Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
js-bson vulnerable to REDoS CVE-2018-13863, GHSA-8462-q7x7-g2x4 | High | 1.9% | 10 Jul, 2018 | npm bson |
Moodle XSS Vulnerability CVE-2018-10891, GHSA-p7v9-gjrh-563x | High | 2.1% | 10 Jul, 2018 | Packagist moodle/moodle |
Adobe Flash Player Stack-based Buffer Overflow Vulnerability CVE-2018-5002 | HighExploited | 24.4% | 09 Jul, 2018 | |
Adobe Acrobat and Reader Double Free Vulnerability CVE-2018-4990 | HighExploited | 35.8% | 09 Jul, 2018 | |
Mercurial Improper Input Validation vulnerability CVE-2018-13346, GHSA-9xv4-r2hf-26gh, PYSEC-2018-88 | High | 2.4% | 06 Jul, 2018 | PyPI mercurial |
Mercurial Improper Input Validation vulnerability CVE-2018-13348, GHSA-3v62-ww8w-758m, PYSEC-2018-90 | High | 2.1% | 06 Jul, 2018 | PyPI mercurial |
Path Traversal in buttle CVE-2018-3766, GHSA-m8cr-q935-8j67 | High | 1.9% | 05 Jul, 2018 | npm buttle |
Cross-site request forgery in rails_admin CVE-2016-10522, GHSA-pxqr-8v54-m2hj | High | 1.0% | 05 Jul, 2018 | RubyGems rails_admin |
Go Ethereum LES protocol implementation vulnerable to Denial of Service CVE-2018-12018, GHSA-p5gc-957x-gfw9, GO-2021-0075 | High | 4.2% | 05 Jul, 2018 | Go github.com/ethereum/go-ethereum |
SQL Injection in query-mysql CVE-2018-3754, GHSA-9mr8-6prp-gwjv | High | 1.2% | 03 Jul, 2018 | npm query-mysql |
Podman Elevated Container Privileges CVE-2018-10856, GHSA-wp7w-vx86-vj9h, GO-2023-1962 | High | 0.9% | 03 Jul, 2018 | Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Ansible exposes sensitive data in log files and on the terminal CVE-2018-10855, GHSA-jwcc-j78w-j73w, PYSEC-2018-42 | High | 3.0% | 03 Jul, 2018 | PyPI ansible |
OpenCart Cross-Site Request Forgery (CSRF) CVE-2018-13067, GHSA-jwqr-jcwp-445w | High | 0.7% | 02 Jul, 2018 | Packagist opencart/opencart |
Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-9276 | HighExploited | 86.9% | 02 Jul, 2018 | |
Ansible Improper Input Validation vulnerability CVE-2018-10874, GHSA-3xvg-x47j-x75w, PYSEC-2018-81 | High | 0.5% | 02 Jul, 2018 | PyPI ansible |
Froxlor PHP Object Injection vulnerability CVE-2018-1000527, GHSA-g77v-m226-3f7g | High | 2.6% | 26 Jun, 2018 | Packagist froxlor/froxlor |
websockets is vulnerable to denial of service by memory exhaustion CVE-2018-1000518, GHSA-6g87-ff9q-v847, PYSEC-2018-79 | High | 1.8% | 26 Jun, 2018 | PyPI websockets |
aiohttp-session Session Fixation vulnerability CVE-2018-1000519, GHSA-fpwp-69xv-c67f, PYSEC-2018-80 | High | 1.2% | 26 Jun, 2018 | PyPI aiohttp-session |
Topydo Improper Input Validation vulnerability CVE-2018-1000523, GHSA-h6h9-pphv-m266, PYSEC-2018-76 | High | 1.1% | 26 Jun, 2018 | PyPI topydo |
baserCMS vulnerable to Access Control Bypass CVE-2018-0572, GHSA-mjj9-33j8-pfwh | High | 1.6% | 26 Jun, 2018 | Packagist baserproject/basercms |
OS Command Injection in baserCMS CVE-2018-0569, GHSA-6j3p-vrph-j7qq | High | 1.5% | 26 Jun, 2018 | Packagist baserproject/basercms |
Ruby-ffi has a DLL loading issue CVE-2018-1000201, GHSA-2gw2-8q9w-cw8p | High | 1.3% | 22 Jun, 2018 | RubyGems ffi |
Ansible Arbitrary Code Execution CVE-2017-7466, GHSA-3m8p-xpm6-8ww3, PYSEC-2018-40 | High | 3.0% | 22 Jun, 2018 | PyPI ansible |
Froxlor Incorrect Access Control CVE-2018-12642, GHSA-r6g8-mq9v-cgp4 | High | 1.4% | 22 Jun, 2018 | Packagist froxlor/froxlor |
phpMyAdmin Improper Authentication CVE-2018-12613, GHSA-x394-g9j8-x7mf | High | 98.4% | 21 Jun, 2018 | Packagist phpmyadmin/phpmyadmin |
Sprockets path traversal leads to information leak CVE-2018-3760, GHSA-pr3h-jjhj-573x | High | 26.3% | 20 Jun, 2018 | RubyGems sprockets |
Phusion Passenger Race Condition Allows Privilege Escalation CVE-2018-12029, GHSA-jjcj-fgfm-9g9r | High | 0.3% | 17 Jun, 2018 | RubyGems passenger |
Incorrect Access Control in Phusion Passenger CVE-2018-12028, GHSA-jjhj-8gx7-x836 | High | 0.9% | 17 Jun, 2018 | RubyGems passenger |
Insecure Permissions in Phusion Passenger CVE-2018-12027, GHSA-whfx-877c-5p28 | High | 1.1% | 17 Jun, 2018 | RubyGems passenger |
express-cart allows any user to create an admin user CVE-2018-12457, GHSA-hr89-w7p6-pjmq | High | 1.9% | 15 Jun, 2018 | npm express-cart |
Matrix Synapse Authorization Error CVE-2018-12423, GHSA-ch5v-fhg8-7gv9, PYSEC-2026-844 | High | 1.8% | 14 Jun, 2018 | PyPI matrix-synapse |
Yelp OSXCollector Improper Certificate Validation CVE-2018-10406, GHSA-g3cc-pvjj-9xq9, PYSEC-2018-95 | High | 0.8% | 13 Jun, 2018 | PyPI osxcollector |
Symfony CSRF Token Fixation CVE-2018-11406, GHSA-g4g7-q726-v5hg | High | 0.7% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-bundle Packagist symfony/security-http Packagist symfony/symfony |
Symfony Session Fixation Vulnerability CVE-2018-11385, GHSA-g4rg-rw65-8hfg | High | 2.0% | 13 Jun, 2018 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
private_address_check contains race condition CVE-2018-3759, GHSA-2xvj-j3qh-x8c3 | High | 0.7% | 13 Jun, 2018 | RubyGems private_address_check |
Matrix Synapse Security Filtering Flaw CVE-2018-12291, GHSA-v8wm-g9f2-xjv4, PYSEC-2026-664 | High | 1.8% | 13 Jun, 2018 | PyPI matrix-synapse |
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability CVE-2018-6961 | HighExploited | 85.5% | 11 Jun, 2018 | |
Malicious PDF can inject JavaScript into PDF Viewer CVE-2018-5158, GHSA-7jg2-jgv3-fmr4 | High | 10.3% | 11 Jun, 2018 | npm pdfjs-dist |
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability CVE-2016-9079 | HighExploited | 87.4% | 11 Jun, 2018 | |
express-cart unrestricted file upload vulnerability CVE-2018-3758, GHSA-4w62-cq5r-5mmq | High | 27.1% | 07 Jun, 2018 | npm express-cart |
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability CVE-2018-0296 | HighExploited | 99.9% | 07 Jun, 2018 | |
Regular Expression Denial of Service in sshpk CVE-2018-3737, GHSA-2m39-62fm-q8r3 | High | 1.7% | 07 Jun, 2018 | npm sshpk |
Path Traversal in resolve-path CVE-2018-3732, GHSA-62g9-6hw5-rwfp | High | 2.4% | 07 Jun, 2018 | npm resolve-path |
Path Traversal in public CVE-2018-3731, GHSA-rwv8-jvff-jq28 | High | 2.0% | 07 Jun, 2018 | npm public |
Path Traversal in mcstatic CVE-2018-3730, GHSA-3r8f-gphx-9m2c | High | 2.0% | 07 Jun, 2018 | npm mcstatic |
Path Traversal in localhost-now CVE-2018-3729, GHSA-2gjg-5x33-mmp2 | High | 2.0% | 07 Jun, 2018 | npm localhost-now |
Path Traversal in 626 CVE-2018-3727, GHSA-r4r9-mgjc-g6q3 | High | 2.0% | 07 Jun, 2018 | npm 626 |
Path Traversal in hekto CVE-2018-3725, GHSA-x26f-26qw-hhhx | High | 2.0% | 07 Jun, 2018 | npm hekto |
Path Traversal in general-file-server CVE-2018-3724, GHSA-wv2f-3rxv-jqhp | High | 1.7% | 07 Jun, 2018 | npm general-file-server |
Prototype Pollution in defaults-deep CVE-2018-3723, GHSA-cqp5-m4pq-gfgp | High | 2.0% | 07 Jun, 2018 | npm defaults-deep |