Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle allows attackers to obtain sensitive category-detail information CVE-2016-2158, GHSA-m882-j7gq-v9p7 | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle provides calendar-event data without considering whether an activity is hidden CVE-2016-2156, GHSA-h8vc-v44p-5r2q | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to modify "Exclude grade" settings CVE-2016-2155, GHSA-32hg-73hp-vwc8 | Medium | 1.6% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to discover hidden course names CVE-2016-2154, GHSA-fmq9-58q4-xjw5 | Medium | 1.7% | 22 May, 2016 | Packagist moodle/moodle |
Moodle Reflected XSS in mod_data advanced search CVE-2016-2153, GHSA-mj85-3hqq-r6r9 | Medium | 1.5% | 22 May, 2016 | Packagist moodle/moodle |
Moodle XSS from profile fields from external db CVE-2016-2152, GHSA-6mxm-wpqv-675h | Medium | 1.5% | 22 May, 2016 | Packagist moodle/moodle |
Moodle allows attackers to discover student e-mail addresses CVE-2016-2151, GHSA-r3fc-hx6q-g6cq | Medium | 1.6% | 22 May, 2016 | Packagist moodle/moodle |
MediaElement Vulnerable to Reflected XSS CVE-2016-4567, GHSA-277w-qpxr-2549 | Medium | 7.4% | 22 May, 2016 | Packagist contao-components/mediaelement Packagist contao/core npm mediaelement |
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability CVE-2016-3718 | MediumExploited | 75.6% | 05 May, 2016 | |
ImageMagick Arbitrary File Deletion Vulnerability CVE-2016-3715 | MediumExploited | 75.3% | 05 May, 2016 | |
OpenStack Image Service (Glance) vulnerable to Improper Access Control CVE-2016-0757, GHSA-5xrj-ghhp-hx7p, PYSEC-2026-811 | Medium | 1.5% | 13 Apr, 2016 | PyPI glance |
Pillow Buffer overflow in ImagingLibTiffDecode CVE-2016-0740, GHSA-hggx-3h72-49ww, PYSEC-2016-5 | Medium | 2.7% | 13 Apr, 2016 | PyPI pillow |
Silverstripe CMS XSS Vulnerability CVE-2015-8606, GHSA-gvc8-xjfp-6569 | Medium | 1.5% | 13 Apr, 2016 | Packagist silverstripe/cms |
trytond arbitrary fields write via a sequence of records CVE-2015-0861, GHSA-c8q5-2j73-qvcc, PYSEC-2016-11 | Medium | 1.1% | 13 Apr, 2016 | PyPI trytond |
Roundup sensitive data disclosure vulnerability CVE-2014-6276, GHSA-j556-q367-2gw6, PYSEC-2016-33 | Medium | 1.6% | 13 Apr, 2016 | PyPI roundup |
Microsoft Internet Explorer Information Disclosure Vulnerability CVE-2016-0162 | MediumExploited | 21.9% | 12 Apr, 2016 | |
Drupal sensitive information disclosure CVE-2016-3170, GHSA-pqv4-xgqh-j8vh | Medium | 2.1% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Reflected file download vulnerability CVE-2016-3168, GHSA-qqxc-cppg-4xp8 | Medium | 2.5% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal CRLF injection vulnerability in the drupal_set_header function CVE-2016-3166, GHSA-fg5q-r2q5-qmh3 | Medium | 1.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
OpenStack Nova host data access through resize/migration CVE-2016-2140, GHSA-49jv-37hm-6gfp, PYSEC-2026-864 | Medium | 2.1% | 12 Apr, 2016 | PyPI nova |
Information Exposure in Kubernetes CVE-2015-7528, GHSA-mqf3-28j7-3mj6, GO-2022-0857 | Medium | 2.1% | 11 Apr, 2016 | Go github.com/kubernetes/kubernetes |
actionview contains Path Traversal vulnerability CVE-2016-2097, GHSA-vx9j-46rh-fqr8 | Medium | 4.4% | 07 Apr, 2016 | RubyGems actionpack RubyGems actionview |
