Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cross-Site Scripting in i18next CVE-2017-16008, GHSA-f89g-whpf-6q9m | Medium | 0.8% | 04 Jun, 2018 | npm i18next |
Invalid Curve Attack in node-jose CVE-2017-16007, GHSA-rvj9-8cvx-3vq9 | Medium | 0.9% | 04 Jun, 2018 | npm node-jose |
Cross-Site Scripting in html-janitor CVE-2017-0931, GHSA-hfj4-96f7-6r5g | Medium | 1.0% | 04 Jun, 2018 | npm html-janitor |
Directory Traversal in augustine CVE-2017-0930, GHSA-4wch-fwmx-cf47 | Medium | 1.2% | 04 Jun, 2018 | npm augustine |
Bypassing Sanitization using DOM clobbering in html-janitor CVE-2017-0928, GHSA-fx46-whrj-73v5 | Medium | 1.0% | 04 Jun, 2018 | npm html-janitor |
Pagekit Stored Cross-site Scripting CVE-2018-11564, GHSA-3rwj-v7jp-w542 | Medium | 3.1% | 02 Jun, 2018 | Packagist pagekit/pagekit |
Kubernetes arbitrary file overwrite CVE-2018-1002100, GHSA-2jq6-ffph-p4h8, GO-2023-1959 | Medium | 1.7% | 02 Jun, 2018 | Go k8s.io/kubernetes |
Information Exposure on Case Insensitive File Systems in serve CVE-2018-3809, GHSA-686g-3xr3-x4x6 | Medium | 1.0% | 01 Jun, 2018 | npm serve |
Cross-Site Scripting in sexstatic CVE-2018-3755, GHSA-qfh2-6f7q-gr86 | Medium | 0.9% | 01 Jun, 2018 | npm sexstatic |
Open Redirect in hekto CVE-2018-3743, GHSA-qmm9-x5gr-4gfm | Medium | 0.9% | 01 Jun, 2018 | npm hekto |
Directory Traversal in bitty CVE-2016-10561, GHSA-f5mh-hq6h-whxv | Medium | 1.4% | 31 May, 2018 | npm bitty |
Cross-Site Scripting in nunjucks CVE-2016-10547, GHSA-f7ph-p5rv-phw2 | Medium | 1.4% | 31 May, 2018 | npm nunjucks |
Route Validation Bypass in call CVE-2016-10543, GHSA-84fv-prrc-5ggr | Medium | 1.2% | 31 May, 2018 | npm call |
Cross-Site Scripting in backbone CVE-2016-10537, GHSA-j6p2-cx3w-6jcp | Medium | 0.7% | 31 May, 2018 | npm backbone |
Insecure Defaults Allow MITM Over TLS in engine.io-client CVE-2016-10536, GHSA-4r4m-hjwj-43p8 | Medium | 1.0% | 31 May, 2018 | npm engine.io-client |
SSL Validation Defaults to False in electron-packager CVE-2016-10534, GHSA-q43m-ffwr-rpcc | Medium | 0.9% | 31 May, 2018 | npm electron-packager |
Sanitization bypass using HTML Entities in marked CVE-2016-10531, GHSA-vfvf-mqq8-rwqc | Medium | 1.4% | 31 May, 2018 | npm marked |
Insecure Default Configuration in airbrake CVE-2016-10530, GHSA-856x-cp3q-47vg | Medium | 1.3% | 31 May, 2018 | npm airbrake |
Directory Traversal in restafary CVE-2016-10528, GHSA-xg5r-8j97-2wrj | Medium | 1.2% | 31 May, 2018 | npm restafary |
Incorrect handling of CORS preflight request headers in hapi CVE-2015-9236, GHSA-vwrf-r5r4-7775 | Medium | 1.5% | 31 May, 2018 | npm hapi |
Sinatra Cross-site Scripting vulnerability CVE-2018-11627, GHSA-mq35-wqvf-r23c | Medium | 2.1% | 31 May, 2018 | RubyGems sinatra |
Cross-Site Scripting in i18next CVE-2017-16010, GHSA-cmh5-qc8w-xvcq | Medium | 1.0% | 29 May, 2018 | npm i18next |
Unsafe Merging of CORS Configuration Conflict in hapi CVE-2015-9243, GHSA-j3g2-m5jj-6336 | Medium | 1.0% | 29 May, 2018 | npm hapi |
Validation Bypass in paypal-ipn CVE-2014-10067, GHSA-h698-r4hm-w94p | Medium | 1.1% | 29 May, 2018 | npm paypal-ipn |
OpenCart Path Traversal CVE-2018-11495, GHSA-qgrf-34hp-ghm9 | Medium | 1.6% | 26 May, 2018 | Packagist opencart/opencart |
Moodle Cross-site Scripting CVE-2018-1136, GHSA-xhfw-wjjc-4j5h | Medium | 1.0% | 25 May, 2018 | Packagist moodle/moodle |
