Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Symfony Vulnerable to PHP Eval Injection CVE-2015-2308, GHSA-5c58-w9xc-qcj9 | Medium | 1.3% | 24 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability CVE-2015-3935, GHSA-6fw8-vf2x-4wpm | Medium | 1.9% | 10 Jun, 2015 | Packagist dolibarr/dolibarr |
Symfony Incorrect Access Control CVE-2015-4050, GHSA-qmqw-mpqp-mr54 | Medium | 8.2% | 02 Jun, 2015 | Packagist symfony/http-kernel Packagist symfony/symfony |
Django allows user sessions hijacking via an empty string in the session key CVE-2015-3982, GHSA-6wgp-fwfm-mxp3, PYSEC-2015-19 | Medium | 1.8% | 02 Jun, 2015 | PyPI Django PyPI django |
Moodle allows attackers to bypass file-management restrictions CVE-2015-3181, GHSA-622h-cjgg-5mx6 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive course-structure information CVE-2015-3180, GHSA-688p-pgj4-77hh | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers obtain full-name information CVE-2015-3176, GHSA-fqrg-vmvj-jv3x | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle Arbitrary Redirect CVE-2015-3175, GHSA-h798-h7ff-93xv | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to bypass a forced-password-change requirement CVE-2015-2272, GHSA-5659-g9p4-354f | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle does not consider the moodle/tag:flag capability CVE-2015-2271, GHSA-v3wp-35g3-m9mm | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive course information CVE-2015-2270, GHSA-fp4h-j22r-vwcv | Medium | 1.9% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2015-2268, GHSA-36cm-vrqh-8p98 | Medium | 2.2% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to extract archives to arbitrary directories CVE-2015-2267, GHSA-cm4r-58pj-h2ph | Medium | 1.6% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information CVE-2015-2266, GHSA-35pr-gqm6-r366 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle directory traversal vulnerability CVE-2015-1493, GHSA-gphj-63h8-r9vq | Medium | 2.6% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-0218, GHSA-5jph-mvfm-r27p | Medium | 1.0% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2015-0217, GHSA-p497-37fc-xvvc | Medium | 2.2% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive calendar-event information CVE-2015-0215, GHSA-fr9m-pjmm-qx9f | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to bypass a messaging-disabled setting CVE-2015-0214, GHSA-4jm2-c9jr-6prf | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2015-0213, GHSA-hhq7-jf2p-hw9c | Medium | 1.0% | 01 Jun, 2015 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive information CVE-2015-0211, GHSA-frhc-9hwc-x7j3 | Medium | 1.7% | 01 Jun, 2015 | Packagist moodle/moodle |
Arbitrary File Override in Docker Engine CVE-2015-3631, GHSA-v4h8-794j-g8mm, GO-2022-0708 | Medium | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
concrete5 vulnerable to Cross-site Scripting CVE-2015-3989, GHSA-jxhp-rwqv-9fjj | Medium | 0.9% | 15 May, 2015 | Packagist concrete5/concrete5 |
Yii Framework Cross-site Scripting Vulnerability CVE-2015-3397, GHSA-w2xx-jp9f-gp8g | Medium | 2.4% | 14 May, 2015 | Packagist yiisoft/yii2 |
OpenStack Keystone Logs Passwords CVE-2015-3646, GHSA-jwpw-ppj5-7h4w, PYSEC-2026-655 | Medium | 2.9% | 12 May, 2015 | PyPI keystone |
OpenStack Swift Unauthorized delete of versioned Swift object CVE-2015-1856, GHSA-cc77-5vw4-7pwg, PYSEC-2026-931 | Medium | 4.1% | 17 Apr, 2015 | PyPI swift |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity CVE-2015-0259, GHSA-x8xr-rm9r-7mvf, PYSEC-2026-883 | Medium | 1.1% | 01 Apr, 2015 | PyPI nova |
