Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle Cross-Site Request Forgery (CSRF) CVE-2017-7491, GHSA-3hmr-948v-5qgq | Medium | 0.5% | 15 May, 2017 | Packagist moodle/moodle |
Moodle Unauthorized searching of arbitrary blogs by typing full url CVE-2017-7490, GHSA-9x63-m3cc-qf3g | Medium | 1.0% | 15 May, 2017 | Packagist moodle/moodle |
Moodle External blog editing takeover CVE-2017-7489, GHSA-m34m-fgh4-v7cx | Medium | 1.2% | 15 May, 2017 | Packagist moodle/moodle |
baserCMS Cross-site Scripting vulnerability CVE-2016-4880, GHSA-mxfv-c8p8-qw5h | Medium | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
ADOdb Cross-site scripting vulnerability in old test script CVE-2016-4855, GHSA-hhfw-xxhm-pf32 | Medium | 1.9% | 12 May, 2017 | Packagist adodb/adodb-php |
Dolibarr allows password changes without supplying the current password CVE-2017-8879, GHSA-5x4j-xcmv-v3q2 | Medium | 0.4% | 10 May, 2017 | Packagist dolibarr/dolibarr |
Dolibarr ERP and CRM contain XSS Vulnerability CVE-2017-7887, GHSA-x2fq-gq6c-hp44 | Medium | 0.9% | 10 May, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS Cross-site Scripting CVE-2017-8780, GHSA-5hf2-7xf4-w3j6 | Medium | 0.6% | 04 May, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) CVE-2017-8762, GHSA-4399-46r4-5rmv | Medium | 0.5% | 03 May, 2017 | Packagist genix/cms |
rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects CVE-2016-4442, GHSA-j5hj-fhc9-g24m | Medium | 1.6% | 02 May, 2017 | RubyGems rack-mini-profiler |
GeniXCMS Mailbox validation logic vulnerability CVE-2017-8388, GHSA-559c-w54x-8342 | Medium | 1.6% | 01 May, 2017 | Packagist genix/cms |
GeniXCMS Cross-site Scripting (XSS) CVE-2017-8376, GHSA-52xr-wx26-9rfg | Medium | 0.6% | 01 May, 2017 | Packagist genix/cms |
Craft CMS subject to URL forgery CVE-2017-8385, GHSA-j27g-r58q-624w | Medium | 1.0% | 01 May, 2017 | Packagist craftcms/cms |
Craft CMS XSS Vulnerability CVE-2017-8384, GHSA-9mcw-mwxv-grwj | Medium | 0.8% | 01 May, 2017 | Packagist craftcms/cms |
Craft CMS Unauthorized View CVE-2017-8383, GHSA-7qq6-fgpw-xw45 | Medium | 1.2% | 01 May, 2017 | Packagist craftcms/cms |
Canvs Canvas Cross-site Scripting (XSS) via title and content fields CVE-2017-8298, GHSA-3657-q433-mmpx | Medium | 0.6% | 27 Apr, 2017 | Packagist austintoddj/canvas |
Craft CMS XSS Vulnerability CVE-2017-8052, GHSA-xv5f-2997-qhrq | Medium | 0.8% | 22 Apr, 2017 | Packagist craftcms/cms |
Openstack Manila Persistent XSS in Metadata field CVE-2016-6519, GHSA-vq76-5ghr-9p4v, PYSEC-2026-662 | Medium | 1.5% | 21 Apr, 2017 | PyPI manila-ui |
Moodle Improper Access Control CVE-2016-3733, GHSA-gr8j-qm8r-rfgg | Medium | 1.2% | 20 Apr, 2017 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-3732, GHSA-5282-96ff-xx3h | Medium | 1.5% | 20 Apr, 2017 | Packagist moodle/moodle |
Moodle Improper Access Control CVE-2016-3729, GHSA-g96h-wvrm-c2ww | Medium | 1.3% | 20 Apr, 2017 | Packagist moodle/moodle |
MantisBT XSS via my_view_page.php and view_user_page.php CVE-2017-7897, GHSA-8r2m-qhff-jm2c | Medium | 1.8% | 18 Apr, 2017 | Packagist mantisbt/mantisbt |
Concrete CMS vulnerable to cross-site scripting (XSS) CVE-2017-7725, GHSA-2mvg-c6mg-3q63 | Medium | 2.8% | 13 Apr, 2017 | Packagist concrete5/concrete5 |
ember-source Cross-site Scripting vulnerability CVE-2015-7565, GHSA-m3q7-rj8g-m457 | Medium | 0.8% | 13 Apr, 2017 | RubyGems ember-source |
Salt improper handling of tmp files CVE-2015-1838, GHSA-92pw-mff9-jqgm, PYSEC-2017-29 | Medium | 0.4% | 13 Apr, 2017 | PyPI salt |
SaltStack has insecure /tmp file handling in salt/modules/chef.py CVE-2015-1839, GHSA-6grp-75pq-c8cj, PYSEC-2017-30 | Medium | 0.4% | 13 Apr, 2017 | PyPI salt |
TeamPass vulnerable to Cross-site Scripting CVE-2015-7562, GHSA-48q3-m4hf-56c9 | Medium | 1.8% | 12 Apr, 2017 | Packagist nilsteampassnet/teampass |
Improper Input Validation in OpenCV CVE-2016-1517, GHSA-fffj-9qwg-qmh5, PYSEC-2026-2817, PYSEC-2026-708 | Medium | 1.1% | 10 Apr, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Tryton Information Disclosure Vulnerability CVE-2017-0360, GHSA-7cwg-2575-3546, PYSEC-2017-97 | Medium | 1.5% | 04 Apr, 2017 | PyPI trytond |
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs CVE-2017-7233, GHSA-37hp-765x-j95x, PYSEC-2017-9 | Medium | 2.4% | 04 Apr, 2017 | PyPI Django PyPI django |
Django open redirect CVE-2017-7234, GHSA-h4hv-m4h4-mhwg, PYSEC-2017-10 | Medium | 1.8% | 04 Apr, 2017 | PyPI django |
OpenStack Horizon Cross-site Scripting (XSS) CVE-2017-7400, GHSA-47vp-44v9-rhgq, PYSEC-2026-821 | Medium | 1.1% | 03 Apr, 2017 | PyPI horizon |
Magmi XSS Vulnerability CVE-2017-7391, GHSA-r8vh-cm9f-rc29 | Medium | 8.3% | 01 Apr, 2017 | Packagist dweeves/magmi |
SocialNetwork Cross-Site Scripting (XSS) vulnerability CVE-2017-7390, GHSA-3fm8-7gpf-p8fm | Medium | 0.6% | 01 Apr, 2017 | Packagist movingbytes/social-network |
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php CVE-2017-7309, GHSA-4w6c-3hcx-rfj5 | Medium | 63.3% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
MantisBT XSS via move_attachments_page.php CVE-2017-7241, GHSA-x53v-v9xp-gf6g | Medium | 0.9% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
MantisBT XSS via adm_config_report.php's action parameter CVE-2017-6973, GHSA-v7qf-22rw-chph | Medium | 0.9% | 31 Mar, 2017 | Packagist mantisbt/mantisbt |
OpenStack Glance Signature Verification Bypass CVE-2015-8234, GHSA-wmhw-fvg9-87fc, PYSEC-2017-143 | Medium | 1.3% | 29 Mar, 2017 | PyPI glance |
Moodle Cross-site Scripting in the Course summary filter of the Add a new course CVE-2017-7298, GHSA-4m6v-x9fj-847j | Medium | 0.8% | 29 Mar, 2017 | Packagist moodle/moodle |
Yii Framework Reflected XSS CVE-2017-7271, GHSA-4xh9-5vh8-3p58 | Medium | 1.0% | 27 Mar, 2017 | Packagist yiisoft/yii2 |
Cherry Music directory traversal vulnerability CVE-2015-8309, GHSA-q624-9634-77gh, PYSEC-2017-99 | Medium | 6.7% | 27 Mar, 2017 | PyPI CherryMusic PyPI cherrymusic |
Cherry Music Cross-site Scripting (XSS) vulnerability CVE-2015-8310, GHSA-4wcc-jv3p-prqw, PYSEC-2017-100 | Medium | 0.8% | 27 Mar, 2017 | PyPI CherryMusic PyPI cherrymusic |
Moodle XSS in attachments to evidence of prior learning CVE-2017-2645, GHSA-9cg4-4f87-jhm3 | Medium | 1.1% | 26 Mar, 2017 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2017-2644, GHSA-93gj-rg98-h7mm | Medium | 1.1% | 26 Mar, 2017 | Packagist moodle/moodle |
Moodle Global search displays user names for unauthenticated users CVE-2017-2643, GHSA-98mf-mqw9-9q8q | Medium | 1.6% | 26 Mar, 2017 | Packagist moodle/moodle |
Netflix Security Monkey Open Redirect vulnerability CVE-2017-7266, GHSA-j6jq-3q8p-xgg6, PYSEC-2026-919 | Medium | 1.0% | 26 Mar, 2017 | PyPI security-monkey PyPI security_monkey |
Pi Cross-site Scripting vulnerability CVE-2017-7251, GHSA-9v3w-m552-m6ff | Medium | 1.0% | 23 Mar, 2017 | Packagist pi/pi |
Plone Sandbox Escape CVE-2017-5524, GHSA-p5wr-vp8g-q5p4, PYSEC-2017-81 | Medium | 1.9% | 23 Mar, 2017 | PyPI Plone PyPI plone |
imdbphp Cross-Site Scripting (XSS) CVE-2017-7204, GHSA-8jxq-gpmr-h4g4 | Medium | 0.7% | 21 Mar, 2017 | Packagist imdbphp/imdbphp |
OpenStack Glance Server-Side Request Forgery (SSRF) CVE-2017-7200, GHSA-j6mr-cm6x-h6jg, PYSEC-2026-814 | Medium | 2.1% | 21 Mar, 2017 | PyPI glance |