Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
install-nw downloads Resources over HTTP CVE-2016-10566, GHSA-wq7q-7vfh-2x3h | High | 1.6% | 29 May, 2018 | npm install-nw |
Downloads Resources over HTTP in selenium-download CVE-2016-10559, GHSA-2mvm-66q7-m256 | High | 1.7% | 29 May, 2018 | npm selenium-download |
Downloads Resources over HTTP in aerospike CVE-2016-10558, GHSA-v5v3-8jqf-vg27 | High | 1.7% | 29 May, 2018 | npm aerospike |
SQL Injection in sequelize CVE-2016-10556, GHSA-9c2p-jw8p-f84v | High | 1.3% | 29 May, 2018 | npm sequelize |
Denial of Service in ecstatic CVE-2015-9242, GHSA-vwjc-q9px-r9vq | High | 2.0% | 29 May, 2018 | npm ecstatic |
Denial of Service in hapi CVE-2015-9241, GHSA-rc8h-3fv6-pxv8 | High | 2.1% | 29 May, 2018 | npm hapi |
Authentication Weakness in keystone CVE-2015-9240, GHSA-39pj-gq8q-9pfj | High | 0.9% | 29 May, 2018 | npm keystone |
Hidden Directories Always Served in inert CVE-2014-10068, GHSA-g4xp-36c3-f7mr | High | 1.9% | 29 May, 2018 | npm inert |
OpenCart Path Traversal CVE-2018-11494, GHSA-wx3q-f5f2-4q8v | High | 2.3% | 26 May, 2018 | Packagist opencart/opencart |
Moodle Portfolio script allows instantiation of class chosen by user CVE-2018-1137, GHSA-vxqh-mx28-7ghw | High | 1.7% | 25 May, 2018 | Packagist moodle/moodle |
Moodle calculated question type allows remote code execution by Question authors CVE-2018-1133, GHSA-xh2j-q4mc-v522 | High | 30.8% | 25 May, 2018 | Packagist moodle/moodle |
Dolibarr arbitrary commands execution CVE-2018-10092, GHSA-6j62-m2vv-wc3m | High | 2.0% | 22 May, 2018 | Packagist dolibarr/dolibarr |
Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding CVE-2018-7160, GHSA-wq4c-wm6x-jw44 | High | 9.5% | 17 May, 2018 | npm node-inspector |
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability CVE-2018-8174 | HighExploited | 88.2% | 09 May, 2018 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2018-8120 | HighExploited | 73.3% | 09 May, 2018 | |
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability CVE-2018-0824 | HighExploited | 73.0% | 09 May, 2018 | |
oslo.middleware Information Disclosure vulnerability CVE-2017-2592, GHSA-xcp8-hh74-f6mc, PYSEC-2018-104 | High | 0.4% | 08 May, 2018 | PyPI oslo-middleware PyPI oslo.middleware |
Matrix Synapse DoS CVE-2018-10657, GHSA-vmcc-4p4x-x7wg, PYSEC-2026-846 | High | 1.5% | 02 May, 2018 | PyPI matrix-synapse |
phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution CVE-2018-10188, GHSA-v6fp-h79x-9rqc | High | 4.1% | 19 Apr, 2018 | Packagist phpmyadmin/phpmyadmin |
LightSAML Incorrect Access Control vulnerability CVE-2018-1000165, GHSA-vg4f-8v9q-5c3x | High | 1.2% | 18 Apr, 2018 | Packagist lightsaml/lightsaml |
tlslite-ng off-by-one error on mac checking CVE-2018-1000159, GHSA-cwh5-3cw7-4286, PYSEC-2018-31 | High | 0.8% | 18 Apr, 2018 | PyPI tlslite-ng |
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers CVE-2018-1000164, GHSA-32pc-xphx-q4f6, PYSEC-2018-55 | High | 2.4% | 18 Apr, 2018 | PyPI gunicorn |
OISF suricata-update unsafely deserializes YAML data CVE-2018-1000167, GHSA-7c4h-w765-6pwg, PYSEC-2018-75 | High | 4.0% | 18 Apr, 2018 | PyPI suricata-update |
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID CVE-2018-10189, GHSA-vfxj-qg93-7wwc | High | 1.1% | 17 Apr, 2018 | Packagist mautic/core |
TIBCO JasperReports Server Information Disclosure Vulnerability CVE-2018-5430 | HighExploited | 48.1% | 17 Apr, 2018 | |
