Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Path Traversal in simplehttpserver CVE-2018-16493, GHSA-45j8-pm75-5v8x | High | 1.8% | 01 Feb, 2019 | npm static-resource-server |
Prototype Pollution in mpath CVE-2018-16490, GHSA-h466-j336-74wx | High | 1.1% | 01 Feb, 2019 | npm mpath |
Prototype Pollution in lodash CVE-2018-16487, GHSA-4xc9-xhrj-v574 | High | 1.5% | 01 Feb, 2019 | RubyGems lodash-rails npm lodash |
Authentication Bypass by Spoofing in express-cart CVE-2018-16483, GHSA-wj36-v8j4-pc7c | High | 1.2% | 01 Feb, 2019 | npm express-cart |
mcstatic directory traversal vulnerability CVE-2018-16482, GHSA-cxmj-qjv6-vx9p | High | 1.8% | 01 Feb, 2019 | npm mcstatic |
Path Traversal in http-live-simulator CVE-2018-16479, GHSA-7c9w-qmrq-ff8r | High | 1.7% | 01 Feb, 2019 | npm http-live-simulator |
Pylons Colander Denial of Service vulnerability CVE-2017-18361, GHSA-rv95-4wxj-6fqq, PYSEC-2019-167 | High | 2.1% | 01 Feb, 2019 | PyPI colander |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability CVE-2019-1653 | HighExploited | 99.9% | 24 Jan, 2019 | |
Cisco Small Business Routers Improper Input Validation Vulnerability CVE-2019-1652 | HighExploited | 95.9% | 24 Jan, 2019 | |
Denial of service affecting P-521 and P-384 curves in crypto/elliptic CVE-2019-6486, GO-2022-0217 | High | 4.5% | 24 Jan, 2019 | Go stdlib |
Improper Input Validation in Apache Airflow resulting in Remote Code Execution CVE-2017-15720, GHSA-8fg4-j562-mjrc, PYSEC-2019-147 | High | 2.5% | 23 Jan, 2019 | PyPI apache-airflow |
Cross-Site Request Forgery (CSRF) in Apache Airflow CVE-2017-17835, GHSA-68wv-rjrm-576p, PYSEC-2019-148 | High | 2.0% | 23 Jan, 2019 | PyPI apache-airflow |
Improper Certificate Validation in Apache Airflow CVE-2018-20245, GHSA-77rc-x84q-pv4f, PYSEC-2019-143 | High | 1.0% | 23 Jan, 2019 | PyPI apache-airflow |
Adobe Flash Player Use-After-Free Vulnerability CVE-2018-15982 | HighExploited | 89.6% | 18 Jan, 2019 | |
Improper Access Control in MySQL Connector Python CVE-2019-2435, GHSA-v5rq-w2xm-7g5f, PYSEC-2026-683 | High | 2.5% | 16 Jan, 2019 | PyPI mysql-connector-python |
Drupal core third-party PEAR Archive_Tar library is vulnerable to Deserialization of Untrusted Data CVE-2019-6338, DRUPAL-CORE-2019-001, GHSA-6rmq-x2hv-vxpp | High | 2.1% | 16 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
Drupal REST API can bypass comment approval CVE-2017-6924, GHSA-p8g6-5mg7-9r5q | High | 2.1% | 15 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |
PrestaShop PHP Object Injection CVE-2018-20717, GHSA-xx67-2j3v-h76p | High | 2.7% | 15 Jan, 2019 | Packagist prestashop/prestashop |
Shopware SQL Injection CVE-2018-20713, GHSA-42gv-77f4-r3j9 | High | 1.1% | 15 Jan, 2019 | Packagist shopware/shopware |
go.etcd.io/etcd Authentication Bypass CVE-2018-16886, GHSA-h6xx-pmxh-3wgp, GO-2021-0077 | High | 4.1% | 14 Jan, 2019 | Go go.etcd.io/etcd Go go.etcd.io/etcd/v3 |
elFinder Server Side Request Forgery (SSRF) CVE-2019-6257, GHSA-3qhm-qfj3-4rrx | High | 1.1% | 14 Jan, 2019 | Packagist studio-42/elfinder |
Path Traversal in cordova-plugin-ionic-webview CVE-2018-16202, GHSA-xwjh-cp99-cj8q | High | 3.3% | 09 Jan, 2019 | npm cordova-plugin-ionic-webview |
Improper Input Validation in Django CVE-2019-3498, GHSA-337x-4q8g-prc5, PYSEC-2019-17 | High | 3.4% | 09 Jan, 2019 | PyPI Django PyPI django |
xterm vulnerable to remote code execution CVE-2019-0542, GHSA-mc23-976p-j42x | High | 3.2% | 09 Jan, 2019 | npm xterm |
