Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Windows Privilege Escalation Vulnerability CVE-2017-0213 | HighExploited | 84.3% | 12 May, 2017 | |
Mautic Cross-Site Request Forgery (CSRF) CVE-2017-8874, GHSA-7vvh-xqq4-w777 | High | 0.8% | 10 May, 2017 | Packagist mautic/core |
Information Exposure in cordova-android CVE-2016-6799, GHSA-gwpf-62xp-vrg6 | High | 2.6% | 09 May, 2017 | npm cordova-android |
GeniXCMS SQL Injection CVE-2017-8377, GHSA-34vw-8cjw-cwjj | High | 1.5% | 01 May, 2017 | Packagist genix/cms |
Radicale is vulnerable to timing oracles and simple bruteforce attacks CVE-2017-8342, GHSA-rpv4-63g3-9x23, PYSEC-2017-102 | High | 2.0% | 30 Apr, 2017 | PyPI Radicale PyPI radicale |
Artifex Ghostscript Type Confusion Vulnerability CVE-2017-8291 | HighExploited | 97.0% | 27 Apr, 2017 | |
SaltStack Salt Information Exposure CVE-2017-8109, GHSA-xcx4-5wq7-g5g7, PYSEC-2017-82 | High | 0.4% | 25 Apr, 2017 | PyPI salt |
Google Chromium V8 Memory Corruption Vulnerability CVE-2017-5030 | HighExploited | 40.6% | 24 Apr, 2017 | |
Nokogiri implementation of libxslt lacks integer overflow checks CVE-2017-5029, GHSA-pf6m-fxpq-fg8v | High | 2.5% | 24 Apr, 2017 | RubyGems nokogiri |
Oracle WebLogic Server OS Command Injection Vulnerability CVE-2017-3506 | HighExploited | 96.0% | 24 Apr, 2017 | |
Kallithea Routes CSRF Bypass CVE-2016-3691, GHSA-799h-qr84-pcrp, PYSEC-2026-648 | High | 0.6% | 24 Apr, 2017 | PyPI kallithea |
Pillow Buffer overflow in Jpeg2KEncode.c CVE-2016-3076, GHSA-v9pc-9mvp-x87g, PYSEC-2017-92 | High | 2.6% | 24 Apr, 2017 | PyPI pillow |
Moodle Cross-site request forgery (CSRF) vulnerability CVE-2016-3734, GHSA-r867-v437-4rrm | High | 1.1% | 20 Apr, 2017 | Packagist moodle/moodle |
Drupal access control bypass vulnerability CVE-2017-6919, GHSA-6hpj-9xj7-2jxx | High | 1.6% | 20 Apr, 2017 | Packagist drupal/core Packagist drupal/drupal |
Aescrypt does not sufficiently use random values CVE-2013-7463, GHSA-4c4w-3q45-hp9j | High | 1.1% | 19 Apr, 2017 | RubyGems aescrypt |
Phusion Passenger uses a known /tmp filename CVE-2016-10345, GHSA-cqxw-3p7v-p9gr | High | 0.5% | 18 Apr, 2017 | RubyGems passenger |
MantisBT allows arbitrary password reset CVE-2017-7615, GHSA-252r-f55f-ff34 | High | 91.2% | 16 Apr, 2017 | Packagist mantisbt/mantisbt |
OpenStack Nova-LXD bypass security restrictions CVE-2017-5936, GHSA-6xc7-4cx8-j3xc, PYSEC-2017-21 | High | 3.0% | 12 Apr, 2017 | PyPI nova-lxd |
Microsoft Internet Explorer Privilege Escalation Vulnerability CVE-2017-0210 | HighExploited | 22.3% | 12 Apr, 2017 | |
Microsoft Office and WordPad Remote Code Execution Vulnerability CVE-2017-0199 | HighExploited | 99.5% | 12 Apr, 2017 | |
Double Free in OpenCV CVE-2016-1516, GHSA-cvhw-2593-5j2q, PYSEC-2026-2816, PYSEC-2026-707 | High | 2.3% | 10 Apr, 2017 | PyPI opencv-contrib-python PyPI opencv-python |
Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2017-6884 | HighExploited | 33.0% | 06 Apr, 2017 | |
golang.org/x/crypto/ssh Man-in-the-Middle attack CVE-2017-3204, GHSA-xhjq-w7xm-p8qj, GO-2020-0013 | High | 3.2% | 04 Apr, 2017 | Go golang.org/x/crypto |
Rancher Access Control Vulnerability CVE-2017-7297, GHSA-w3x4-9854-95x8, GO-2023-1973 | High | 1.5% | 29 Mar, 2017 | Go github.com/rancher/rancher |
Integer Overflow in go-jose CVE-2016-9123, GHSA-3fx4-7f69-5mmg, GO-2020-0009 | High | 2.1% | 28 Mar, 2017 | Go github.com/square/go-jose |
Go JOSE Signature Validation Bypass CVE-2016-9122, GHSA-77gc-fj98-665h, GO-2022-0945 | High | 2.0% | 28 Mar, 2017 | Go gopkg.in/square/go-jose.v1 |
Improper input validation in cryptography CVE-2016-9243, GHSA-q3cj-2r34-2cwc, PYSEC-2017-8 | High | 3.5% | 27 Mar, 2017 | PyPI cryptography |
Subrion CMS vulnerable to CSRF in admin/blocks/add CVE-2017-6068, GHSA-q4h5-g3w8-f9x7 | High | 0.6% | 27 Mar, 2017 | Packagist intelliants/subrion |
Pysaml2 does not sanitize XML responses CVE-2016-10149, GHSA-c2vx-49jm-h3f6, PYSEC-2017-25 | High | 5.0% | 24 Mar, 2017 | PyPI pysaml2 |
cfscrape Improper Input Validation vulnerability CVE-2017-7235, GHSA-5mc5-5j6c-qmf9, PYSEC-2017-7 | High | 1.5% | 23 Mar, 2017 | PyPI cfscrape |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2017-0149 | HighExploited | 28.5% | 17 Mar, 2017 | |
Microsoft SMBv1 Server Remote Code Execution Vulnerability CVE-2017-0148 | HighExploited | 99.4% | 17 Mar, 2017 | |
Microsoft Windows SMBv1 Information Disclosure Vulnerability CVE-2017-0147 | HighExploited | 99.7% | 17 Mar, 2017 | |
Microsoft Windows SMB Remote Code Execution Vulnerability CVE-2017-0146 | HighExploited | 89.9% | 17 Mar, 2017 | |
Microsoft SMBv1 Remote Code Execution Vulnerability CVE-2017-0145 | HighExploited | 89.8% | 17 Mar, 2017 | |
Microsoft SMBv1 Remote Code Execution Vulnerability CVE-2017-0144 | HighExploited | 99.2% | 17 Mar, 2017 | |
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability CVE-2017-0143 | HighExploited | 93.3% | 17 Mar, 2017 | |
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability CVE-2017-0101 | HighExploited | 57.5% | 17 Mar, 2017 | |
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability CVE-2017-0005 | HighExploited | 11.0% | 17 Mar, 2017 | |
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability CVE-2017-0001 | HighExploited | 3.1% | 17 Mar, 2017 | |
Capstone Integer overflow CVE-2017-6952, GHSA-3v99-hpv7-9hh9, PYSEC-2017-113 | High | 1.2% | 16 Mar, 2017 | PyPI capstone |
Drupal Remote code execution CVE-2017-6381, GHSA-rhx9-3qf7-r3j7 | High | 3.9% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
Drupal Cross-Site Request Forgery (CSRF) CVE-2017-6379, GHSA-gxxq-fhc7-3jv9 | High | 0.8% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
Drupal editor module incorrectly checks access to inline private files CVE-2017-6377, GHSA-w7qx-vwr9-2j3r | High | 1.9% | 16 Mar, 2017 | Packagist drupal/core Packagist drupal/drupal |
NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 | HighExploited | 72.6% | 06 Mar, 2017 | |
Unauthenticated crypto and weak IV in Magento\Framework\Encryption CVE-2016-6485, GHSA-h7qw-mxrm-c6h2 | High | 0.8% | 01 Mar, 2017 | Packagist magento/community-edition Packagist magento/project-community-edition |
Microsoft Edge and Internet Explorer Type Confusion Vulnerability CVE-2017-0037 | HighExploited | 80.4% | 26 Feb, 2017 | |
Plone vulnerable to privilege escalation in WebDAV CVE-2016-4041, GHSA-qqgj-22gr-73vx, PYSEC-2017-55 | High | 1.5% | 24 Feb, 2017 | PyPI Plone PyPI plone |
Improper Restriction of XML External Entity Reference in Openpyxl CVE-2017-5992, GHSA-chqf-hx79-gxc6, PYSEC-2017-48 | High | 1.4% | 15 Feb, 2017 | PyPI openpyxl |
PEAR core file overwrite vulnerability CVE-2017-5630, GHSA-xxv8-pv43-57x5 | High | 12.5% | 01 Feb, 2017 | Packagist pear/pear |