Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Open Redirect vulnerability in jupyterhub and notebook CVE-2019-10255, GHSA-rv62-4pmj-xw6h, PYSEC-2026-2683, PYSEC-2026-647 | Medium | 1.8% | 28 Mar, 2019 | PyPI jupyterhub PyPI notebook |
Moodle XSS Vulnerability CVE-2019-3847, GHSA-qrcj-6fjw-3h9h | Medium | 2.2% | 27 Mar, 2019 | Packagist moodle/moodle |
Ansible Path Traversal vulnerability CVE-2019-3828, GHSA-74vq-h4q8-x6jv, PYSEC-2019-5 | Medium | 0.5% | 27 Mar, 2019 | PyPI ansible |
Snipe-IT XSS Vulnerability CVE-2019-10118, GHSA-fx98-8w93-4mxr | Medium | 0.8% | 27 Mar, 2019 | Packagist snipe/snipe-it |
Improper Neutralization of Input During Web Page Generation in Select2 CVE-2016-10744, GHSA-rf66-hmqf-q3fc | Medium | 1.8% | 27 Mar, 2019 | npm select2 |
Moodle context freezing CVE-2019-3852, GHSA-v2rh-5v88-rgvh | Medium | 1.1% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Secure layout contained an insecure link in Boost theme CVE-2019-3851, GHSA-pj45-hp8h-289r | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Stored HTML in assignment submission comments allowed links to be opened directly CVE-2019-3850, GHSA-3fj7-9j8m-7r8g | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Moodle Logged in users could view all calendar events CVE-2019-3848, GHSA-45rw-4r25-jvg7 | Medium | 0.9% | 26 Mar, 2019 | Packagist moodle/moodle |
Withdrawn Advisory: Prometheus XSS Vulnerability CVE-2019-3826, GHSA-3m87-5598-2v4f | Medium | 2.5% | 26 Mar, 2019 | Go github.com/prometheus/prometheus |
Moodle XSS Vulnerability CVE-2019-3810, GHSA-wm4w-8vc6-2j4h | Medium | 13.8% | 25 Mar, 2019 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2019-3808, GHSA-4r2p-wpv5-683w | Medium | 1.2% | 25 Mar, 2019 | Packagist moodle/moodle |
Moderate severity vulnerability that affects league/commonmark CVE-2019-10010, GHSA-3v43-877x-qgmq | Medium | 1.1% | 24 Mar, 2019 | Packagist league/commonmark |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability CVE-2019-9978 | MediumExploited | 72.9% | 24 Mar, 2019 | |
Doorkeeper-openid_connect contains Open Redirect CVE-2019-9837, GHSA-vv4c-g6q7-p3q7 | Medium | 1.3% | 21 Mar, 2019 | RubyGems doorkeeper-openid_connect |
Microweber XSS Vulnerability CVE-2018-19917, GHSA-582j-m369-hj2f | Medium | 1.6% | 21 Mar, 2019 | Packagist microweber/microweber |
Drupal Cross Site Scripting (XSS) vulnerability CVE-2019-6341, DRUPAL-CORE-2019-004, GHSA-cmmh-8mwp-gq5p | Medium | 12.2% | 20 Mar, 2019 | Packagist drupal/core Packagist drupal/drupal |
Cross-Site Scripting in editor.md CVE-2019-9737, GHSA-2j5v-fc74-j9q2 | Medium | 0.9% | 13 Mar, 2019 | npm editor.md |
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook CVE-2019-9644, GHSA-hhx8-cr55-qcxx, PYSEC-2019-159, PYSEC-2026-2531 | Medium | 1.5% | 12 Mar, 2019 | PyPI jupyter-notebook PyPI notebook |
Dolibarr Stored Cross-site Scripting in expensereport/card.php CVE-2018-16808, GHSA-r3r5-fqfm-9wrh | Medium | 1.0% | 07 Mar, 2019 | Packagist dolibarr/dolibarr |
TIBCO JasperReports Library Directory Traversal Vulnerability CVE-2018-18809 | MediumExploited | 79.1% | 07 Mar, 2019 | |
Microsoft Internet Explorer Information Disclosure Vulnerability CVE-2019-0676 | MediumExploited | 8.1% | 05 Mar, 2019 | |
Apache Airflow vulnerable to Stored XSS CVE-2018-20244, GHSA-99cv-8cvv-666c, PYSEC-2019-142 | Medium | 2.0% | 27 Feb, 2019 | PyPI apache-airflow |
Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331, GHSA-9v3m-8fp8-mj99 | Medium | 16.4% | 20 Feb, 2019 | Maven org.webjars:bootstrap NuGet Bootstrap.Less NuGet bootstrap NuGet bootstrap.sass +6 more |
