Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Magento 2 Community Edition Insufficient Access Controls CVE-2019-7904, GHSA-5hcx-vg88-hgpm | Medium | 0.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Information Disclosure CVE-2019-7899, GHSA-274w-2j5w-m2xj | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Information Disclosure CVE-2019-7898, GHSA-vqxq-3wqv-r9xp | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7897, GHSA-jxp3-mmw7-8285 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Injection Vulnerability CVE-2019-7889, GHSA-hxmp-jcqj-83hm | Medium | 0.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Information Disclosure CVE-2019-7888, GHSA-9pgc-rvp9-rqv3 | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7887, GHSA-rj8f-g5gm-jw5c | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7882, GHSA-ff7r-7rrm-wx6w | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7881, GHSA-7xqv-jgv6-x2h8 | Medium | 1.2% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7880, GHSA-ccjm-rgm5-rjjh | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7877, GHSA-v5m6-2m78-4vr2 | Medium | 0.8% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7875, GHSA-qmwh-rh2g-3682 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7874, GHSA-8v75-8jj8-77gf | Medium | 0.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Cross-site Scripting Vulnerability CVE-2019-7873, GHSA-8578-mmf4-f327 | Medium | 0.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Insufficient authorization check when adding users to company accounts CVE-2019-7872, GHSA-pfxv-66r9-4gqw | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Stored Cross-site Scripting vulnerability in the admin panel CVE-2019-7869, GHSA-9f4p-3jgf-98f5 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Cross-site Scripting in the admin panel CVE-2019-7868, GHSA-g4jh-vxqm-6fff | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7867, GHSA-vx2g-f45p-j674 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7866, GHSA-3ccx-7588-r6c6 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition IDOR Vulnerability CVE-2019-7864, GHSA-c33v-23rx-7qqc | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Stored cross-site scripting in admin panel CVE-2019-7863, GHSA-p8gw-x2p7-vc73 | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7862, GHSA-m3v2-r236-5xgq | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento Cross-Site Request Forgery (CSRF) CVE-2019-7857, GHSA-f6ww-vqw2-xp3v | Medium | 0.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Cryptographic Flaw CVE-2019-7855, GHSA-2w26-gmqm-mc5p | Medium | 1.0% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition XSS Vulnerability CVE-2019-7853, GHSA-mjgf-xmrr-6gvx | Medium | 0.6% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Path Disclosure CVE-2019-7852, GHSA-xcgp-c6hp-cj4r | Medium | 0.9% | 02 Aug, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition CSRF vulnerability CVE-2019-7851, GHSA-mhvf-j94g-3qp7 | Medium | 0.4% | 02 Aug, 2019 | Packagist magento/community-edition |
Cross-site Scripting in pandao editor.md CVE-2019-14517, GHSA-5q54-8p9j-x74j | Medium | 0.9% | 01 Aug, 2019 | npm editor.md |
moodle Improper Access Control CVE-2019-10189, GHSA-h7xp-7fjp-ghhc | Medium | 0.9% | 31 Jul, 2019 | Packagist moodle/moodle |
moodle Improper Access Control CVE-2019-10188, GHSA-92q5-2h76-vgmj | Medium | 0.9% | 31 Jul, 2019 | Packagist moodle/moodle |
Moodle Ability to delete glossary entries that belong to another glossary CVE-2019-10187, GHSA-2mg9-hv69-897x | Medium | 0.9% | 31 Jul, 2019 | Packagist moodle/moodle |
Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2019-10156, GHSA-grgm-pph5-j5h7, PYSEC-2019-2 | Medium | 1.8% | 30 Jul, 2019 | PyPI ansible |
Cross-Site Scripting in http-file-server CVE-2019-5458, GHSA-7j93-2h6r-hm49 | Medium | 0.7% | 30 Jul, 2019 | npm http-file-server |
Cross-Site Scripting in min-http-server CVE-2019-5457, GHSA-j657-59rv-qwm6 | Medium | 0.7% | 30 Jul, 2019 | npm min-http-server |
SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php CVE-2019-14315, GHSA-vwh5-78jc-hpjx | Medium | 1.2% | 28 Jul, 2019 | Packagist sunhater/kcfinder |
AntSword RCE and XSS via code injection CVE-2019-13970, GHSA-hq75-ggc3-8h3q | Medium | 1.9% | 19 Jul, 2019 | npm antsword |
Gitea XSS Vulnerability CVE-2019-1010261, GHSA-5rh7-6gfj-mc87, GO-2023-1922 | Medium | 0.8% | 18 Jul, 2019 | Go code.gitea.io/gitea |
Firefly III vulnerable to image-based stored XSS CVE-2019-13647, GHSA-pcxq-28f6-m3fm | Medium | 0.7% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Firefly III vulnerable to reflected cross-site scripting CVE-2019-13646, GHSA-mrc2-h7q2-pp97 | Medium | 0.7% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Firefly III vulnerable to stored XSS CVE-2019-13645, GHSA-5hpw-vcj2-prwg | Medium | 0.7% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Firefly III vulnerable to stored XSS CVE-2019-13644, GHSA-9xmx-rj7j-fv9q | Medium | 0.7% | 18 Jul, 2019 | Packagist grumpydictator/firefly-iii |
Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-1010266, GHSA-x5rq-j2xg-h7qm, SNYK-JS-LODASH-73639 | Medium | 3.0% | 17 Jul, 2019 | RubyGems lodash-rails npm lodash npm lodash-amd npm lodash-es |
XSS in TinyMCE CVE-2019-1010091, GHSA-c78w-2gw7-gjv3 | Medium | 1.9% | 17 Jul, 2019 | npm tinymce |
Cross-site Scripting in invenio-communities CVE-2019-1020005, GHSA-mfv8-q39f-mgfg, PYSEC-2019-25 | Medium | 0.7% | 16 Jul, 2019 | PyPI invenio-communities |
Cross-site Scripting in invenio-previewer CVE-2019-1020019, GHSA-j9m2-6hq2-4r3c, PYSEC-2019-26 | Medium | 0.9% | 16 Jul, 2019 | PyPI invenio-previewer |
Cross-site scripting invenio-records CVE-2019-1020003, GHSA-vxh3-mvv7-265j, PYSEC-2019-27 | Medium | 0.7% | 16 Jul, 2019 | PyPI invenio-records |
Invenio-App vulnerable to host header injection attack CVE-2019-1020006, GHSA-94mf-xfg5-r247, PYSEC-2019-24 | Medium | 0.9% | 16 Jul, 2019 | PyPI invenio-app |
Path Traversal in http-file-server CVE-2019-5447, GHSA-2mp5-m968-gwr2 | Medium | 1.5% | 15 Jul, 2019 | npm http-file-server |
Dolibarr Cross Site Scripting (XSS) CVE-2019-1010016, GHSA-97fp-5m87-r9mf | Medium | 1.0% | 15 Jul, 2019 | Packagist dolibarr/dolibarr |
Gitea XSS Vulnerability in Repository Description CVE-2019-1010314, GHSA-hqx2-j33x-9fc4 | Medium | 0.8% | 11 Jul, 2019 | Go code.gitea.io/gitea |