Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Sanic arbitrary file read and directory traversal CVE-2017-16762, GHSA-mpmf-hr8p-p49g, PYSEC-2017-40 | High | 2.5% | 10 Nov, 2017 | PyPI sanic |
Roundcube Webmail File Disclosure Vulnerability CVE-2017-16651 | HighExploited | 45.7% | 09 Nov, 2017 | |
SoSReport Predictable Tmp File Names CVE-2015-7529, GHSA-3g56-2hh3-35ph, PYSEC-2017-73 | High | 0.4% | 06 Nov, 2017 | PyPI sosreport |
Cross-Site Request Forgery (CSRF) in keystone CVE-2017-16570, GHSA-q43c-g2g7-6gxj | High | 2.2% | 06 Nov, 2017 | npm keystone |
yajl-ruby gem Denial of Service vulnerability CVE-2017-16516, GHSA-wwh7-4jw9-33x6 | High | 3.8% | 03 Nov, 2017 | RubyGems yajl-ruby |
October CMS CSRF CVE-2017-16244, GHSA-vm6r-4p4v-232x | High | 2.0% | 01 Nov, 2017 | Packagist october/october |
Ox gem crashes due to a crafted input CVE-2017-15928, GHSA-pjj4-w39g-pw54 | High | 1.7% | 27 Oct, 2017 | RubyGems ox |
Google Chromium V8 Type Confusion Vulnerability CVE-2017-5070 | HighExploited | 32.1% | 27 Oct, 2017 | |
Keystone is vulnerable to CSV injection CVE-2017-15879, GHSA-6494-v9fq-fgq2 | High | 7.2% | 24 Oct, 2017 | npm keystone |
SaltStack Salt Denial of Service via a crafted authentication request CVE-2017-14696, GHSA-657p-cj5r-mjrh, PYSEC-2017-37 | High | 3.8% | 24 Oct, 2017 | PyPI salt |
Directory Traversal in st CVE-2014-3744, GHSA-69rr-wvh9-6c4q | High | 34.0% | 23 Oct, 2017 | npm st |
Potential Command Injection in codem-transcode CVE-2013-7377, GHSA-rph7-j9qr-h8q8 | High | 2.0% | 23 Oct, 2017 | npm codem-transcode |
Adobe Flash Player Type Confusion Vulnerability CVE-2017-11292 | HighExploited | 11.2% | 22 Oct, 2017 | |
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability CVE-2017-10271 | HighExploited | 100.0% | 19 Oct, 2017 | |
gollum and gollum-lib allow remote authenticated users to execute arbitrary code CVE-2014-9489, GHSA-q97v-764g-r2rp | High | 2.9% | 17 Oct, 2017 | RubyGems gollum RubyGems gollum-lib |
Luracast Restler directory traversal vulnerability CVE-2017-15363, GHSA-rvmg-xc29-rvxf | High | 15.3% | 15 Oct, 2017 | Packagist aoe/restler Packagist luracast/restler |
Microsoft Office Remote Code Execution Vulnerability CVE-2017-11826 | HighExploited | 82.2% | 13 Oct, 2017 | |
Microsoft Office Outlook Security Feature Bypass Vulnerability CVE-2017-11774 | HighExploited | 59.6% | 13 Oct, 2017 | |
Zend Framework Information Disclosure CVE-2015-7503, GHSA-pm9m-w23q-5967 | High | 1.4% | 10 Oct, 2017 | Packagist zendframework/zend-crypt Packagist zendframework/zendframework |
Koji blacklisted paths workaround CVE-2017-1002153, GHSA-vwp5-w4rq-g4cc, PYSEC-2017-144 | High | 1.2% | 06 Oct, 2017 | PyPI koji |
Subrion CMS CSRF Vulnerability CVE-2017-15063, GHSA-rc94-7v55-wmg6 | High | 0.5% | 06 Oct, 2017 | Packagist intelliants/subrion |
Linux Kernel PIE Stack Buffer Corruption Vulnerability CVE-2017-1000253 | HighExploited | 10.7% | 05 Oct, 2017 | |
October CMS PHP Code Execution CVE-2017-1000119, GHSA-q263-j3q9-g964 | High | 61.3% | 05 Oct, 2017 | Packagist october/cms |
Denial of service when parsing large forms in mime/multipart CVE-2017-1000098, GO-2021-0172 | High | 2.1% | 05 Oct, 2017 | Go stdlib |
Mishandled trust preferences for root certificates on Darwin in crypto/x509 CVE-2017-1000097, GO-2022-0171 | High | 1.4% | 05 Oct, 2017 | Go stdlib |
Mercurial missing symlink check CVE-2017-1000115, GHSA-hvr9-wr9p-grgr, PYSEC-2017-88 | High | 4.9% | 05 Oct, 2017 | PyPI mercurial |