Tryton vulnerable to arbitrary command execution CVE-2014-6633, GHSA-m9jj-5qvj-5fhx, PYSEC-2018-59, PYSEC-2026-3390 | High | 2.6% | 12 Apr, 2018 | PyPI tryton PyPI trytond |
JSNAPy allows unprivileged local users to alter files under the directory CVE-2018-0023, GHSA-qc55-vm3j-74gp, PYSEC-2018-84 | High | 0.3% | 11 Apr, 2018 | PyPI jsnapy |
Dolibarr SQL injection via type parameter in product/stats/card.php CVE-2017-9839, GHSA-84gh-4m36-cgqx | High | 1.0% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability CVE-2017-18260, GHSA-9986-6m4g-25f6 | High | 1.0% | 11 Apr, 2018 | Packagist dolibarr/dolibarr |
Kotti CSRF in the local roles implementation CVE-2018-9856, GHSA-3hq4-f2v6-q338, PYSEC-2018-10 | High | 0.6% | 09 Apr, 2018 | PyPI Kotti PyPI kotti |
Moodle Improper Authentication CVE-2018-1082, GHSA-qh8m-6g4p-33h3 | High | 2.0% | 04 Apr, 2018 | Packagist moodle/moodle |
Cross-Site Request Forgery (CSRF) in Auth0 CVE-2018-6874, GHSA-wv26-rj8c-4r33 | High | 0.7% | 04 Apr, 2018 | npm auth0-js |
etcd Cross-site Request Forgery (CSRF) CVE-2018-1098, GHSA-5gjm-fj42-x983 | High | 1.2% | 03 Apr, 2018 | Go go.etcd.io/etcd/v3 |
Docker Notary Signature Algorithm Not Matched to Key vulnerability CVE-2015-9258, GHSA-785h-hrf7-gqxc | High | 1.0% | 31 Mar, 2018 | Go github.com/docker/notary |
Prototype Pollution in hoek CVE-2018-3728, GHSA-jp4x-w63m-7wgm | High | 4.2% | 30 Mar, 2018 | npm hoek |
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability CVE-2018-0175 | HighExploited | 3.5% | 28 Mar, 2018 | |
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability CVE-2018-0174 | HighExploited | 7.6% | 28 Mar, 2018 | |
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability CVE-2018-0173 | HighExploited | 7.6% | 28 Mar, 2018 | |
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability CVE-2018-0172 | HighExploited | 7.8% | 28 Mar, 2018 | |
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability CVE-2018-0167 | HighExploited | 3.4% | 28 Mar, 2018 | |
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability CVE-2018-0159 | HighExploited | 6.9% | 28 Mar, 2018 | |
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability CVE-2018-0158 | HighExploited | 7.2% | 28 Mar, 2018 | |
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability CVE-2018-0156 | HighExploited | 9.4% | 28 Mar, 2018 | |
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability CVE-2018-0155 | HighExploited | 7.7% | 28 Mar, 2018 | |
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability CVE-2018-0154 | HighExploited | 7.1% | 28 Mar, 2018 | |
QuickAppsCMS Cross-Site Request Forgery (CSRF) CVE-2018-9108, GHSA-62g2-8p9f-ghjp | High | 0.8% | 28 Mar, 2018 | Packagist quickapps/cms |
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0 CVE-2018-8947, GHSA-63qj-p8gh-5xxx | High | 11.0% | 25 Mar, 2018 | Packagist rap2hpoutre/laravel-log-viewer |
Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration CVE-2018-1000136, GHSA-8xwg-wv7v-4vqp | High | 5.1% | 23 Mar, 2018 | npm electron |
Yii Framework Code Injection CVE-2018-8074, GHSA-m2p5-fwp2-qcw2 | High | 1.5% | 21 Mar, 2018 | Packagist yiisoft/yii2-dev Packagist yiisoft/yii2-elasticsearch |
Sanitize vulnerable to Improper Input Validation and Cross-site Scripting CVE-2018-3740, GHSA-7f42-p84j-f58p | High | 1.5% | 21 Mar, 2018 | RubyGems sanitize |