Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0808 | HighExploited | 53.3% | 09 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0797 | HighExploited | 1.9% | 09 Apr, 2019 | |
Apache HTTP Server Privilege Escalation Vulnerability CVE-2019-0211 | HighExploited | 65.0% | 08 Apr, 2019 | |
Reolink Multiple IP Cameras OS Command Injection Vulnerability CVE-2019-11001 | HighExploited | 37.5% | 08 Apr, 2019 | |
Jinja2 sandbox escape vulnerability CVE-2016-10745, GHSA-hj2j-77xm-mc5v, PYSEC-2019-220 | High | 3.5% | 08 Apr, 2019 | PyPI Jinja2 PyPI jinja2 |
Jinja2 sandbox escape via string formatting CVE-2019-10906, GHSA-462w-v97r-4m45, PYSEC-2019-217 | High | 3.6% | 07 Apr, 2019 | PyPI Jinja2 PyPI jinja2 |
Parsedown Class-Name Injection CVE-2019-10905, GHSA-62m3-fc7f-jpp8 | High | 1.5% | 06 Apr, 2019 | Packagist erusev/parsedown |
Bolt Cross Site Request Forgery (CSRF) CVE-2019-10874, GHSA-3g6c-88pf-m46f | High | 4.5% | 05 Apr, 2019 | Packagist bolt/bolt |
OpenStack Neutron overlapping security group rules prevents compute node network configuration CVE-2019-10876, GHSA-jr9m-v5qh-mh2j, PYSEC-2019-189 | High | 1.7% | 05 Apr, 2019 | PyPI neutron |
Tryton Improper Access Control CVE-2019-10868, GHSA-f6f2-pwrj-64h3, PYSEC-2019-127 | High | 1.3% | 05 Apr, 2019 | PyPI trytond |
Pimcore Unserialize Remote Code Execution CVE-2019-10867, GHSA-7hqr-j26m-gmwp, SNYK-PHP-PIMCOREPIMCORE-173998 | High | 68.9% | 04 Apr, 2019 | Packagist pimcore/pimcore |
Apple Multiple Products Memory Corruption Vulnerability CVE-2018-4344 | HighExploited | 2.4% | 03 Apr, 2019 | |
Path Traversal in http-live-simulator CVE-2019-5423, GHSA-2hhw-p8mg-jrm6 | High | 2.8% | 03 Apr, 2019 | npm http-live-simulator |
Cross-Site Scripting in buttle CVE-2019-5422, GHSA-gm29-35c7-8cfw | High | 1.2% | 03 Apr, 2019 | npm buttle |
CoAPthon DoS due to Exceptions CVE-2018-12680, GHSA-5xc6-fpc7-4qvg, PYSEC-2019-165 | High | 1.5% | 02 Apr, 2019 | PyPI CoAPthon PyPI coapthon |
CoAPthon3 vulnerable to Deserialization of Untrusted Data CVE-2018-12679, GHSA-c6fm-rgw4-8q73, PYSEC-2019-166 | High | 1.5% | 02 Apr, 2019 | PyPI CoAPthon3 PyPI coapthon3 |
Pivotal Concourse SQL Injection Vulnerability CVE-2019-3792, GHSA-4fqx-74rv-638w | High | 1.1% | 01 Apr, 2019 | Go github.com/concourse/concourse |
LibreNMS SQL Injection CVE-2018-20678, GHSA-4fwh-r866-pvh9 | High | 1.4% | 28 Mar, 2019 | Packagist librenms/librenms |
Moodle Users could elevate their role when accessing the LTI tool on a provider site CVE-2019-3849, GHSA-5wg9-5w3f-hxmh | High | 1.0% | 26 Mar, 2019 | Packagist moodle/moodle |
Openstack Octavia allows Insertion of Sensitive Information into Log File CVE-2018-16856, GHSA-qcj3-h27m-mp9x, PYSEC-2019-193 | High | 0.9% | 26 Mar, 2019 | PyPI octavia |
Ceilometer Prints Sensitive Configuration Data to Log CVE-2019-3830, GHSA-2cvf-r9jm-4qm9, PYSEC-2019-78 | High | 0.4% | 26 Mar, 2019 | PyPI ceilometer |
HashiCorp Consul vulnerable to Origin Validation Error CVE-2019-9764, GHSA-q7fx-wm2p-qfj8, GO-2023-1853 | High | 0.6% | 26 Mar, 2019 | Go github.com/hashicorp/consul |
Moodle SSRF Vulnerability CVE-2019-6970, GHSA-vjxx-54vw-q59f | High | 1.4% | 21 Mar, 2019 | Packagist moodle/moodle |
Directory Traversal in serve CVE-2019-5417, GHSA-xg75-3277-gvvj | High | 2.3% | 21 Mar, 2019 | npm serve |
Path Traversal in localhost-now CVE-2019-5416, GHSA-qwj8-p662-3m7x | High | 2.2% | 21 Mar, 2019 | npm localhost-now |