Hydra has Reflected XSS via error_hint parameter CVE-2019-8400, GHSA-7v6r-w4r6-mhch, GO-2026-4861 | Medium | 1.3% | 17 Feb, 2019 | Go github.com/ory/hydra |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability CVE-2019-8394 | MediumExploited | 63.3% | 17 Feb, 2019 | |
uap-core Regular Expression Denial of Service issue CVE-2018-20164, GHSA-fx7m-j728-mjw3 | Medium | 3.3% | 13 Feb, 2019 | npm uap-core |
MODX vulnerability allows for XSS via user settings parameters CVE-2018-20758, GHSA-vwqw-wfhv-2xcq | Medium | 0.6% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution allows XSS through extended user fields CVE-2018-20757, GHSA-gm2g-65wj-43g8 | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution allows XSS via document resources CVE-2018-20756, GHSA-fpxg-5x79-43rm | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
MODX Revolution vulnerable to XSS attack through its User Photo field CVE-2018-20755, GHSA-q4c2-q63g-62j7 | Medium | 0.9% | 06 Feb, 2019 | Packagist modx/revolution |
Incorrect Access Control vulnerability in api-platform/core CVE-2019-1000011, GHSA-974j-wjxx-wggj | Medium | 1.0% | 04 Feb, 2019 | Packagist api-platform/core |
Helm Path Traversal CVE-2019-1000008, GHSA-xrxm-mvqm-r553, GO-2023-1948 | Medium | 1.5% | 04 Feb, 2019 | Go helm.sh/helm |
Gitea Arbitrary File Delete Vulnerability CVE-2019-1000002, GHSA-j99q-rwp6-498g | Medium | 1.1% | 04 Feb, 2019 | Go code.gitea.io/gitea |
Pyspark User Impersonation Vulnerability CVE-2018-11760, GHSA-fvxv-9xxr-h7wj, PYSEC-2019-169 | Medium | 0.6% | 04 Feb, 2019 | PyPI pyspark |
Buildbot CRLF Injection CVE-2019-7313, GHSA-66x7-2r56-fj77, PYSEC-2019-7 | Medium | 0.9% | 03 Feb, 2019 | PyPI buildbot |
m-server Vulnerable to Directory Traversal CVE-2018-16485, GHSA-899g-6q6w-7v94 | Medium | 1.3% | 01 Feb, 2019 | npm m-server |
Cross-Site Scripting in m-server CVE-2018-16484, GHSA-gmxv-xf2q-6j8m | Medium | 0.6% | 01 Feb, 2019 | npm m-server |
Cross-Site Scripting in html-pages CVE-2018-16481, GHSA-5p26-hw7f-3cpr | Medium | 0.7% | 01 Feb, 2019 | npm html-pages |
Tnantoka/public XSS Vulnerability CVE-2018-16480, GHSA-649c-x44h-4q7v | Medium | 0.8% | 01 Feb, 2019 | npm public |
Croogo vulnerable to Cross-site Scripting in title field CVE-2019-7173, GHSA-q5fg-v5p7-r424 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7171, GHSA-v6q8-8wgx-8hm7 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7170, GHSA-36pq-cjh9-fv46 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in title field CVE-2019-7169, GHSA-wr5c-4f2h-28m6 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Croogo vulnerable to XSS in Blog field CVE-2019-7168, GHSA-9f9r-w3xq-f722 | Medium | 0.6% | 29 Jan, 2019 | Packagist croogo/croogo |
Yii Incorrectly Implements CORS CVE-2018-20745, GHSA-cr6r-6xm9-ww22 | Medium | 0.5% | 28 Jan, 2019 | Packagist yiisoft/yii2 |
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error CVE-2018-20744, GHSA-927h-x4qj-r242, GO-2023-1792 | Medium | 0.7% | 28 Jan, 2019 | Go github.com/gofiber/fiber/v2 Go github.com/rs/cors |
phpMyAdmin Arbitrary file read vulnerability CVE-2019-6799, GHSA-c8wj-q36q-3wg4 | Medium | 14.8% | 26 Jan, 2019 | Packagist phpmyadmin/phpmyadmin |
CRLF Injection in pypiserver CVE-2019-6802, GHSA-mh24-7wvg-v88g, PYSEC-2019-113 | Medium | 3.8% | 25 Jan, 2019 | PyPI pypiserver |
Missing Authorization in Drupal CVE-2017-6923, GHSA-v3f6-f29f-rgvp | Medium | 2.0% | 22 Jan, 2019 | Packagist drupal/core Packagist drupal/drupal |