Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Web2py Reflected XSS vulnerability CVE-2016-4807, GHSA-pvcp-73cg-6f77, PYSEC-2026-1063 | Medium | 2.3% | 11 Jan, 2017 | PyPI web2py |
Urllib3 Incorrect Certificate Validation CVE-2016-9015, GHSA-v4w5-p2hg-8fh6, PYSEC-2017-98 | Medium | 0.8% | 11 Jan, 2017 | PyPI urllib3 |
phpMyAdmin Denial of Service (DoS) CVE-2016-9860, GHSA-3hw5-fffc-qrg4 | Medium | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-9857, GHSA-hmmx-wxh4-9w8w | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-9856, GHSA-j8mx-x32r-5rf4 | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin path disclosure CVE-2016-9853, GHSA-rmmf-5xhh-gg27 | Medium | 2.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Bypass logout timeout CVE-2016-9851, GHSA-r2vw-p77f-vc27 | Medium | 1.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cryptographic Vulnerability CVE-2016-9847, GHSA-9xhq-pm7v-693p | Medium | 2.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial of service (DOS) attack with dbase extension CVE-2016-6632, GHSA-426q-975p-w5cr | Medium | 2.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Reflected File Download attack CVE-2016-6628, GHSA-phhm-63xx-v9rr | Medium | 1.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin allows to detect if user is logged in CVE-2016-6625, GHSA-r643-7xfg-ppc5 | Medium | 1.1% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention CVE-2016-6624, GHSA-mhxj-6vf8-mwv3 | Medium | 2.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2016-6623, GHSA-2mcj-3r3r-v5wm | Medium | 1.7% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2016-6622, GHSA-qf3f-7x69-qfv3 | Medium | 1.8% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial of service (DOS) attack in transformation feature CVE-2016-6618, GHSA-rv6m-chvv-wmxg | Medium | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Local file exposure through symlinks with UploadDir CVE-2016-6613, GHSA-6j2v-g9rg-qcm5 | Medium | 1.5% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Local file exposure CVE-2016-6612, GHSA-fcgm-62p3-f7cm | Medium | 1.7% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site Scripting (XSS) CVE-2016-6608, GHSA-jfmj-27fp-qp67 | Medium | 1.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
Drupal Denial of service via transliterate mechanism CVE-2016-9452, GHSA-jpj8-49hr-wcwv | Medium | 1.7% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Open Redirect CVE-2016-9451, GHSA-66gr-xrcf-8jpq | Medium | 1.5% | 25 Nov, 2016 | Packagist drupal/core |
Drupal sensitive information disclosure CVE-2016-9449, GHSA-p745-347h-hjfw | Medium | 1.9% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
SAP NetWeaver XML External Entity (XXE) Vulnerability CVE-2016-9563 | MediumExploited | 24.2% | 23 Nov, 2016 | |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-7146, GHSA-fj26-q4vh-85f6, PYSEC-2016-30 | Medium | 1.2% | 10 Nov, 2016 | PyPI moin |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2016-7148, GHSA-3x76-j3jj-439j, PYSEC-2016-31 | Medium | 1.2% | 10 Nov, 2016 | PyPI moin |
Moodle XSS Vulnerability CVE-2016-9188, GHSA-7ghm-fp7p-qvjq | Medium | 1.5% | 04 Nov, 2016 | Packagist moodle/moodle |
Pillow Integer overflow in Map.c CVE-2016-9189, GHSA-rwr3-c2q8-gm56, PYSEC-2016-8 | Medium | 1.9% | 04 Nov, 2016 | PyPI pillow |
Denial of Service in docker2aci CVE-2016-8579, GHSA-gfh2-7jg5-653p, GO-2022-0833 | Medium | 0.4% | 28 Oct, 2016 | Go github.com/appc/docker2aci |
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability CVE-2016-3298 | MediumExploited | 33.3% | 14 Oct, 2016 | |
Drupal Unprivileged access to config export CVE-2016-7572, GHSA-fmqh-2j2x-vgp3 | Medium | 1.7% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Cross-site scripting (XSS) vulnerability CVE-2016-7571, GHSA-vhg8-x858-7wq6 | Medium | 1.5% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit CVE-2016-7570, GHSA-6g9h-6v79-w4pc | Medium | 1.7% | 03 Oct, 2016 | Packagist drupal/core Packagist drupal/drupal |
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability CVE-2016-3351 | MediumExploited | 26.5% | 14 Sep, 2016 | |
Drupal Views can allow unauthorized users to see Statistics information CVE-2016-6212, GHSA-rfxx-gxwc-923c | Medium | 2.2% | 09 Sep, 2016 | Packagist drupal/core Packagist drupal/drupal |
actionview Cross-site Scripting vulnerability CVE-2016-6316, GHSA-pc3m-v286-2jwj | Medium | 3.4% | 07 Sep, 2016 | RubyGems actionview |
Tryton allows users to read the hashed password CVE-2016-1241, GHSA-52j9-v3jc-9xgc, PYSEC-2016-12, PYSEC-2016-40 | Medium | 1.6% | 07 Sep, 2016 | PyPI tryton PyPI trytond |
Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter CVE-2016-1242, GHSA-jpr7-8rxm-4vgx, PYSEC-2016-13, PYSEC-2016-41 | Medium | 1.8% | 07 Sep, 2016 | PyPI tryton PyPI trytond |
jwcrypto lacks the Random Filling protection mechanism CVE-2016-6298, GHSA-wg33-x934-3ghh, PYSEC-2016-4 | Medium | 2.2% | 01 Sep, 2016 | PyPI jwcrypto |
Apple iOS Information Disclosure Vulnerability CVE-2016-4655 | MediumExploited | 33.4% | 25 Aug, 2016 | |
Django Cross-site scripting Vulnerability CVE-2016-6186, GHSA-c8c8-9472-w52h, PYSEC-2016-2 | Medium | 5.5% | 05 Aug, 2016 | PyPI django |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2016-4428, GHSA-grm6-x6mr-q3cv, PYSEC-2026-643 | Medium | 2.1% | 12 Jul, 2016 | PyPI horizon |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5733, GHSA-cr65-p662-fx5c | Medium | 2.2% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-5732, GHSA-3q28-xfw3-2q35 | Medium | 1.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site scripting (XSS) vulnerability CVE-2016-5731, GHSA-mwm8-36c5-j5cf | Medium | 1.8% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin full path disclosure vulnerability CVE-2016-5730, GHSA-wm9c-vcv2-vpqc | Medium | 2.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5705, GHSA-6q2j-8h8q-46mr | Medium | 1.3% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin XSS Vulnerability CVE-2016-5704, GHSA-gcvp-cwgw-wx8j | Medium | 1.6% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2016-5701, GHSA-rh74-5835-jpxp | Medium | 1.5% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
OpenStack Identity Keystone Improper Access Control CVE-2016-4911, GHSA-f82m-w3p3-cgp3, PYSEC-2016-38 | Medium | 1.4% | 13 Jun, 2016 | PyPI keystone |
Moodle sensitive information disclosure CVE-2016-2190, GHSA-r9pc-g29w-f86j | Medium | 1.9% | 22 May, 2016 | Packagist moodle/moodle |
Moodle External function mod_assign_save_submission does not check due dates CVE-2016-2159, GHSA-cw72-69wq-f9f2 | Medium | 1.4% | 22 May, 2016 | Packagist moodle/moodle |