Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Nova Potential Xen connection password leak via StorageError CVE-2015-8749, GHSA-c36r-g737-9qp8, PYSEC-2026-870 | Medium | 2.2% | 15 Jan, 2016 | PyPI nova |
Python RSA allows attackers to spoof signatures CVE-2016-1494, GHSA-8rjr-6qq5-pj9p, PYSEC-2016-10 | Medium | 7.0% | 13 Jan, 2016 | PyPI rsa |
Symphony CMS XSS Vulnerabilities CVE-2015-8766, GHSA-4c5w-qqfg-grf3 | Medium | 1.8% | 08 Jan, 2016 | Packagist symphonycms/symphony-2 |
TYPO3 allows remote attackers to embed Flash videos from external domain CVE-2015-8760, GHSA-3f58-74qw-ph75 | Medium | 1.4% | 08 Jan, 2016 | Packagist typo3/cms |
TYPO3 Cross-site Scripting vulnerability CVE-2015-8759, GHSA-j5v7-9xr5-m7gx | Medium | 0.6% | 08 Jan, 2016 | Packagist typo3/cms |
TYPO3 CMS indexed search Cross-site Scripting vulnerability CVE-2015-8756, GHSA-xx7m-8rq2-cw2v | Medium | 0.8% | 08 Jan, 2016 | Packagist typo3/cms |
Typo3 XSS Vulnerability CVE-2015-8755, GHSA-56f9-5563-m2h7 | Medium | 1.1% | 08 Jan, 2016 | Packagist typo3/cms |
SMTP Injection in PHPMailer CVE-2015-8476, GHSA-738m-f33v-qc2r | Medium | 2.0% | 16 Dec, 2015 | Packagist phpmailer/phpmailer |
Heap-based buffer overflow in nokogiri CVE-2015-7499, GHSA-jxjr-5h69-qw3w | Medium | 6.4% | 15 Dec, 2015 | RubyGems nokogiri |
Symfony Session Fixation Vulnerability CVE-2015-8124, GHSA-j5jh-hpr4-h332 | Medium | 2.7% | 07 Dec, 2015 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Django settings leak in date template filter CVE-2015-8213, GHSA-6wcr-wcqm-3mfh, PYSEC-2015-11 | Medium | 4.3% | 07 Dec, 2015 | PyPI Django PyPI django |
Ipsilon denial of service via a duplicate SP name CVE-2015-5217, GHSA-6875-ff47-r6p6, PYSEC-2015-41 | Medium | 1.3% | 17 Nov, 2015 | PyPI ipsilon |
Ipsilon denial of service by deleting a SAML2 Service Provider (SP) CVE-2015-5301, GHSA-9qp4-79q8-58pr, PYSEC-2015-42 | Medium | 1.5% | 17 Nov, 2015 | PyPI ipsilon |
Directory Traversal in Kubernetes CVE-2015-5305, GHSA-jp32-vmm6-3vf5, GO-2022-0701 | Medium | 1.8% | 06 Nov, 2015 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction CVE-2015-7713, GHSA-67rh-9p29-vrxr, PYSEC-2026-867 | Medium | 3.7% | 29 Oct, 2015 | PyPI nova |
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service CVE-2015-5286, GHSA-gvjg-r9fv-7qx9, PYSEC-2026-812 | Medium | 2.5% | 26 Oct, 2015 | PyPI glance |
OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions CVE-2015-5251, GHSA-q748-mcwg-xmqv, PYSEC-2026-816 | Medium | 2.1% | 26 Oct, 2015 | PyPI glance |
OpenStack Object Storage (Swift) Sensitive Data Exposure CVE-2015-5223, GHSA-q45h-chc8-hvp6, PYSEC-2026-934 | Medium | 2.6% | 26 Oct, 2015 | PyPI swift |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service CVE-2015-3280, GHSA-mfmj-gwg3-vhw7, PYSEC-2026-877 | Medium | 3.4% | 26 Oct, 2015 | PyPI nova |
Oracle Java SE Integrity Check Vulnerability CVE-2015-4902 | MediumExploited | 13.6% | 22 Oct, 2015 | |
Cross-Site Scripting in dojo CVE-2015-5654, GHSA-p82g-2xpp-m5r3 | Medium | 2.2% | 11 Oct, 2015 | npm dojo |
Gollum Exposure of Sensitive Information CVE-2015-7314, GHSA-m2q3-53fq-7h66 | Medium | 1.9% | 06 Oct, 2015 | RubyGems gollum |
baserCMS Access Control Bypass CVE-2015-5640, GHSA-v9gf-98vr-mgp2 | Medium | 1.6% | 06 Oct, 2015 | Packagist baserproject/basercms |
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook CVE-2015-6938, GHSA-4vwq-x64q-j4cj, PYSEC-2015-24, PYSEC-2015-26 | Medium | 2.8% | 21 Sep, 2015 | PyPI ipython PyPI notebook |
phpMyAdmin ReCaptcha bypass CVE-2015-6830, GHSA-v6fh-vg22-r6cm | Medium | 10.4% | 14 Sep, 2015 | Packagist phpmyadmin/phpmyadmin |
Denial of Service in OpenShift Origin CVE-2015-5250, GHSA-rf3m-mhv7-x39f, GO-2022-0875 | Medium | 2.0% | 08 Sep, 2015 | Go github.com/openshift/origin |