Path Traversal in serve CVE-2019-5415, GHSA-v588-qcp3-jv46 | High | 1.6% | 21 Mar, 2019 | npm serve |
Command Injection in kill-port CVE-2019-5414, GHSA-pmv6-gf98-p3r5 | High | 1.9% | 21 Mar, 2019 | npm kill-port |
Matrix Synapse Predictable Secret Key CVE-2019-5885, GHSA-jrqm-v8cv-53ww, PYSEC-2019-187 | High | 2.5% | 21 Mar, 2019 | PyPI matrix-synapse |
Duplicate Advisory: python-gnupg allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended CVE-2019-6690, GHSA-2fch-jvg5-crf6, GHSA-qh62-ch95-63wh, PYSEC-2019-115 | High | 8.6% | 21 Mar, 2019 | PyPI python-gnupg |
Improper Certificate Validation in chloride CVE-2018-6517, GHSA-573x-jhqh-jg36 | High | 0.9% | 21 Mar, 2019 | RubyGems chloride |
Regular Expression Denial of Service in highcharts CVE-2018-20801, GHSA-xmc8-cjfr-phx3 | High | 3.2% | 14 Mar, 2019 | npm highcharts |
Path Traversal in Action View CVE-2019-5418, GHSA-86g5-2wh3-gc9j | HighExploited | 98.5% | 13 Mar, 2019 | RubyGems actionview |
Denial of Service Vulnerability in Action View CVE-2019-5419, GHSA-m63j-wh5w-c252 | High | 8.4% | 13 Mar, 2019 | RubyGems actionview |
OpenStack Neutron's unsupported dport option prevents applying security groups CVE-2019-9735, GHSA-9773-3fqg-8w25, PYSEC-2019-190 | High | 3.7% | 13 Mar, 2019 | PyPI neutron |
Webargs mishandles concurrent JSON parsing CVE-2019-9710, GHSA-8554-jxcw-454q, PYSEC-2019-139 | High | 1.1% | 12 Mar, 2019 | PyPI webargs |
DLL injection on Windows in runtime and syscall CVE-2019-9634, GO-2022-0220 | High | 3.1% | 08 Mar, 2019 | Go stdlib |
Bolt Unrestricted Upload of File with Dangerous Type CVE-2019-9185, GHSA-gmg5-f2gm-p3h7 | High | 2.7% | 07 Mar, 2019 | Packagist bolt/bolt |
miekg/dns parsing error leads to nil pointer dereference and DoS CVE-2018-17419, GHSA-9jcx-pr2f-qvq5, GO-2020-0028 | High | 1.8% | 07 Mar, 2019 | Go github.com/miekg/dns |
HashiCorp Consul Access Restriction Bypass CVE-2019-8336, GHSA-fhm8-cxcv-pwvc, GO-2023-1945 | High | 1.3% | 05 Mar, 2019 | Go github.com/hashicorp/consul |
Apple iOS and macOS Group Facetime Vulnerability CVE-2019-6223 | HighExploited | 2.6% | 05 Mar, 2019 | |
ThinkPHP Remote Code Execution Vulnerability CVE-2019-9082 | HighExploited | 97.4% | 24 Feb, 2019 | |
Drupal Core Remote Code Execution Vulnerability CVE-2019-6340, DRUPAL-CORE-2019-003, GHSA-3gx6-h57h-rm27 | HighExploited | 92.0% | 20 Feb, 2019 | Packagist drupal/core Packagist drupal/drupal |
Path Traversal in total.js CVE-2019-8903, GHSA-3q32-j57w-q4w7 | High | 72.1% | 18 Feb, 2019 | npm total.js |
Fileutils Command Injection vulnerability CVE-2013-2516, GHSA-9x97-x2p9-hvpf | High | 3.3% | 15 Feb, 2019 | RubyGems fileutils |
Uncontrolled Memory Consumption in Django CVE-2019-6975, GHSA-wh4h-v3f2-r2pp, PYSEC-2019-18 | High | 5.1% | 11 Feb, 2019 | PyPI Django PyPI django |
Boolector use after free CVE-2019-7560, GHSA-g58x-799h-v9h6, PYSEC-2019-252 | High | 1.0% | 07 Feb, 2019 | PyPI pyboolector |
WinRAR Absolute Path Traversal Vulnerability CVE-2018-20250 | HighExploited | 96.0% | 05 Feb, 2019 | |
mPDF Unsafe Deserialization CVE-2019-1000005, GHSA-3cwc-m7c2-qr86 | High | 2.1% | 04 Feb, 2019 | Packagist mpdf/mpdf |
Depth counting error in guard() leading to multiple potential security issues in aioxmpp CVE-2019-1000007, GHSA-6m9g-jr8c-cqw3, PYSEC-2019-1 | High | 1.2% | 04 Feb, 2019 | PyPI aioxmpp |
slixmpp Incorrect Access Control CVE-2019-1000021, GHSA-4g62-mfwx-4q48, PYSEC-2019-121 | High | 2.3% | 04 Feb, 2019 | PyPI slixmpp |