Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
archive-tar-minitar and minitar vulnerable to Path Traversal CVE-2016-10173, GHSA-h5g2-38x9-4gv3 | High | 4.7% | 01 Feb, 2017 | RubyGems archive-tar-minitar RubyGems minitar |
phpMyAdmin server-side request forgery (SSRF) CVE-2016-6621, GHSA-44vv-mm86-7cg6 | High | 1.9% | 31 Jan, 2017 | Packagist phpmyadmin/phpmyadmin |
OpenSSL gem for Ruby using inadequate encryption strength CVE-2016-7798, GHSA-6h88-qjpv-p32m | High | 3.2% | 30 Jan, 2017 | RubyGems openssl |
Pagekit Weak Password Recovery Mechanism for Forgotten Password CVE-2017-5594, GHSA-rp89-32rp-qpq2 | High | 7.0% | 25 Jan, 2017 | Packagist pagekit/pagekit |
Ruby-saml allows attackers to perform XML signature wrapping attacks CVE-2016-5697, GHSA-36p7-xjw8-h6f2 | High | 1.2% | 23 Jan, 2017 | RubyGems ruby-saml |
Extbase for TYPO3 allows RCE CVE-2016-5091, GHSA-jxg5-35fj-ccwf | High | 3.4% | 23 Jan, 2017 | Packagist typo3/cms-extbase |
CakePHP allows remote attackers to spoof their IP CVE-2016-4793, GHSA-j8p3-8m69-2hqq | High | 5.1% | 23 Jan, 2017 | Packagist cakephp/cakephp |
Cross-Site Scripting in mustache CVE-2015-8862, GHSA-w3w8-37jv-2c58 | High | 1.7% | 23 Jan, 2017 | npm mustache |
Symlink Arbitrary File Overwrite in tar CVE-2015-8860, GHSA-gfjr-3jmm-4g9v | High | 4.0% | 23 Jan, 2017 | npm tar |
Regular Expression Denial of Service in uglify-js CVE-2015-8858, GHSA-c9f4-xj24-8jqx | High | 2.4% | 23 Jan, 2017 | npm uglify-js |
Regular Expression Denial of Service in semver CVE-2015-8855, GHSA-x6fg-f45m-jf5q | High | 6.9% | 23 Jan, 2017 | npm semver |
Regular Expression Denial of Service in marked CVE-2015-8854, GHSA-hjcp-j389-59ff | High | 4.4% | 23 Jan, 2017 | npm marked |
Regular Expression Denial of Service in ms CVE-2015-8315, GHSA-3fx5-fwvr-xrjg | High | 7.0% | 23 Jan, 2017 | npm ms |
Moodle Weak Password Recovery Mechanism for Forgotten Password CVE-2016-7038, GHSA-2phx-w35g-x9vm | High | 1.0% | 20 Jan, 2017 | Packagist moodle/moodle |
TDQM Arbitrary Code Execution CVE-2016-10075, GHSA-r7q7-xcjw-qx8q, PYSEC-2017-74 | High | 0.4% | 19 Jan, 2017 | PyPI tqdm |
Google Chromium V8 Out-of-Bounds Memory Vulnerability CVE-2016-5198 | HighExploited | 34.2% | 19 Jan, 2017 | |
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CVE-2017-5521 | HighExploited | 89.4% | 17 Jan, 2017 | |
GeniXCMS SQL injection vulnerability CVE-2017-5346, GHSA-2ppw-6xvg-rwgw | High | 1.6% | 12 Jan, 2017 | Packagist genix/cms |
Web2py Cross-Site Request Forgery vulnerability CVE-2016-4808, GHSA-gp69-xcm6-ffqj, PYSEC-2026-1061 | High | 1.8% | 11 Jan, 2017 | PyPI web2py |
priority vulnerable to denial of service CVE-2016-6580, GHSA-h3q4-6j7f-r24c, PYSEC-2017-93 | High | 1.8% | 10 Jan, 2017 | PyPI priority |
HPACK Denial of Service vulnerability (HPACK Bomb) CVE-2016-6581, GHSA-ffq8-576r-v26g, PYSEC-2017-87 | High | 1.9% | 10 Jan, 2017 | PyPI hpack |
GeniXCMS SQL injection vulnerability CVE-2016-10096, GHSA-gjcj-fj23-5j5v | High | 1.6% | 01 Jan, 2017 | Packagist genix/cms |
Improper Restriction of XML External Entity Reference in python-docx CVE-2016-5851, GHSA-34wj-p5jm-2p96, PYSEC-2016-21 | High | 2.4% | 21 Dec, 2016 | PyPI python-docx |
Microsoft Office Security Feature Bypass Vulnerability CVE-2016-7262 | HighExploited | 58.8% | 20 Dec, 2016 | |