Regular Expression Denial of Service in tough-cookie CVE-2017-15010, GHSA-g7q5-pjjr-gqvp | High | 3.3% | 04 Oct, 2017 | npm tough-cookie |
Apache Tomcat Remote Code Execution Vulnerability CVE-2017-12617 | HighExploited | 100.0% | 04 Oct, 2017 | |
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability CVE-2017-12237 | HighExploited | 7.1% | 29 Sep, 2017 | |
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability CVE-2017-12235 | HighExploited | 7.1% | 29 Sep, 2017 | |
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability CVE-2017-12234 | HighExploited | 7.1% | 29 Sep, 2017 | |
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability CVE-2017-12233 | HighExploited | 7.1% | 29 Sep, 2017 | |
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability CVE-2017-12231 | HighExploited | 7.1% | 29 Sep, 2017 | |
GeniXCMS arbitrary PHP code execution CVE-2017-14764, GHSA-5cmg-8m8p-whmj | High | 1.5% | 27 Sep, 2017 | Packagist genix/cms |
GeniXCMS arbitrary PHP code execution CVE-2017-14763, GHSA-2f6r-892p-69g5 | High | 1.4% | 27 Sep, 2017 | Packagist genix/cms |
SaltStack Salt Authentication Bypass when using the local_batch client from salt-api CVE-2017-5192, GHSA-f2h7-4f84-8qrm, PYSEC-2017-38 | High | 1.7% | 26 Sep, 2017 | PyPI salt |
SaltStack Salt arbitrary command execution in Salt-api via ssh_client CVE-2017-5200, GHSA-8r7r-x48r-pf8f, PYSEC-2017-39 | High | 3.3% | 26 Sep, 2017 | PyPI salt |
Plone vulnerable to cross-site request forgery CVE-2015-7293, GHSA-p3qm-44cf-f8qx, PYSEC-2017-51 | High | 3.1% | 25 Sep, 2017 | PyPI Plone PyPI plone |
protobuf susceptible to buffer overflow CVE-2015-5237, GHSA-jwvw-v7c5-m82h, PYSEC-2017-150, PYSEC-2017-65 | High | 5.0% | 25 Sep, 2017 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-parent NuGet Google.Protobuf Packagist google/protobuf +1 more |
Plone unauthorized member addition vulnerability CVE-2015-7315, GHSA-984m-rj28-8c6x, PYSEC-2017-52, PYSEC-2026-2964 | High | 2.0% | 25 Sep, 2017 | PyPI Plone PyPI Products.CMFPlone PyPI plone PyPI products-cmfplone |
Plone Header Injection CVE-2015-7318, GHSA-fq9r-8jpm-2222, PYSEC-2017-54 | High | 1.7% | 25 Sep, 2017 | PyPI Plone PyPI plone |
Gem in a Box vulnerable to Cross-site Request Forgery CVE-2017-14683, GHSA-qwv2-2x8g-g43g | High | 0.5% | 25 Sep, 2017 | RubyGems geminabox |
Kallithea cross-site request forgery (CSRF) vulnerability CVE-2015-0276, GHSA-6fgp-29mf-chhc, PYSEC-2017-16 | High | 0.7% | 21 Sep, 2017 | PyPI Kallithea PyPI kallithea |
Access Restriction Bypass in go-ldap CVE-2017-14623, GHSA-x27w-qxhg-343v, GO-2022-0887 | High | 1.7% | 20 Sep, 2017 | Go github.com/go-ldap/ldap |
IPython vulnerable to cross site request forgery (CSRF) CVE-2015-5607, GHSA-7fc2-rm35-2pp7, PYSEC-2017-47 | High | 1.2% | 20 Sep, 2017 | PyPI ipython |
Ruby OpenSSL DoS Vulnerability CVE-2017-14033, GHSA-v6rp-3r3v-hf4p | High | 7.7% | 19 Sep, 2017 | RubyGems openssl |
WEBrick RCE Vulnerability CVE-2017-10784, GHSA-369m-2gv6-mw28 | High | 16.4% | 19 Sep, 2017 | RubyGems webrick |
Apache Tomcat on Windows Remote Code Execution Vulnerability CVE-2017-12615 | HighExploited | 99.7% | 19 Sep, 2017 | |
Apache Struts Deserialization of Untrusted Data Vulnerability CVE-2017-9805 | HighExploited | 99.4% | 15 Sep, 2017 | |
Code injection in ansible CVE-2017-2809, GHSA-c2w9-48qc-qpj4, PYSEC-2017-5 | High | 3.0% | 14 Sep, 2017 | PyPI ansible-vault |