OpenStack Nova instance migration process does not stop when instance is deleted CVE-2015-3241, GHSA-3vx7-xff6-h2vx, PYSEC-2026-861 | Medium | 3.5% | 08 Sep, 2015 | PyPI nova |
October CMS XSS In Caption Tag of Profile CVE-2015-5612, GHSA-9hq8-v2jc-qj4r | Medium | 1.8% | 04 Sep, 2015 | Packagist october/october |
OpenStack Neutron Improper Input Validation vulnerability CVE-2015-3221, GHSA-wf44-4mgj-rwvx, PYSEC-2026-856 | Medium | 11.4% | 26 Aug, 2015 | PyPI neutron |
ZendXml and Zend Framework contain XXE and XEE Vulnerabilities CVE-2015-5161, GHSA-xp8p-9rq5-4wgv | Medium | 9.9% | 25 Aug, 2015 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 Packagist zendframework/zendxml |
RubyGems Improper Input Validation vulnerability CVE-2015-4020, GHSA-qv62-xfj6-32xm | Medium | 3.5% | 25 Aug, 2015 | RubyGems rubygems-update |
Django denial of service via empty session record creation CVE-2015-5963, GHSA-pgxh-wfw4-jx2v, PYSEC-2015-22 | Medium | 5.2% | 24 Aug, 2015 | PyPI Django PyPI django |
Denial-of-service possibility in logout() view by filling session store CVE-2015-5964, GHSA-x38m-486c-2wr9, PYSEC-2015-23 | Medium | 5.1% | 24 Aug, 2015 | PyPI Django PyPI django |
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2015-3219, GHSA-rhjj-f6gq-6gx2, PYSEC-2015-40 | Medium | 3.2% | 20 Aug, 2015 | PyPI horizon |
Microsoft Windows Mount Manager Privilege Escalation Vulnerability CVE-2015-1769 | MediumExploited | 4.1% | 15 Aug, 2015 | |
Nokogiri vulnerable to libxml XML Entity Expansion CVE-2015-1819, GHSA-q7wx-62r7-j2x7 | Medium | 6.3% | 14 Aug, 2015 | RubyGems nokogiri |
activesupport vulnerable to Denial of Service via large XML document depth CVE-2015-3227, GHSA-j96r-xvjq-r9pg | Medium | 4.2% | 26 Jul, 2015 | RubyGems activesupport |
activesupport Cross-site Scripting vulnerability CVE-2015-3226, GHSA-vxvp-4xwc-jpp6 | Medium | 2.8% | 26 Jul, 2015 | RubyGems activesupport |
Rack vulnerable to Denial of Service via large parameter depth request CVE-2015-3225, GHSA-rgr4-9jh5-j4j6 | Medium | 7.9% | 26 Jul, 2015 | RubyGems rack |
Web Console (Ruby gem) contains whitelisted_ips bypass CVE-2015-3224, GHSA-67j6-xv27-w6ww | Medium | 48.8% | 26 Jul, 2015 | RubyGems web-console |
jquery-rails and jquery-ujs subject to Exposure of Sensitive Information CVE-2015-1840, GHSA-4whc-pp4x-9pf3 | Medium | 4.5% | 26 Jul, 2015 | RubyGems jquery-rails RubyGems jquery-ujs |
paperclip Cross-site Scripting vulnerability CVE-2015-2963, GHSA-6jvm-3j5h-79f6 | Medium | 2.1% | 10 Jul, 2015 | RubyGems paperclip |
ImpressCMS Path Traversal to Arbitrary File Delete CVE-2014-1836, GHSA-wcj4-ff9m-5r7g | Medium | 3.6% | 01 Jul, 2015 | Packagist impresscms/impresscms |
OpenStack Cinder file disclosure in image convert CVE-2015-1851, GHSA-9hcj-h2qc-689p, PYSEC-2026-789 | Medium | 2.6% | 25 Jun, 2015 | PyPI cinder |
Silverstripe CMS Open Redirect CVE-2015-5062, GHSA-fh35-p8ph-p545 | Medium | 2.0% | 24 Jun, 2015 | Packagist silverstripe/cms Packagist silverstripe/framework |
Symfony Vulnerable to PHP Eval Injection CVE-2015-2308, GHSA-5c58-w9xc-qcj9 | Medium | 1.3% | 24 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability CVE-2015-3935, GHSA-6fw8-vf2x-4wpm | Medium | 1.9% | 10 Jun, 2015 | Packagist dolibarr/dolibarr |
Symfony Incorrect Access Control CVE-2015-4050, GHSA-qmqw-mpqp-mr54 | Medium | 8.2% | 02 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Django allows user sessions hijacking via an empty string in the session key CVE-2015-3982, GHSA-6wgp-fwfm-mxp3, PYSEC-2015-19 | Medium | 1.8% | 02 Jun, 2015 | PyPI Django PyPI django |
Moodle allows attackers to bypass file-management restrictions CVE-2015-3181, GHSA-622h-cjgg-5mx6 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |