Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-site Scripting in LimeSurvey CVE-2019-16172, GHSA-fr47-r224-c36m | Medium | 4.6% | 09 Sep, 2019 | Packagist limesurvey/limesurvey |
Sensitive Data Exposure in seneca CVE-2019-5483, GHSA-2xwv-3cc9-fp7c | Medium | 1.2% | 09 Sep, 2019 | npm seneca |
Gophish XSS Vulnerability CVE-2019-16146, GHSA-9h9f-9q8g-6764, GO-2023-1936 | Medium | 0.7% | 09 Sep, 2019 | Go github.com/gophish/gophish |
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS CVE-2019-10667, GHSA-f4hh-xxqh-wgpq | Medium | 1.2% | 09 Sep, 2019 | Packagist librenms/librenms |
Cross-site Scripting in YII2-CMS CVE-2019-16130, GHSA-rfh8-25h9-mhgf | Medium | 0.9% | 09 Sep, 2019 | Packagist yii2mod/yii2-cms |
Cross-site Scripting in Grav CVE-2019-16126, GHSA-6268-v434-45m5 | Medium | 1.5% | 09 Sep, 2019 | Packagist getgrav/grav |
Authentication Bypass in Devise CVE-2019-16109, GHSA-fcjw-8rhj-gwwc | Medium | 1.8% | 08 Sep, 2019 | RubyGems devise |
Missing Authorization in Harbor CVE-2019-16097, GHSA-9wvh-ff5f-xjpj, GO-2022-0818 | Medium | 22.4% | 08 Sep, 2019 | Go github.com/goharbor/harbor |
XSS vulnerability in Author URL of themes in Mautic CVE-2018-11198, GHSA-xcf7-cj8q-pcjm | Medium | 0.9% | 06 Sep, 2019 | Packagist mautic/core |
Divide By Zero in OpenCV. CVE-2019-15939, GHSA-hxfw-jm98-v4mq, PYSEC-2026-2799, PYSEC-2026-2822, PYSEC-2026-2838, PYSEC-2026-722 | Medium | 2.5% | 05 Sep, 2019 | PyPI opencv-contrib-python PyPI opencv-contrib-python-headless PyPI opencv-python PyPI opencv-python-headless |
Cosenary Instagram-PHP-API contains reflected XSS vulnerability CVE-2019-14470, GHSA-gcv6-2v9c-rj48 | Medium | 83.0% | 04 Sep, 2019 | Packagist cosenary/instagram |
Path Traversal in statichttpserver CVE-2019-5480, GHSA-2j5x-56p6-hj6x | Medium | 1.6% | 03 Sep, 2019 | npm statichttpserver |
Cross-Site Scripting in webtorrent CVE-2019-15782, GHSA-gjh4-fcv3-whpq | Medium | 1.5% | 29 Aug, 2019 | npm webtorrent |
Kubernetes client-go library logs may disclose credentials to unauthorized users CVE-2019-11250, GHSA-jmrx-5g74-6v2f, GO-2021-0065 | Medium | 1.8% | 29 Aug, 2019 | Go k8s.io/client-go Go k8s.io/kubernetes |
Status Board vulnerable to Cross-Site Scripting before v1.1.82 CVE-2019-15479, GHSA-8864-rhmw-5m6f | Medium | 0.8% | 26 Aug, 2019 | npm status-board |
Cross-Site Scripting in cyberchef CVE-2019-15532, GHSA-jp6r-xcjj-5h7r | Medium | 1.3% | 26 Aug, 2019 | npm cyberchef |
laracom Cross-site Scripting CVE-2019-15489, GHSA-qc2p-6qrf-25j2 | Medium | 0.9% | 26 Aug, 2019 | Packagist jsdecena/laracom |
Cross-Site Scripting in status-board CVE-2019-15478, GHSA-6m4r-cgm3-6q7q | Medium | 0.8% | 26 Aug, 2019 | npm status-board |
Cross-site Scripting in Bolt CVE-2019-15485, GHSA-cj8p-53v9-2c26 | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Bolt Cross-site Scripting (XSS) via an image's alt or title field CVE-2019-15484, GHSA-fp8m-xw3f-6h7x | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log CVE-2019-15483, GHSA-ph84-vg7q-fqq8 | Medium | 0.9% | 23 Aug, 2019 | Packagist bolt/bolt |
Cross-Site Scripting in selectize-plugin-a11y CVE-2019-15482, GHSA-8cpw-73f2-w58m | Medium | 0.9% | 23 Aug, 2019 | npm selectize-plugin-a11y |
Kimai v2 is vulnerable to Cross-Site Scripting (XSS) CVE-2019-15481, GHSA-7v44-75jf-22gj | Medium | 0.9% | 23 Aug, 2019 | Packagist kevinpapst/kimai2 |
Cross-site Scripting in django-js-reverse CVE-2019-15486, GHSA-vx6v-2rg6-865h, PYSEC-2019-19 | Medium | 1.0% | 23 Aug, 2019 | PyPI django-js-reverse |
Denial of Service in rgb2hex GHSA-65p8-3hm4-h9h8 | Medium | Not scored | 23 Aug, 2019 | npm rgb2hex |
Invalid Curve Attack in openpgp CVE-2019-9155, GHSA-77jf-fjjf-xcww | Medium | 1.7% | 22 Aug, 2019 | npm openpgp |
Cross-site scripting in fat_free_crm CVE-2018-20975, GHSA-4p8f-mmfj-r45g | Medium | 1.2% | 20 Aug, 2019 | RubyGems fat_free_crm |
cnlh nps vulnerable to file overwrite by local user CVE-2019-15119, GHSA-2vp2-8m5j-4rjx, GO-2025-3625 | Medium | 1.0% | 16 Aug, 2019 | Go ehang.io/nps Go github.com/cnlh/nps |
MySQL for Node.js Unsafe Options CVE-2019-14939, GHSA-f982-mxwc-3mrx | Medium | 0.4% | 12 Aug, 2019 | npm mysql |
Cross-site scripting in recommender-xblock CVE-2018-20858, GHSA-3j5x-7ccf-ppgm, PYSEC-2019-219 | Medium | 0.9% | 09 Aug, 2019 | PyPI recommender-xblock |
Backpack\CRUD for Laravel XSS Vulnerability CVE-2018-20962, GHSA-6gfm-gpr3-8wh9 | Medium | 1.3% | 08 Aug, 2019 | Packagist backpack/crud |
TeamPass Cross-site Scripting (XSS) CVE-2019-12950, GHSA-m3pp-jcpm-2vr9 | Medium | 0.8% | 06 Aug, 2019 | Packagist nilsteampassnet/teampass |
Cross-site Scripting in pandao CVE-2019-14653, GHSA-x65c-4fgj-5fc3 | Medium | 0.8% | 03 Aug, 2019 | npm editor.md |
Magento 2 Community Edition CSRF vulnerability CVE-2019-7947, GHSA-w392-68rg-pgg4 | Medium | 0.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7945, GHSA-c45w-p293-7cv6 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7944, GHSA-3mxq-v9rw-m6x9 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7940, GHSA-cgm7-gjhw-rrf6 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Reflected cross-site scripting on customer cart page CVE-2019-7939, GHSA-r728-jwf5-f5r5 | Medium | 1.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7938, GHSA-mgfr-44wv-hqv6 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition Packagist magento/magento1ce Packagist magento/magento1ee Packagist magento/product-community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7937, GHSA-94fc-rxhv-vvf8 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7936, GHSA-mf6x-7766-5cg8 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7935, GHSA-5c4g-p858-498x | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7934, GHSA-77mv-p94f-qcq4 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Information Disclosure CVE-2019-7929, GHSA-h522-94xp-2xr6 | Medium | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7927, GHSA-r68f-45jg-64m6 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7926, GHSA-525g-rvh4-v5c9 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Insecure Direct Object Reference (IDOR) vulnerability CVE-2019-7925, GHSA-7g5j-q8qj-8984 | Medium | 0.7% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7921, GHSA-gg96-8w9x-7rx9 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7909, GHSA-pw2f-m22m-p75c | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Cross-site Scripting in the admin panel CVE-2019-7908, GHSA-mgfv-4whf-c574 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |