Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Glance Server-Side Request Forgery (SSRF) CVE-2017-7200, GHSA-j6mr-cm6x-h6jg, PYSEC-2026-814 | Medium | 2.1% | 21 Mar, 2017 | PyPI glance |
TYPO3 Information Disclosure Vulnerability CVE-2017-6370, GHSA-87hc-phmj-rhgh | Medium | 1.0% | 17 Mar, 2017 | Packagist typo3/cms |
BuddyPress Docs plugin Improper Privilege Management CVE-2017-6954, GHSA-9wf6-88x4-6xvj | Medium | 1.1% | 17 Mar, 2017 | Packagist buddypress/buddypress |
Microsoft Internet Explorer Information Disclosure Vulnerability CVE-2017-0059 | MediumExploited | 62.0% | 17 Mar, 2017 | |
Microsoft XML Core Services Information Disclosure Vulnerability CVE-2017-0022 | MediumExploited | 18.1% | 17 Mar, 2017 | |
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText CVE-2016-7103, GHSA-hpcf-8vf9-q4gj | Medium | 29.2% | 15 Mar, 2017 | Maven org.webjars.npm:jquery-ui NuGet jQuery.UI.Combined RubyGems jquery-ui-rails npm jquery-ui |
Weblate user account enumeration via reset password form CVE-2017-5537, GHSA-j24g-gm76-j829, PYSEC-2017-42 | Medium | 2.4% | 15 Mar, 2017 | PyPI weblate |
django-epiceditor vulnerable to XSS in form field CVE-2017-6591, GHSA-xp5m-4c9f-498q, PYSEC-2017-86 | Medium | 0.8% | 09 Mar, 2017 | PyPI django-epiceditor |
EpicEditor XSS Vulnerability CVE-2017-6589, GHSA-4wc5-gfgh-4vjx | Medium | 0.7% | 09 Mar, 2017 | npm epiceditor |
Cloudera HUE Account Enumeration CVE-2016-4947, GHSA-rxfp-8jmr-xc95 | Medium | 1.3% | 07 Mar, 2017 | npm gethue |
Plone vulnerable to filesystem information leak CVE-2016-7135, GHSA-m7f9-65wr-pwch, PYSEC-2017-58 | Medium | 2.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Plone XSS CVE-2016-7136, GHSA-22jm-p2vv-j2hc, PYSEC-2017-59 | Medium | 1.6% | 07 Mar, 2017 | PyPI plone |
Plone Open Redirect Vulnerability CVE-2016-7137, GHSA-69vh-662j-v988, PYSEC-2017-60 | Medium | 1.7% | 07 Mar, 2017 | PyPI plone |
Plone XSS CVE-2016-7138, GHSA-v3hp-f8qr-cf3p, PYSEC-2017-61 | Medium | 1.6% | 07 Mar, 2017 | PyPI plone |
Plone Cross-site Scripting (XSS) vulnerability CVE-2016-7139, GHSA-pp4c-2692-7f37, PYSEC-2017-62 | Medium | 1.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Plone vulnerable to Cross-site Scripting CVE-2016-7140, GHSA-chvw-gjxf-f8mc, PYSEC-2017-63 | Medium | 1.6% | 07 Mar, 2017 | PyPI Plone PyPI plone |
Silverstripe CMS XSS Vulnerability CVE-2017-5197, GHSA-xmjh-wjc5-wg4h | Medium | 0.8% | 06 Mar, 2017 | Packagist silverstripe/cms |
INTER-Mediator Cross-Site Scripting (XSS) CVE-2017-6484, GHSA-w969-pq6x-267j | Medium | 0.7% | 05 Mar, 2017 | Packagist inter-mediator/inter-mediator |
Plone vulnerable to unauthorized disclosure of site content CVE-2016-4042, GHSA-v4vj-49m5-wjhw, PYSEC-2017-56 | Medium | 1.1% | 24 Feb, 2017 | PyPI Plone PyPI plone |
Chameleon in Plone allows Authentication Bypass CVE-2016-4043, GHSA-6h8x-73fx-q2h9, PYSEC-2017-57 | Medium | 1.0% | 24 Feb, 2017 | PyPI Plone PyPI plone |
PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability CVE-2017-6099, GHSA-p4g7-wjhq-9r2h | Medium | 1.2% | 24 Feb, 2017 | Packagist paypal/merchant-sdk-php |
Improper Neutralization of Input During Web Page Generation in html5lib CVE-2016-9909, GHSA-v9v9-xffq-rwr4, PYSEC-2017-14 | Medium | 2.2% | 22 Feb, 2017 | PyPI html5lib |
Cross-site Scripting in html5lib CVE-2016-9910, GHSA-8f6m-gfq9-g33v, PYSEC-2017-15 | Medium | 2.2% | 22 Feb, 2017 | PyPI html5lib |
MantisBT XSS through weak CSP when using Gravatar plugin CVE-2016-7111, GHSA-8vx9-hcvq-gfv8 | Medium | 1.0% | 17 Feb, 2017 | Packagist mantisbt/mantisbt |
Incorrect signature verification in SimpleSAMLphp CVE-2016-9955, GHSA-p9cm-r7jg-8q3g | Medium | 1.2% | 17 Feb, 2017 | Packagist simplesamlphp/simplesamlphp |
User Impersonation in converse.js CVE-2017-5858, GHSA-w973-2qcc-p78x | Medium | 0.9% | 09 Feb, 2017 | npm converse.js |
XMPP Clients User Impersonation Vulnerability in Movim Moxl CVE-2017-5605, GHSA-hq38-v658-g3wp | Medium | 0.9% | 09 Feb, 2017 | Packagist movim/moxl |
SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons CVE-2017-5591, GHSA-c35g-jr5f-h83p, PYSEC-2017-103, PYSEC-2017-104 | Medium | 1.7% | 09 Feb, 2017 | PyPI SleekXMPP PyPI sleekxmpp PyPI slixmpp |
SimpleSAMLphp Information leakage issue in the sanitycheck module CVE-2016-3124, GHSA-9327-mqm6-x97j | Medium | 1.3% | 07 Feb, 2017 | Packagist simplesamlphp/simplesamlphp |
Plone XSS in Zope ZMI CVE-2016-7147, GHSA-84jm-cpc5-c7g7, PYSEC-2017-64 | Medium | 1.3% | 04 Feb, 2017 | PyPI plone |
Information Exposure in RunC CVE-2016-9962, GHSA-gp4j-w3vj-7299, GO-2022-0835 | Medium | 0.4% | 31 Jan, 2017 | Go github.com/opencontainers/runc |
Salt Insecure configuration of PAM external authentication service CVE-2016-3176, GHSA-v2rp-9cpj-pfw2, PYSEC-2017-33 | Medium | 0.9% | 31 Jan, 2017 | PyPI salt |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-9119, GHSA-5fq5-pfv8-mrfv, PYSEC-2017-20 | Medium | 1.5% | 30 Jan, 2017 | PyPI moin |
TYPO3 Backend component Cross-site scripting (XSS) vulnerability CVE-2016-4056, GHSA-ffcm-vhcw-p32r | Medium | 1.1% | 23 Jan, 2017 | Packagist typo3/cms |
Regular Expression Denial of Service in moment CVE-2016-4055, GHSA-87vv-r9j6-g5qv | Medium | 9.9% | 23 Jan, 2017 | npm moment |
Cross-Site Scripting in handlebars CVE-2015-8861, GHSA-9prh-257w-9277 | Medium | 2.6% | 23 Jan, 2017 | npm handlebars |
Root Path Disclosure in send CVE-2015-8859, GHSA-jgqf-hwc5-hh37 | Medium | 4.7% | 23 Jan, 2017 | npm send |
Cross-Site Scripting in serve-index CVE-2015-8856, GHSA-v633-x5vv-hqwc | Medium | 2.5% | 23 Jan, 2017 | npm serve-index |
XSS Filter Bypass via Encoded URL in validator CVE-2014-9772, GHSA-79mx-88w7-8f7q | Medium | 2.6% | 23 Jan, 2017 | npm validator |
Multiple XSS Filter Bypasses in validator CVE-2013-7454, GHSA-q4qq-fm7q-cwp5 | Medium | 1.8% | 23 Jan, 2017 | npm validator |
Moderate severity vulnerability that affects validator CVE-2013-7453, GHSA-552w-rqg8-gxxm | Medium | 1.8% | 23 Jan, 2017 | npm validator |
Moderate severity vulnerability that affects validator CVE-2013-7452, GHSA-rh6c-q938-3r9q | Medium | 2.0% | 23 Jan, 2017 | npm validator |
Moderate severity vulnerability that affects validator CVE-2013-7451, GHSA-qpjp-7rp2-9c3f | Medium | 1.8% | 23 Jan, 2017 | npm validator |
Moodle Cross-site Scripting in assignment submission page CVE-2017-2578, GHSA-6r76-f8c8-fh7p | Medium | 0.9% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Incorrect sanitation of attributes in forums CVE-2017-2576, GHSA-cjrf-xg77-chpw | Medium | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Unauthenticated Access CVE-2016-8642, GHSA-x32v-7qw8-cpq8 | Medium | 1.2% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-5014, GHSA-c4cq-v4wp-28hg | Medium | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Does Not Escape Characters In Email Headers CVE-2016-5013, GHSA-2hh3-jmv8-5fmx | Medium | 1.1% | 20 Jan, 2017 | Packagist moodle/moodle |
Moodle Glossary search displays entries without checking user permissions to view them CVE-2016-5012, GHSA-g58x-p3pj-rg52 | Medium | 1.1% | 20 Jan, 2017 | Packagist moodle/moodle |
Local file disclosure in PHPMailer CVE-2017-5223, GHSA-4x5h-cr29-fhp6 | Medium | 2.1% | 16 Jan, 2017 | Packagist phpmailer/phpmailer |