Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Spark Deserialization of Untrusted Data vulnerability CVE-2017-12612, GHSA-8rhc-48pp-52gr, PYSEC-2017-147 | High | 0.7% | 13 Sep, 2017 | Maven org.apache.spark:spark-core_2.10 Maven org.apache.spark:spark-core_2.11 PyPI pyspark |
Microsoft .NET Framework Remote Code Execution Vulnerability CVE-2017-8759 | HighExploited | 88.7% | 13 Sep, 2017 | |
TYPO3 Arbitrary Code Execution CVE-2017-14251, GHSA-fh4q-hxrw-cjqq | High | 2.3% | 11 Sep, 2017 | Packagist typo3/cms |
Dolibarr ERP and CRM Sensitive Data Disclosure CVE-2017-14240, GHSA-p9wf-x8h5-44fr | High | 1.2% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability CVE-2017-6627 | HighExploited | 6.2% | 07 Sep, 2017 | |
Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability CVE-2015-4619, GHSA-2hxv-mx8x-mcj9 | High | 0.9% | 07 Sep, 2017 | RubyGems spina |
LDAP Injection in ldapauth CVE-2015-7294, GHSA-82mg-x548-gq3j | High | 2.1% | 06 Sep, 2017 | npm ldapauth npm ldapauth-fork |
Scrapy denial of service vulnerability CVE-2017-14158, GHSA-h7wm-ph43-c39p, PYSEC-2017-83 | High | 2.6% | 05 Sep, 2017 | PyPI scrapy |
SimpleSAMLphp InfoCard module Incorrect signature verification CVE-2017-12874, GHSA-fj28-869x-vv5g | High | 1.3% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp-module-infocard |
SimpleSAMLphp Authentication context bypass in the multiauth module CVE-2017-12869, GHSA-qc43-78vj-vg7p | High | 2.4% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
Designate mDNS DoS through incorrect handling of large RecordSets CVE-2015-5695, GHSA-m6h2-634h-jcpj, PYSEC-2017-114 | High | 2.1% | 31 Aug, 2017 | PyPI designate |
RubyGems has Origin Validation Error vulnerability CVE-2017-0902, GHSA-73w7-6w9g-gc8w | High | 4.8% | 31 Aug, 2017 | RubyGems rubygems-update |
RubyGems may allow a maliciously crafted gem to overwrite files CVE-2017-0901, GHSA-pm9x-4392-2c2p | High | 29.4% | 31 Aug, 2017 | RubyGems rubygems-update |
RubyGems Improper Input Validation vulnerability CVE-2017-0900, GHSA-p7f2-rr42-m9xm | High | 8.5% | 31 Aug, 2017 | RubyGems rubygems-update |
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img. CVE-2016-8752, GHSA-m2rr-h6g4-9cm9, PYSEC-2017-105 | High | 2.1% | 29 Aug, 2017 | PyPI apache-atlas |
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information. CVE-2017-3154, GHSA-fx92-wh72-8g9q, PYSEC-2017-110 | High | 2.1% | 29 Aug, 2017 | PyPI apache-atlas |
Code Injection in baserCMS CVE-2017-10844, GHSA-69gw-v5ph-6vxq | High | 1.5% | 29 Aug, 2017 | Packagist baserproject/basercms |
Arbitrary file delete in baserCMS CVE-2017-10843, GHSA-x73x-7gmx-w835 | High | 1.4% | 29 Aug, 2017 | Packagist baserproject/basercms |
Salt vulnerable to Improper Certificate Validation CVE-2015-4017, GHSA-8j9g-c9rp-jvg4, PYSEC-2017-31 | High | 1.1% | 25 Aug, 2017 | PyPI salt |
PyJWT vulnerable to key confusion attacks CVE-2017-11424, GHSA-r9jw-mwhq-wp62, PYSEC-2017-24 | High | 1.8% | 24 Aug, 2017 | PyPI pyjwt |
Incorrect Default Permissions in Supervisor CVE-2017-11610, GHSA-x7c8-4x3h-874w, PYSEC-2017-41 | High | 87.5% | 23 Aug, 2017 | PyPI supervisor |
django-cms CSRF Vulnerability CVE-2015-5081, GHSA-2pqc-gv8q-pvqv, PYSEC-2017-11 | High | 1.0% | 18 Aug, 2017 | PyPI django-cms |
open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution CVE-2015-3649, GHSA-7m2w-9gw7-c3xp | High | 0.4% | 18 Aug, 2017 | RubyGems open-uri-cached |
attic has improper verification of unencrypted backups CVE-2015-4082, GHSA-5x6q-ffwj-8vcf, PYSEC-2017-6 | High | 2.5% | 18 Aug, 2017 | PyPI attic |
Openstack Aodh can be used to launder Keystone trusts CVE-2017-12440, GHSA-86cv-9gpx-6hwj, PYSEC-2026-619 | High | 2.1% | 18 Aug, 2017 | PyPI aodh |
