Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Cisco IOS Software SNMP Remote Code Execution Vulnerability CVE-2017-6744 | HighExploited | 7.3% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6743 | HighExploited | 10.9% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6742 | HighExploited | 21.3% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6740 | HighExploited | 11.1% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6739 | HighExploited | 10.9% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6738 | HighExploited | 10.9% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6737 | HighExploited | 45.0% | 17 Jul, 2017 | |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6736 | HighExploited | 70.4% | 17 Jul, 2017 | |
Cross-site Request Forgery (CSRF) CVE-2017-1000069, GHSA-rrm8-32g4-w8m3 | High | 0.7% | 17 Jul, 2017 | Go github.com/bitly/oauth2_proxy |
MODX Revolution blind SQL injection CVE-2017-1000067, GHSA-phhm-6pgm-mxw9 | High | 1.1% | 17 Jul, 2017 | Packagist modx/revolution |
Prototype Pollution Protection Bypass in qs CVE-2017-1000048, GHSA-gqgv-6jq5-jjj9 | High | 2.4% | 17 Jul, 2017 | npm qs |
Sensitive Cookie Without HttpOnly and Secure Flag CVE-2017-1000046, GHSA-8255-qf34-44mp | High | 1.1% | 17 Jul, 2017 | Packagist mautic/core |
mixlib-archive Path Traversal vulnerability CVE-2017-1000026, GHSA-98wx-cw86-c97x | High | 1.9% | 17 Jul, 2017 | RubyGems mixlib-archive |
phpMyAdmin DoS Vulnerability CVE-2017-1000018, GHSA-47qr-f86f-3wm4 | High | 1.8% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin SSRF in replication CVE-2017-1000017, GHSA-99xj-xqc9-98hr | High | 1.3% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cookie attribute injection attack CVE-2017-1000016, GHSA-j2cq-h6v2-f875 | High | 1.1% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin DoS Vulnerability CVE-2017-1000014, GHSA-9hrc-rwrq-v6mh | High | 2.2% | 17 Jul, 2017 | Packagist phpmyadmin/phpmyadmin |
FedMsg not properly completing message validation CVE-2017-1000001, GHSA-p7xc-35m8-57pr, PYSEC-2017-13 | High | 1.5% | 17 Jul, 2017 | PyPI FedMsg PyPI fedmsg |
txAWS AWSServiceEndpoint defaults to not verifying server certificates CVE-2017-1000007, GHSA-cggm-52qp-wvw7, PYSEC-2017-85 | High | 0.8% | 17 Jul, 2017 | PyPI txaws |
Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request CVE-2017-11173, GHSA-2j9c-9vmv-7m39 | High | 2.3% | 13 Jul, 2017 | RubyGems rack-cors |
Microsoft Office Remote Code Execution Vulnerability CVE-2017-8570 | HighExploited | 89.9% | 11 Jul, 2017 | |
Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack CVE-2017-7670, GHSA-f2wr-c4c4-xjg7 | High | 4.7% | 10 Jul, 2017 | Go github.com/apache/trafficcontrol |
ViMbAdmin CSRF Vulnerabilities CVE-2017-6086, GHSA-rrmf-fpmm-jpwr | High | 2.0% | 27 Jun, 2017 | Packagist opensolutions/vimbadmin |
Dolibarr ERP and CRM Unsafe File Upload Vulnerability CVE-2017-9840, GHSA-cwgm-qw8v-hrrg | High | 1.5% | 25 Jun, 2017 | Packagist dolibarr/dolibarr |
Logstash Logs Sensitive Information CVE-2016-1000221, GHSA-vcmm-ppqx-95ch | High | 1.8% | 16 Jun, 2017 | RubyGems logstash-core |
