Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Scripting Engine Memory Corruption Vulnerability CVE-2018-8373 | HighExploited | 61.8% | 15 Aug, 2018 | |
Laravel Framework RCE Vulnerability CVE-2018-15133, GHSA-qvqm-h22r-4cp9 | HighExploited | 76.6% | 09 Aug, 2018 | Packagist laravel/framework |
Gogs and Gitea SSRF Vulnerability CVE-2018-15192, GHSA-fg3x-rwq9-74cw, GO-2023-1971 | High | 2.1% | 08 Aug, 2018 | Go code.gitea.io/gitea Go gogs.io/gogs |
Symfony Directory Traversal CVE-2017-16654, GHSA-c49r-8gj6-768r | High | 2.7% | 06 Aug, 2018 | Packagist symfony/intl Packagist symfony/symfony |
SEOmatic plugin for Craft CMS SSTI Vulnerability CVE-2018-14716, GHSA-6j9m-rp7m-3gfg | High | 32.7% | 06 Aug, 2018 | Packagist nystudio107/craft-seomatic |
Symfony Host Header Injection CVE-2018-14774, GHSA-66p6-7p29-55p9 | High | 1.1% | 03 Aug, 2018 | Packagist symfony/symfony |
Ansible apt_key module does not properly verify key fingerprint CVE-2016-8614, GHSA-cmwx-9m2h-x7v4, PYSEC-2018-37 | High | 2.5% | 31 Jul, 2018 | PyPI ansible |
A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials. CVE-2018-10898, PYSEC-2018-102 | High | 0.9% | 30 Jul, 2018 | PyPI tripleo-heat-templates |
PyCA Cryptography vulnerable to GCM tag forgery CVE-2018-10903, GHSA-fcf9-3qw3-gxmj, PYSEC-2018-52 | High | 3.2% | 30 Jul, 2018 | PyPI cryptography |
Path Traversal in superstatic GHSA-wm77-q74p-5763 | High | Not scored | 27 Jul, 2018 | npm superstatic |
Wizkunde SAMLBase SAML Bypass CVE-2018-5387, GHSA-7gh2-8q93-87hp | High | 1.7% | 24 Jul, 2018 | Packagist gogentooss/samlbase |
October CMS Local File Inclusion CVE-2018-1999009, GHSA-v7cr-w5v6-6659 | High | 2.4% | 23 Jul, 2018 | Packagist october/october |
Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function CVE-2018-14521, GHSA-rcv6-7hmv-fj7h, PYSEC-2018-61 | High | 1.5% | 23 Jul, 2018 | PyPI aubio |
Aubio is vulnerable to denial of service via aubio_pitch_set_unit function CVE-2018-14522, GHSA-g7g8-mx45-x4c8, PYSEC-2018-62 | High | 1.9% | 23 Jul, 2018 | PyPI aubio |
Aubio is vulnerable to out of bound read when samplerate > 50kHz CVE-2018-14523, GHSA-3x58-8qmv-wqw5, PYSEC-2018-63 | High | 2.0% | 23 Jul, 2018 | PyPI aubio |
Nokogiri NULL Pointer Dereference CVE-2018-14404, GHSA-6qvp-r6r3-9p7h | High | 3.7% | 19 Jul, 2018 | RubyGems nokogiri |
OpenStack Identity service (keystone) Incorrect Authorization CVE-2017-2673, GHSA-j36m-hv43-7w7m, PYSEC-2018-152 | High | 2.3% | 19 Jul, 2018 | PyPI keystone |
Ansible Arbitrary Code Execution CVE-2018-10875, GHSA-fc4h-467w-46rh, PYSEC-2018-43 | High | 0.6% | 13 Jul, 2018 | PyPI ansible |
Doorkeeper subject to Incorrect Permission Assignment CVE-2018-1000211, GHSA-694m-jhr9-pf77 | High | 1.6% | 13 Jul, 2018 | RubyGems doorkeeper |
MODX Revolution Incorrect Access Control vulnerability CVE-2018-1000207, GHSA-m899-6mh4-mpc5 | High | 64.1% | 13 Jul, 2018 | Packagist modx/revolution |
Qutebrowser CSRF Vulnerability CVE-2018-10895, GHSA-wgmx-52ph-qqcw, PYSEC-2018-27 | High | 1.2% | 12 Jul, 2018 | PyPI qutebrowser |
ChakraCore Scripting Engine Type Confusion Vulnerability CVE-2018-8298 | HighExploited | 74.7% | 11 Jul, 2018 | |
js-bson vulnerable to REDoS CVE-2018-13863, GHSA-8462-q7x7-g2x4 | High | 1.9% | 10 Jul, 2018 | npm bson |
Moodle XSS Vulnerability CVE-2018-10891, GHSA-p7v9-gjrh-563x | High | 2.1% | 10 Jul, 2018 | Packagist moodle/moodle |
Adobe Flash Player Stack-based Buffer Overflow Vulnerability CVE-2018-5002 | HighExploited | 24.4% | 09 Jul, 2018 | |