phpMyAdmin Improper Input Validation CVE-2016-2562, GHSA-w8qg-j9fp-hrjf | Medium | 0.8% | 01 Mar, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser CVE-2016-2559, GHSA-7rf8-9r8f-qf59 | Medium | 1.7% | 01 Mar, 2016 | Packagist phpmyadmin/phpmyadmin |
Moodle Cross-site scripting (XSS) vulnerability in course management search CVE-2016-0725, GHSA-gj2j-ppjq-9pjg | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2016-0724, GHSA-hjrj-7wcj-7j3c | Medium | 1.9% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to bypass intended access restrictions CVE-2015-5342, GHSA-6xpm-q8x9-j3rw | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to read SCORM contents CVE-2015-5341, GHSA-c2r4-f8qv-2v7v | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle sensitive information disclosure CVE-2015-5340, GHSA-mmvj-j7hq-rx85 | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle does not properly implement group-based access restrictions CVE-2015-5339, GHSA-gmhr-6f43-7qpj | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2015-5337, GHSA-2hw6-6rgf-726v | Medium | 1.1% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-5336, GHSA-grvw-qq2j-r898 | Medium | 0.9% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-5335, GHSA-hpmv-wvq3-gj27 | Medium | 0.7% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle improper access control CVE-2015-5331, GHSA-m7cc-6vhg-39wr | Medium | 1.3% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-5269, GHSA-5729-822w-j342 | Medium | 1.2% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle mishandles group-based authorization checks CVE-2015-5268, GHSA-h34c-px28-rjgw | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to obtain manager privileges CVE-2015-5266, GHSA-454r-4cjv-vc9h | Medium | 1.6% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to delete files CVE-2015-5265, GHSA-44xp-wj24-9xxj | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle allows attackers to enter additional answer attempts CVE-2015-5264, GHSA-mm9q-3847-m48x | Medium | 1.4% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-3275, GHSA-6922-5v25-p8jg | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerability CVE-2015-3274, GHSA-f7qm-q26p-6rr2 | Medium | 1.5% | 22 Feb, 2016 | Packagist moodle/moodle |
phpMyAdmin XSS Vulnerability CVE-2016-2040, GHSA-pw34-qf6c-84fc | Medium | 1.6% | 20 Feb, 2016 | Packagist phpmyadmin/phpmyadmin |
SAP NetWeaver Information Disclosure Vulnerability CVE-2016-2388 | MediumExploited | 52.2% | 16 Feb, 2016 | |
activemodel contains Improper Input Validation CVE-2016-0753, GHSA-543v-gj2c-r3ch | Medium | 7.2% | 16 Feb, 2016 | RubyGems activemodel |
rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7580, GHSA-ghqm-pgxj-37gq | Medium | 2.2% | 16 Feb, 2016 | RubyGems rails-html-sanitizer |
rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7579, GHSA-r9c2-cr39-c8g6 | Medium | 2.6% | 16 Feb, 2016 | RubyGems rails-html-sanitizer |
rails-html-sanitizer Cross-site Scripting vulnerability CVE-2015-7578, GHSA-59c7-4xj2-hgvw | Medium | 2.5% | 16 Feb, 2016 | RubyGems rails-html-sanitizer |
Active Record Improper Access Control CVE-2015-7577, GHSA-xrr6-3pc4-m447 | Medium | 4.3% | 16 Feb, 2016 | RubyGems activerecord |
Radicale regex metacharacters injection in the user name CVE-2015-8748, GHSA-6w8c-6jrg-qwj2, PYSEC-2016-37 | Medium | 2.3% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
Dolibarr ERP and CRM contain XSS Vulnerabilities CVE-2016-1912, GHSA-jh5p-wpg2-8rgv | Medium | 1.4% | 15 Jan, 2016 | Packagist dolibarr/dolibarr |