Moodle Portfolio forum caller class allows a user to download any file CVE-2018-1135, GHSA-vxmv-74rf-vqgp | Medium | 1.3% | 25 May, 2018 | Packagist moodle/moodle |
Moodle Improper Privilege Management CVE-2018-1134, GHSA-xjx9-7c29-pwmm | Medium | 1.1% | 25 May, 2018 | Packagist moodle/moodle |
Dolibarr Cross-site scripting (XSS) vulnerability CVE-2018-10095, GHSA-p2fm-8rhj-58fr | Medium | 86.5% | 22 May, 2018 | Packagist dolibarr/dolibarr |
Cross-Site Scripting in @ckeditor/ckeditor5-link CVE-2018-11093, GHSA-gvpx-9459-w3mj | Medium | 1.0% | 22 May, 2018 | npm @ckeditor/ckeditor5-link |
Joomla! XSS Vulnerability CVE-2018-11326, GHSA-g3m5-vvj7-xrwv | Medium | 1.0% | 22 May, 2018 | Packagist joomla/joomla-cms |
GeniXCMS Cross-site scripting (XSS) vulnerability CVE-2017-14740, GHSA-478j-mcrr-3877 | Medium | 0.6% | 26 Apr, 2018 | Packagist genix/cms |
User Plugin for October CSS Allows XSS CVE-2018-10366, GHSA-x5jc-34xf-c24q | Medium | 2.4% | 25 Apr, 2018 | Packagist rainlab/user-plugin |
Cross-site Scripting in Parsedown CVE-2018-1000162, GHSA-qgpv-86r3-87fh | Medium | 1.2% | 18 Apr, 2018 | Packagist erusev/parsedown |
Cross-Site Scripting in @risingstack/protect CVE-2018-1000160, GHSA-vpch-rxw3-fgx8 | Medium | 1.3% | 18 Apr, 2018 | npm @risingstack/protect |
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS) CVE-2018-9861, DRUPAL-CORE-2018-003, GHSA-g78h-pf65-46rv | Medium | 1.7% | 18 Apr, 2018 | Packagist drupal/core Packagist drupal/drupal npm ckeditor-dev |
XSS vulnerability in theme config file in Mautic CVE-2018-8071, GHSA-5w74-jx7m-x6hv | Medium | 0.8% | 18 Apr, 2018 | Packagist mautic/core |
Dolibarr Cross-Site Scripting (XSS) vulnerability CVE-2017-9838, GHSA-726g-cgcq-4xw8 | Medium | 0.6% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-18259, GHSA-4323-cfj5-98mh | Medium | 0.6% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Typo3 XSS Vulnerability CVE-2018-6905, GHSA-3w22-wrwx-2r75 | Medium | 2.2% | 08 Apr, 2018 | Packagist typo3/cms |
Uncontrolled resource consumption in nokogiri CVE-2017-18258, GHSA-882p-jqgm-f45g | Medium | 2.7% | 08 Apr, 2018 | RubyGems nokogiri |
Gleez CMS Stored XSS CVE-2018-7035, GHSA-m2r2-qc49-gqw4 | Medium | 0.9% | 05 Apr, 2018 | Packagist gleez/cms |
Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script CVE-2018-1081, GHSA-v9xq-vh72-chr4 | Medium | 1.4% | 04 Apr, 2018 | Packagist moodle/moodle |
DNS Rebinding in etcd CVE-2018-1099, GHSA-wf43-55jj-vwq8 | Medium | 0.5% | 03 Apr, 2018 | Go go.etcd.io/etcd |
rails-html-sanitizer Cross-site Scripting vulnerability CVE-2018-3741, GHSA-px3r-jm9g-c8w8 | Medium | 1.3% | 30 Mar, 2018 | RubyGems rails-html-sanitizer |
Cisco IOS Software Denial-of-Service Vulnerability CVE-2018-0180 | MediumExploited | 4.9% | 28 Mar, 2018 | |
Cisco IOS Software Denial-of-Service Vulnerability CVE-2018-0179 | MediumExploited | 4.9% | 28 Mar, 2018 | |
Cisco IOS Software Resource Management Errors Vulnerability CVE-2018-0161 | MediumExploited | 4.1% | 28 Mar, 2018 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2018-6882 | MediumExploited | 29.8% | 27 Mar, 2018 | |
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability CVE-2017-12319 | MediumExploited | 5.2% | 27 Mar, 2018 |