bottle.py vulnerable to CRLF Injection CVE-2016-9964, GHSA-j6f7-hghw-g437, PYSEC-2016-24 | High | 1.8% | 16 Dec, 2016 | PyPI bottle |
Adobe Flash Player Use-After-Free Vulnerability CVE-2016-7892 | HighExploited | 19.1% | 15 Dec, 2016 | |
NETGEAR Multiple Routers Remote Code Execution Vulnerability CVE-2016-6277 | HighExploited | 99.8% | 14 Dec, 2016 | |
phpMyAdmin DoS Vulnerability CVE-2016-9863, GHSA-qgrq-64g6-mmh6 | High | 1.9% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Bypass white-list protection for URL redirection CVE-2016-9861, GHSA-r326-mp8g-6xfc | High | 1.8% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension CVE-2016-6633, GHSA-p849-vf5f-f3x7 | High | 4.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin PHP code injection CVE-2016-6609, GHSA-wpww-hx7x-xfjh | High | 2.3% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
Drupal Incorrect cache context on password reset page CVE-2016-9450, GHSA-98w5-wqp9-w466 | High | 1.0% | 25 Nov, 2016 | Packagist drupal/core Packagist drupal/drupal |
Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability CVE-2016-8562 | HighExploited | 3.6% | 18 Nov, 2016 | |
Linux Kernel Race Condition Vulnerability CVE-2016-5195 | HighExploited | 83.5% | 10 Nov, 2016 | |
Microsoft Windows Open Type Font Remote Code Execution Vulnerability CVE-2016-7256 | HighExploited | 64.6% | 10 Nov, 2016 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2016-7255 | HighExploited | 81.0% | 10 Nov, 2016 | |
Microsoft Edge Memory Corruption Vulnerability CVE-2016-7201 | HighExploited | 80.0% | 10 Nov, 2016 | |
Microsoft Edge Memory Corruption Vulnerability CVE-2016-7200 | HighExploited | 82.8% | 10 Nov, 2016 | |
Moodle Unrestricted file upload vulnerability CVE-2016-9187, GHSA-58fm-v4pr-jh8p | High | 4.0% | 04 Nov, 2016 | Packagist moodle/moodle |
Arbitrary code using "crafted image file" approach affecting Pillow CVE-2016-9190, GHSA-w4vg-rf63-f3j3, PYSEC-2016-9 | High | 1.9% | 04 Nov, 2016 | PyPI Pillow PyPI pillow |
git-fastclone permits arbitrary shell command execution from .gitmodules CVE-2015-8968, GHSA-8gg6-3r63-25m8 | High | 5.2% | 03 Nov, 2016 | RubyGems git-fastclone |
Adobe Flash Player Use-After-Free Vulnerability CVE-2016-7855 | HighExploited | 25.2% | 01 Nov, 2016 | |
Microsoft Office Memory Corruption Vulnerability CVE-2016-7193 | HighExploited | 57.6% | 14 Oct, 2016 | |
Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability CVE-2016-3393 | HighExploited | 68.5% | 14 Oct, 2016 | |
flask-oidc Open Redirect vulnerability CVE-2016-1000001, GHSA-f9q6-69fh-4w5w, PYSEC-2016-25 | High | 0.8% | 07 Oct, 2016 | PyPI flask-oidc |
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption CVE-2015-5162, GHSA-g2j5-7vgx-6xrx, PYSEC-2026-2412, PYSEC-2026-2491, PYSEC-2026-871 | High | 3.1% | 07 Oct, 2016 | PyPI cinder PyPI glance PyPI nova |
Django CSRF Protection Bypass CVE-2016-7401, GHSA-crhm-qpjc-cm64, PYSEC-2016-3 | High | 5.7% | 03 Oct, 2016 | PyPI django |
Authentication Bypass in passport-azure-ad CVE-2016-7191, GHSA-73jp-3c67-hjfv | High | 29.4% | 28 Sep, 2016 | npm passport-azure-ad |
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability CVE-2016-6415 | HighExploited | 87.7% | 19 Sep, 2016 | |
Drupal Saving user accounts can sometimes grant the user all roles CVE-2016-6211, GHSA-frqf-9qr4-6vxf | High | 2.8% | 09 Sep, 2016 | Packagist drupal/core Packagist drupal/drupal |