Integer Overflow or Wraparound in OpenCV CVE-2017-12864, GHSA-267x-w5hx-8hjr, PYSEC-2026-2804, PYSEC-2026-697 | High | 2.7% | 15 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Integer Overflow or Wraparound in OpenCV CVE-2017-12863, GHSA-wq8f-wvqp-xvvm, PYSEC-2026-2832, PYSEC-2026-717 | High | 2.7% | 15 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV CVE-2017-12862, GHSA-5rpc-gwh9-q9fg, PYSEC-2026-2807, PYSEC-2026-699 | High | 3.1% | 15 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Numpy missing input validation CVE-2017-12852, GHSA-frgw-fgh6-9g52, PYSEC-2017-1 | High | 2.7% | 15 Aug, 2017 | PyPI numpy |
Symantec Messaging Gateway Remote Code Execution Vulnerability CVE-2017-6327 | HighExploited | 35.9% | 11 Aug, 2017 | |
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability CVE-2015-2291 | HighExploited | 15.7% | 09 Aug, 2017 | |
Lemur uses static IV per key CVE-2015-7764, GHSA-chg9-3c3p-ch23, PYSEC-2017-50 | High | 1.5% | 09 Aug, 2017 | PyPI lemur |
SAP NetWeaver Directory Traversal Vulnerability CVE-2017-12637 | HighExploited | 95.1% | 07 Aug, 2017 | |
Out-of-bounds Write in OpenCV CVE-2017-12606, GHSA-vc29-rj92-gc7j, PYSEC-2026-2830, PYSEC-2026-715 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Write in OpenCV CVE-2017-12605, GHSA-rqxg-xvcq-3v2f, PYSEC-2026-2829, PYSEC-2026-714 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Write in OpenCV CVE-2017-12604, GHSA-c7gp-2pch-qh2v, PYSEC-2026-2815, PYSEC-2026-706 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Write in OpenCV CVE-2017-12603, GHSA-6v6p-p97v-g2p7, PYSEC-2026-2809, PYSEC-2026-701 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Denial of Service in OpenCV CVE-2017-12602, GHSA-pqjj-6f5q-gqph, PYSEC-2026-2827, PYSEC-2026-713 | High | 3.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV CVE-2017-12601, GHSA-w96g-3p64-63wr, PYSEC-2026-2831, PYSEC-2026-716 | High | 2.1% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Denial of Service in OpenCV CVE-2017-12600, GHSA-fr58-2xhv-qp3w, PYSEC-2026-2819, PYSEC-2026-709 | High | 2.2% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Read in OpenCV CVE-2017-12599, GHSA-fvq6-392h-6mjj, PYSEC-2026-2820, PYSEC-2026-710 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Read in OpenCV CVE-2017-12598, GHSA-33h2-69j3-r336, PYSEC-2026-2805, PYSEC-2026-698 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Out-of-bounds Write in OpenCV CVE-2017-12597, GHSA-8w3x-457r-wg53, PYSEC-2026-2813, PYSEC-2026-704 | High | 2.0% | 07 Aug, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Electron vulnerable to remote command execution CVE-2017-12581, GHSA-7fv9-m79r-j9x8 | High | 6.7% | 06 Aug, 2017 | npm electron |
Authenticated RCE in Zen Cart 1.5.5e CVE-2017-11675, GHSA-c9r9-3h38-r7vj | High | 2.9% | 27 Jul, 2017 | Packagist zencart/zencart |
OpenPGP 1.2.0 and earlier decrypts arbitrary messages CVE-2015-8013, GHSA-qmvq-f3fj-m3wg | High | 3.9% | 25 Jul, 2017 | npm openpgp |
Statamic framework Incorrect Permission Assignment CVE-2017-11422, GHSA-5m64-9hq5-5pf2 | High | 0.9% | 24 Jul, 2017 | Packagist statamic/cms |
Contao Core directory traversal vulnerability CVE-2017-10993, GHSA-x5g4-crxq-qxjx | High | 2.7% | 21 Jul, 2017 | Packagist contao/contao Packagist contao/core Packagist contao/core-bundle |
Docker Registry has Allocation of Resources Without Limits or Throttling CVE-2017-11468, GHSA-h62f-wm92-2cmw, GO-2021-0072 | High | 3.2% | 20 Jul, 2017 | Go github.com/docker/distribution |
DotNetNuke (DNN) Remote Code Execution Vulnerability CVE-2017-9822 | HighExploited | 94.8% | 20 Jul, 2017 |