Microsoft Windows Privilege Escalation Vulnerability CVE-2019-0543 | HighExploited | 4.7% | 08 Jan, 2019 | |
Microsoft MSHTML Remote Code Execution Vulnerability CVE-2019-0541 | HighExploited | 53.2% | 08 Jan, 2019 | |
Dolibarr SQL injection vulnerability in user/card.php CVE-2018-19998, GHSA-97jv-2hp6-3frj | High | 2.2% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
Dolibarr error-based SQL injection vulnerability in product/card.php CVE-2018-19994, GHSA-78hj-952q-99rw | High | 2.0% | 03 Jan, 2019 | Packagist dolibarr/dolibarr |
sqla-yaml-fixtures is vulnerable to Code Injection CVE-2019-3575, GHSA-2x54-j4m3-r6wx, PYSEC-2019-122 | High | 0.4% | 03 Jan, 2019 | PyPI sqla-yaml-fixtures |
Ansible sensitive information disclosure CVE-2018-16876, GHSA-j569-fghw-f9rx, PYSEC-2019-141 | High | 2.5% | 03 Jan, 2019 | PyPI ansible |
Archive_Tar contains Potential RCE if filename starts with phar:// CVE-2018-1000888, GHSA-3q76-jq6m-573p | High | 19.1% | 28 Dec, 2018 | Packagist pear/archive_tar |
Craft CMS Vulnerable to Server-Side Template Injection CVE-2018-20465, GHSA-j7fx-v37j-v3w7 | High | 1.5% | 25 Dec, 2018 | Packagist craftcms/cms |
GIGABYTE Multiple Products Code Execution Vulnerability CVE-2018-19322 | HighExploited | 1.8% | 21 Dec, 2018 | |
GIGABYTE Multiple Products Privilege Escalation Vulnerability CVE-2018-19321 | HighExploited | 3.7% | 21 Dec, 2018 | |
GIGABYTE Multiple Products Unspecified Vulnerability CVE-2018-19320 | HighExploited | 4.6% | 21 Dec, 2018 | |
PyKMIP Denial of service vulnerability CVE-2018-1000872, GHSA-gfv6-cj92-g3hx, PYSEC-2018-22 | High | 1.3% | 20 Dec, 2018 | PyPI pykmip |
aiohttp-session creates non-expiring sessions CVE-2018-1000814, GHSA-mr4x-c4v9-x729, PYSEC-2018-35 | High | 1.0% | 20 Dec, 2018 | PyPI aiohttp-session |
Cross-Site Request Forgery (CSRF) in Luigi CVE-2018-1000843, GHSA-p69g-f978-xxv9, PYSEC-2018-11 | High | 0.8% | 20 Dec, 2018 | PyPI luigi |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2018-8653 | HighExploited | 29.6% | 20 Dec, 2018 | |
Gogs Directory Traversal CVE-2018-20303, GHSA-9hxg-w7qf-hh93 | High | 3.3% | 20 Dec, 2018 | Go gogs.io/gogs |
Sylabs Singularity Improper Input Validation CVE-2018-19295, GHSA-p83v-8vmr-qfv9 | High | 0.5% | 17 Dec, 2018 | Go github.com/sylabs/singularity |
Rendertron discloses absolute paths of files CVE-2017-18355, GHSA-vqmr-957g-r7w3 | High | 1.1% | 17 Dec, 2018 | npm rendertron |
rendertron LFI vulnerability CVE-2017-18354, GHSA-j87c-cj65-vmh5 | High | 1.2% | 17 Dec, 2018 | npm rendertron |
rendertron can remotely shut down Chrome instance CVE-2017-18353, GHSA-4q69-q4q7-x82c | High | 1.2% | 17 Dec, 2018 | npm rendertron |
Denial of service in chain verification in crypto/x509 CVE-2018-16875, GO-2022-0191 | High | 6.5% | 14 Dec, 2018 | Go stdlib |
Directory traversal via "go get" command in cmd/go CVE-2018-16874, GO-2022-0190 | High | 5.0% | 14 Dec, 2018 | Go toolchain |
Remote command execution via "go get" with "-u" flag in cmd/go CVE-2018-16873, GO-2022-0189 | High | 66.3% | 14 Dec, 2018 | Go toolchain |
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability CVE-2018-8639 | HighExploited | 22.3% | 12 Dec, 2018 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2018-8611 | HighExploited | 4.2% | 12 Dec, 2018 | |
phpMyAdmin CSRF Vulnerability CVE-2018-19969, GHSA-xwf2-53mc-r8hx | High | 1.1% | 11 Dec, 2018 | Packagist phpmyadmin/phpmyadmin |