Django cross-site scripting (XSS) attack via user-supplied redirect URLs CVE-2015-2317, GHSA-7fq8-4pv5-5w5c, PYSEC-2015-9 | Medium | 5.0% | 25 Mar, 2015 | PyPI Django PyPI django |
Python Requests Session Fixation CVE-2015-2296, GHSA-pg2w-x9wp-vw92, PYSEC-2015-17 | Medium | 3.2% | 18 Mar, 2015 | PyPI requests |
Django Cross-site Scripting Vulnerability CVE-2015-2241, GHSA-6565-fg86-6jcx, PYSEC-2015-8 | Medium | 2.1% | 12 Mar, 2015 | PyPI django |
MAGMI cross-site scripting (XSS) CVE-2015-2068, GHSA-27v2-398x-f74x | Medium | 14.0% | 24 Feb, 2015 | Packagist dweeves/magmi |
MAGMI plugin for Magento Server Directory Traversal CVE-2015-2067, GHSA-c252-xc8v-mqmm | Medium | 38.5% | 24 Feb, 2015 | Packagist dweeves/magmi |
Fat Free CRM Cross-Site Request Forgery vulnerability CVE-2015-1585, GHSA-wx7c-8j35-mpg8 | Medium | 1.1% | 19 Feb, 2015 | RubyGems fat_free_crm |
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method. CVE-2015-1613, PYSEC-2015-33 | Medium | 1.3% | 16 Feb, 2015 | PyPI rhodecode |
Microsoft Internet Explorer ASLR Bypass Vulnerability CVE-2015-0071 | MediumExploited | 33.6% | 11 Feb, 2015 | |
VBScript Content Injection in marked CVE-2015-1370, GHSA-cfjh-p3g4-3q2f | Medium | 2.0% | 27 Jan, 2015 | npm marked |
OpenStack Glance Bypass the storage quota and Denial of service CVE-2014-9623, GHSA-j4mh-9wq6-8rg6, PYSEC-2026-813 | Medium | 2.9% | 23 Jan, 2015 | PyPI glance |
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme CVE-2015-1195, GHSA-pwrj-f53c-f89j, PYSEC-2026-815 | Medium | 2.8% | 21 Jan, 2015 | PyPI glance |
Open Redirect in serve-static CVE-2015-1164, GHSA-c3x7-gjmx-r2ff | Medium | 2.6% | 21 Jan, 2015 | npm serve-static |
sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number CVE-2014-9490, GHSA-c9c5-9fpr-m882 | Medium | 2.4% | 20 Jan, 2015 | RubyGems sentry-raven |
Django WSGI Header Spoofing Vulnerability CVE-2015-0219, GHSA-7qfw-j7hp-v45g, PYSEC-2015-4 | Medium | 7.0% | 16 Jan, 2015 | PyPI Django PyPI django |
Django Cross-site Scripting Vulnerability CVE-2015-0220, GHSA-gv98-g628-m9x5, PYSEC-2015-5 | Medium | 3.0% | 16 Jan, 2015 | PyPI Django PyPI django |
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect CVE-2015-1039, GHSA-33rh-5hvf-5jjp | Medium | 1.9% | 15 Jan, 2015 | Packagist zf-commons/zfc-user |
RedCloth Cross-site Scripting vulnerability CVE-2012-6684, GHSA-r23g-3qw4-gfh2 | Medium | 2.3% | 08 Jan, 2015 | RubyGems RedCloth |
Typo3 Open Redirect In Frontend Rendering CVE-2014-9508, GHSA-v6xv-rmqc-wcc8 | Medium | 1.7% | 04 Jan, 2015 | Packagist typo3/cms |
Doorkeeper vulnerable to Cross-site Request Forgery CVE-2014-8144, GHSA-685w-vc84-wxcx | Medium | 0.7% | 31 Dec, 2014 | RubyGems doorkeeper |
phpThumb is vulnerable to Server-Side Request Forgery (SSRF) CVE-2013-6919, GHSA-3747-gjc9-vvg6 | Medium | 1.2% | 27 Dec, 2014 | Packagist james-heinrich/phpthumb |
Symfony Denial of Service Via Long Password Hashing CVE-2013-5958, GHSA-cr49-fx2v-9p57 | Medium | 1.9% | 27 Dec, 2014 | Packagist symfony/polyfill Packagist symfony/security Packagist symfony/symfony |
CORS Token Disclosure in crumb CVE-2014-7193, GHSA-84fq-6626-w5fg | Medium | 1.4% | 25 Dec, 2014 | npm crumb |
Directory Traversal in Docker CVE-2014-9358, GHSA-qmmc-jppf-32wv, GO-2022-0705 | Medium | 2.5% | 16 Dec, 2014 | Go github.com/docker/docker |