Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Google Chromium V8 Out-of-Bounds Write Vulnerability CVE-2018-17480 | HighExploited | 35.6% | 11 Dec, 2018 | |
Withdrawn Advisory: OnionShare Predictable Pathname CVE-2018-19960, GHSA-pwjq-6wrh-5w8q | High | 0.3% | 07 Dec, 2018 | PyPI onionshare-cli |
Minikube RCE via DNS Rebinding CVE-2018-1002103, GHSA-6pcv-qqx4-mxm3, GO-2023-1961 | High | 0.7% | 05 Dec, 2018 | Go k8s.io/minikube |
Weak Cryptography in PHP-Proxy CVE-2018-19784, GHSA-4wgf-9x5r-p938 | High | 1.1% | 01 Dec, 2018 | Packagist athlon1600/php-proxy |
Improper Access Control in activejob CVE-2018-16476, GHSA-q2qw-rmrh-vv42 | High | 2.9% | 30 Nov, 2018 | RubyGems activejob |
Moodle Login CSRF vulnerability in login form CVE-2018-16854, GHSA-xj5f-qv37-r9jc | High | 2.3% | 26 Nov, 2018 | Packagist moodle/moodle |
Unauthenticated File Read in PHP Proxy CVE-2018-19458, GHSA-3x3m-p2wx-g7cw | High | 32.9% | 22 Nov, 2018 | Packagist athlon1600/php-proxy-app |
Session Fixation in Tryton CVE-2018-19443, GHSA-32w7-9whp-cjp9, PYSEC-2018-77 | High | 1.1% | 22 Nov, 2018 | PyPI tryton |
Subrion CMS RCE Vulnerability CVE-2018-19422, GHSA-73xj-v6gc-g5p5 | High | 64.5% | 21 Nov, 2018 | Packagist intelliants/subrion |
phpBB Remote Code Execution CVE-2018-19274, GHSA-h3mr-q96r-37v4 | High | 5.2% | 17 Nov, 2018 | Packagist phpbb/phpbb |
Centreon SQL Injection CVE-2018-19312, GHSA-5jxp-4x68-mhqc | High | 1.9% | 16 Nov, 2018 | Packagist centreon/centreon |
Phar object injection in PHPMailer CVE-2018-19296, GHSA-7w4p-72j7-v7c2 | High | 2.2% | 16 Nov, 2018 | Packagist phpmailer/phpmailer |
Google Chromium V8 Integer Overflow Vulnerability CVE-2018-6065 | HighExploited | 60.3% | 14 Nov, 2018 | |
Google Chromium V8 Remote Code Execution Vulnerability CVE-2018-17463 | HighExploited | 84.6% | 14 Nov, 2018 | |
XXE in PHPSpreadsheet due to encoding issue CVE-2018-19277, GHSA-xcrg-29h7-h4cj | High | 7.8% | 14 Nov, 2018 | Packagist phpoffice/phpexcel Packagist phpoffice/phpspreadsheet |
Centreon SQL Injection CVE-2018-19271, GHSA-79hg-357g-rrgv | High | 2.1% | 14 Nov, 2018 | Packagist centreon/centreon |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2018-8589 | HighExploited | 3.0% | 14 Nov, 2018 | |
Microsoft Exchange Server Privilege Escalation Vulnerability CVE-2018-8581 | HighExploited | 27.6% | 14 Nov, 2018 | |
Rack vulnerable to Denial of Service CVE-2018-16470, GHSA-hg78-4f6x-99wq | High | 2.0% | 13 Nov, 2018 | RubyGems rack |
LFI in PHP-Proxy 5.1.0 CVE-2018-19246, GHSA-pc5h-m95g-v6rh | High | 22.0% | 13 Nov, 2018 | Packagist athlon1600/php-proxy |
Go Ethereum Denial of Service CVE-2018-19184, GHSA-9h4h-8w5p-f28w, GO-2022-0814 | High | 1.5% | 12 Nov, 2018 | Go github.com/ethereum/go-ethereum |
Denial of Service in ethereumjs-vm CVE-2018-19183, GHSA-2mw7-wggm-m6w3 | High | 3.1% | 12 Nov, 2018 | npm ethereumjs-vm |
Py-EVM is vulnerable to arbitrary bytecode injection CVE-2018-18920, GHSA-vqgp-4jgj-5j64, PYSEC-2018-155, PYSEC-2018-96 | High | 2.9% | 12 Nov, 2018 | PyPI evm-py PyPI py-evm |
Path Traversal in knightjs CVE-2018-16475, GHSA-3hvm-hgpw-rx4j | High | 1.8% | 06 Nov, 2018 | npm knightjs |
Prototype Pollution in cached-path-relative CVE-2018-16472, GHSA-hc9w-4p87-j549 | High | 2.1% | 06 Nov, 2018 | npm cached-path-relative |
i18n Vulnerable to Denial of Service Attack CVE-2014-10077, GHSA-34hf-g744-jw64 | High | 3.4% | 06 Nov, 2018 | RubyGems i18n |
