | Low | 1.8% | 29 Mar, 2011 | PyPI loggerhead |
Drupal cross-site scripting vulnerability via actions feature and trigger module CVE-2010-3094, GHSA-pjmx-4gc6-hwv8 | Low | 1.4% | 21 Sep, 2010 | Packagist drupal/drupal |
MantisBT Cross-site Scripting vulnerability CVE-2010-2574, GHSA-74x7-mfvg-h2wf | Low | 1.8% | 10 Aug, 2010 | Packagist mantisbt/mantisbt |
Commerce extension for TYPO3 vulnerable to Cross-site Scripting CVE-2009-4963, GHSA-rmc9-5546-5rrf | Low | 0.8% | 28 Jul, 2010 | Packagist commerceteam/commerce |
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS) CVE-2009-4159, GHSA-7x6f-jvmg-6fgp | Low | 0.8% | 02 Dec, 2009 | Packagist directmailteam/direct-mail |
TYPO3 Backend vulnerable to Cross-site Scripting CVE-2009-3629, GHSA-g857-p997-wx7w | Low | 1.5% | 02 Nov, 2009 | Packagist typo3/cms-backend |
Zope allows local users to read arbitrary files CVE-2006-3458, GHSA-jcjp-qqpq-pc54, PYSEC-2006-7 | Low | 0.4% | 07 Jul, 2006 | PyPI Zope2 PyPI zope2 |