Adobe Acrobat and Reader Double Free Vulnerability CVE-2018-4990 | HighExploited | 35.8% | 09 Jul, 2018 | |
Mercurial Improper Input Validation vulnerability CVE-2018-13346, GHSA-9xv4-r2hf-26gh, PYSEC-2018-88 | High | 2.4% | 06 Jul, 2018 | PyPI mercurial |
Mercurial Improper Input Validation vulnerability CVE-2018-13348, GHSA-3v62-ww8w-758m, PYSEC-2018-90 | High | 2.1% | 06 Jul, 2018 | PyPI mercurial |
Path Traversal in buttle CVE-2018-3766, GHSA-m8cr-q935-8j67 | High | 1.9% | 05 Jul, 2018 | npm buttle |
Cross-site request forgery in rails_admin CVE-2016-10522, GHSA-pxqr-8v54-m2hj | High | 1.0% | 05 Jul, 2018 | RubyGems rails_admin |
Go Ethereum LES protocol implementation vulnerable to Denial of Service CVE-2018-12018, GHSA-p5gc-957x-gfw9, GO-2021-0075 | High | 4.3% | 05 Jul, 2018 | Go github.com/ethereum/go-ethereum |
SQL Injection in query-mysql CVE-2018-3754, GHSA-9mr8-6prp-gwjv | High | 1.2% | 03 Jul, 2018 | npm query-mysql |
Podman Elevated Container Privileges CVE-2018-10856, GHSA-wp7w-vx86-vj9h, GO-2023-1962 | High | 0.9% | 03 Jul, 2018 | Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Ansible exposes sensitive data in log files and on the terminal CVE-2018-10855, GHSA-jwcc-j78w-j73w, PYSEC-2018-42 | High | 3.0% | 03 Jul, 2018 | PyPI ansible |
OpenCart Cross-Site Request Forgery (CSRF) CVE-2018-13067, GHSA-jwqr-jcwp-445w | High | 0.7% | 02 Jul, 2018 | Packagist opencart/opencart |
Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-9276 | HighExploited | 86.9% | 02 Jul, 2018 | |
Ansible Improper Input Validation vulnerability CVE-2018-10874, GHSA-3xvg-x47j-x75w, PYSEC-2018-81 | High | 0.5% | 02 Jul, 2018 | PyPI ansible |
Froxlor PHP Object Injection vulnerability CVE-2018-1000527, GHSA-g77v-m226-3f7g | High | 2.6% | 26 Jun, 2018 | Packagist froxlor/froxlor |
websockets is vulnerable to denial of service by memory exhaustion CVE-2018-1000518, GHSA-6g87-ff9q-v847, PYSEC-2018-79 | High | 1.8% | 26 Jun, 2018 | PyPI websockets |
aiohttp-session Session Fixation vulnerability CVE-2018-1000519, GHSA-fpwp-69xv-c67f, PYSEC-2018-80 | High | 1.2% | 26 Jun, 2018 | PyPI aiohttp-session |
Topydo Improper Input Validation vulnerability CVE-2018-1000523, GHSA-h6h9-pphv-m266, PYSEC-2018-76 | High | 1.1% | 26 Jun, 2018 | PyPI topydo |
baserCMS vulnerable to Access Control Bypass CVE-2018-0572, GHSA-mjj9-33j8-pfwh | High | 1.6% | 26 Jun, 2018 | Packagist baserproject/basercms |
OS Command Injection in baserCMS CVE-2018-0569, GHSA-6j3p-vrph-j7qq | High | 1.5% | 26 Jun, 2018 | Packagist baserproject/basercms |
Ruby-ffi has a DLL loading issue CVE-2018-1000201, GHSA-2gw2-8q9w-cw8p | High | 1.3% | 22 Jun, 2018 | RubyGems ffi |
Ansible Arbitrary Code Execution CVE-2017-7466, GHSA-3m8p-xpm6-8ww3, PYSEC-2018-40 | High | 3.0% | 22 Jun, 2018 | PyPI ansible |
Froxlor Incorrect Access Control CVE-2018-12642, GHSA-r6g8-mq9v-cgp4 | High | 1.4% | 22 Jun, 2018 | Packagist froxlor/froxlor |
phpMyAdmin Improper Authentication CVE-2018-12613, GHSA-x394-g9j8-x7mf | High | 98.4% | 21 Jun, 2018 | Packagist phpmyadmin/phpmyadmin |
Sprockets path traversal leads to information leak CVE-2018-3760, GHSA-pr3h-jjhj-573x | High | 26.3% | 20 Jun, 2018 | RubyGems sprockets |
Phusion Passenger Race Condition Allows Privilege Escalation CVE-2018-12029, GHSA-jjcj-fgfm-9g9r | High | 0.3% | 17 Jun, 2018 | RubyGems passenger |
Incorrect Access Control in Phusion Passenger CVE-2018-12028, GHSA-jjhj-8gx7-x836 | High | 0.9% | 17 Jun, 2018 | RubyGems passenger |