RCE in baserCMS before 4.1.4 CVE-2018-18942, GHSA-rjc2-x53r-6c9r | High | 2.4% | 05 Nov, 2018 | Packagist baserproject/basercms |
openstack-mistral Discloses the presence of arbitrary files within the filesystem CVE-2018-16849, GHSA-fqw7-c6vr-q29m, PYSEC-2018-92 | High | 1.5% | 02 Nov, 2018 | PyPI mistral |
Prototype Pollution in merge CVE-2018-16469, GHSA-f9cm-qmx5-m98h | High | 1.7% | 30 Oct, 2018 | npm merge |
Improper Input Validation in kdcproxy CVE-2015-5159, GHSA-j7c4-2xj8-wm7r, PYSEC-2018-85 | High | 2.2% | 30 Oct, 2018 | PyPI kdcproxy |
Ansible Leaks Data Passed to ssh-keygen CVE-2018-16837, GHSA-hwrm-63v2-42g4, PYSEC-2018-44 | High | 0.4% | 23 Oct, 2018 | PyPI ansible |
Zenario CMS vulnerable to CSRF CVE-2018-18420, GHSA-22cq-xxr9-jrrv | High | 0.8% | 19 Oct, 2018 | Packagist tribalsystems/zenario |
libpg_query memory leak CVE-2018-18482, GHSA-vm3q-58wm-2r2x, PYSEC-2018-154, PYSEC-2026-895 | High | 1.2% | 18 Oct, 2018 | PyPI pg-query PyPI pglast |
Asciidoctor Infinite Loop vulnerability CVE-2018-18385, GHSA-qc9p-mjxm-j2wj | High | 2.3% | 16 Oct, 2018 | RubyGems asciidoctor |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2018-8453 | HighExploited | 70.0% | 10 Oct, 2018 | |
Denial of Service in Bytom CVE-2018-18206, GHSA-vc3x-gx6c-g99f, GO-2021-0079 | High | 1.4% | 10 Oct, 2018 | Go github.com/bytom/bytom |
Joomla RCE Vulnerability CVE-2018-17856, GHSA-9m72-pw47-292w | High | 2.7% | 09 Oct, 2018 | Packagist joomla/framework |
Insufficiently Protected Credentials in Requests CVE-2018-18074, GHSA-x84v-xcm2-53pg, PYSEC-2018-28 | High | 6.9% | 09 Oct, 2018 | PyPI requests |
Paramiko Authentication Bypass vulnerability CVE-2018-1000805, GHSA-f2j6-wrhh-v25m, PYSEC-2018-69 | High | 4.4% | 08 Oct, 2018 | PyPI paramiko |
PyOpenSSL Use-After-Free vulnerability CVE-2018-1000807, GHSA-p28m-34f6-967q, PYSEC-2018-23 | High | 4.1% | 08 Oct, 2018 | PyPI pyopenssl |
Pyopenssl Incorrect Memory Management CVE-2018-1000808, GHSA-2rcm-phc9-3945, PYSEC-2018-24 | High | 1.9% | 08 Oct, 2018 | PyPI pyopenssl |
privacyIDEA Improper Input Validation vulnerability CVE-2018-1000809, GHSA-7qqv-r2q4-jxhm, PYSEC-2018-20 | High | 1.7% | 08 Oct, 2018 | PyPI privacyIDEA PyPI privacyidea |
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-17847, CVE-2018-17848, GHSA-4r78-hx75-jjj2, GHSA-mv93-wvcp-7m7r, GO-2022-0197 | High | 2.4% | 01 Oct, 2018 | Go golang.org/x/net |
x/net/html Vulnerable to DoS During HTML Parsing CVE-2018-17846, GHSA-vfw5-hrgq-h5wf, GO-2020-0014 | High | 2.5% | 01 Oct, 2018 | Go golang.org/x/net |
Jekyll allows attackers to access arbitrary files by specifying a symlink CVE-2018-17567, GHSA-4xjh-m3qx-49wc | High | 2.2% | 28 Sep, 2018 | RubyGems jekyll |
Linux Kernel Integer Overflow Vulnerability CVE-2018-14634 | HighExploited | 14.7% | 25 Sep, 2018 | |
Missing Origin Validation in webpack-dev-server CVE-2018-14732, GHSA-cf66-xwfp-gvc4 | High | 2.5% | 21 Sep, 2018 | npm webpack-dev-server |
Missing Origin Validation in parcel-bundler CVE-2018-14731, GHSA-37q6-576q-vgr7 | High | 2.3% | 21 Sep, 2018 | npm parcel-bundler |
Missing Origin Validation in browserify-hmr CVE-2018-14730, GHSA-77q4-m83q-w76v | High | 1.7% | 21 Sep, 2018 | npm browserify-hmr |
Matrix Synapse Improper Signature Validation CVE-2018-16515, GHSA-fmvh-rvq5-hhjx, PYSEC-2026-845 | High | 1.5% | 18 Sep, 2018 | PyPI matrix-synapse |