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability CVE-2017-8464 | HighExploited | 90.0% | 15 Jun, 2017 | |
tlslite remote denial of service vulnerability CVE-2015-3220, GHSA-4749-p7rx-8jjj, PYSEC-2017-96 | High | 3.3% | 13 Jun, 2017 | PyPI tlslite |
Zend Framework CSRF Vulnerability CVE-2015-1786, GHSA-gwwq-54qp-9pgp | High | 0.7% | 08 Jun, 2017 | Packagist zendframework/zendframework |
Ansible Arbitrary Code Execution CVE-2014-3498, GHSA-4cvm-5776-jx9f, PYSEC-2017-2 | High | 2.6% | 08 Jun, 2017 | PyPI ansible |
Ansible Sandbox Escape via Symlink Attack CVE-2015-6240, GHSA-wwwh-47wp-m522, PYSEC-2017-3 | High | 0.4% | 07 Jun, 2017 | PyPI ansible |
Mercurial has Incorrect Permission Assignment for Critical Resource CVE-2017-9462, GHSA-ghjx-3jg5-h6r2, PYSEC-2017-91 | High | 21.7% | 06 Jun, 2017 | PyPI mercurial |
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability CVE-2017-8540 | HighExploited | 71.9% | 26 May, 2017 | |
OpenEXR invalid write CVE-2017-9111, GHSA-qxh9-r8xw-7v99, PYSEC-2026-728 | High | 3.2% | 21 May, 2017 | PyPI OpenEXR PyPI openexr |
MODX Revolution allows overwriting .htaccess CVE-2017-9069, GHSA-23gj-x27g-r34f | High | 1.9% | 18 May, 2017 | Packagist modx/revolution |
MODX Revolution Directory Traversal Vulnerability CVE-2017-9067, GHSA-cgrv-6h2h-6f7v | High | 0.8% | 18 May, 2017 | Packagist modx/revolution |
Out-of-bounds read in nokogiri CVE-2017-9050, GHSA-8c56-cpmw-89x7 | High | 4.6% | 18 May, 2017 | RubyGems nokogiri |
CSRF in baserCMS 3.0.10 and earlier CVE-2016-4881, GHSA-46vm-rwrf-jrxm | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
CSRF in baserCMS 3.0.10 and earlier CVE-2016-4879, GHSA-397g-4jpj-44xg | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
baserCMS Cross Site Request Forgery vulnerability CVE-2016-4878, GHSA-fg52-rc36-jp43 | High | 0.9% | 12 May, 2017 | Packagist baserproject/basercms |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2017-0263 | HighExploited | 10.0% | 12 May, 2017 | |
Microsoft Office Remote Code Execution Vulnerability CVE-2017-0262 | HighExploited | 81.0% | 12 May, 2017 | |
Microsoft Office Use-After-Free Vulnerability CVE-2017-0261 | HighExploited | 78.1% | 12 May, 2017 | |
Microsoft Internet Explorer Remote Code Execution Vulnerability CVE-2017-0222 | HighExploited | 29.6% | 12 May, 2017 | |
Microsoft Windows Privilege Escalation Vulnerability CVE-2017-0213 | HighExploited | 84.3% | 12 May, 2017 | |
Mautic Cross-Site Request Forgery (CSRF) CVE-2017-8874, GHSA-7vvh-xqq4-w777 | High | 0.8% | 10 May, 2017 | Packagist mautic/core |
Information Exposure in cordova-android CVE-2016-6799, GHSA-gwpf-62xp-vrg6 | High | 2.6% | 09 May, 2017 | npm cordova-android |
GeniXCMS SQL Injection CVE-2017-8377, GHSA-34vw-8cjw-cwjj | High | 1.5% | 01 May, 2017 | Packagist genix/cms |
Radicale is vulnerable to timing oracles and simple bruteforce attacks CVE-2017-8342, GHSA-rpv4-63g3-9x23, PYSEC-2017-102 | High | 2.0% | 30 Apr, 2017 | PyPI Radicale PyPI radicale |
Artifex Ghostscript Type Confusion Vulnerability CVE-2017-8291 | HighExploited | 97.0% | 27 Apr, 2017 | |
SaltStack Salt Information Exposure CVE-2017-8109, GHSA-xcx4-5wq7-g5g7, PYSEC-2017-82 | High | 0.4% | 25 Apr, 2017 | PyPI salt |