Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Access Restriction Bypass in Docker CVE-2014-6408, GHSA-44gg-pmqr-4669, GO-2022-0625 | Medium | 3.1% | 12 Dec, 2014 | Go github.com/docker/docker |
Subrion CMS Cross-site scripting in search CVE-2014-9120, GHSA-xjr9-2wf2-3v4w | Medium | 1.0% | 10 Dec, 2014 | Packagist intelliants/subrion |
jquery-ui Tooltip widget vulnerable to XSS CVE-2012-6662, GHSA-qqxp-xp9v-vvx6 | Medium | 7.5% | 24 Nov, 2014 | Maven org.webjars.npm:jquery-ui NuGet jQuery.UI.Combined RubyGems jquery-ui-rails npm jquery-ui |
Cross-site Scripting in jquery-ui CVE-2010-5312, GHSA-wcm2-9c89-wmfm | Medium | 18.4% | 24 Nov, 2014 | Maven org.webjars.npm:jquery-ui NuGet jQuery.UI.Combined RubyGems jquery-ui-rails npm jquery-ui |
pip lack of randomness in build directory CVE-2014-8991, GHSA-53mr-44pp-crf4, PYSEC-2014-11 | Medium | 0.4% | 24 Nov, 2014 | PyPI pip |
Moodle allows attackers to trigger the generation of arbitrary messages CVE-2014-9060, GHSA-c87j-9rrq-h3j8 | Medium | 2.1% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not provide charset information in HTTP headers CVE-2014-9059, GHSA-crcq-pw8h-9xwf | Medium | 1.8% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attacks to obtain sensitive information CVE-2014-7848, GHSA-47cw-whh9-j2fq | Medium | 2.1% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to cause a denial of service CVE-2014-7847, GHSA-6vjg-2q57-rgfw | Medium | 2.4% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not consider the moodle/tag:edit capability before adding a tag CVE-2014-7846, GHSA-468q-9cmp-76wc | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module CVE-2014-7838, GHSA-43r4-vm25-qm78 | Medium | 1.0% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to remove wiki pages CVE-2014-7837, GHSA-p3hj-cfhm-7g6v | Medium | 1.9% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2014-7836, GHSA-wpq5-q3mj-8f3r | Medium | 1.0% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle does not verify group permissions CVE-2014-7834, GHSA-557f-2hv4-7jjm | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to obtain sensitive information CVE-2014-7833, GHSA-jq7x-gm9r-v8m7 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle allows attackers to bypass the mod/lti:view capability requirement CVE-2014-7832, GHSA-mphj-h2fc-62x3 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Moodle exposes hidden grades to students CVE-2014-7831, GHSA-59j6-8g7w-prf7 | Medium | 1.7% | 24 Nov, 2014 | Packagist moodle/moodle |
Cross-site Scripting in Gogs CVE-2014-8683, GHSA-9hx4-qm7h-x84j, GO-2022-0642 | Medium | 1.9% | 21 Nov, 2014 | Go gogs.io/gogs |
Directory traversal vulnerability in actionpack CVE-2014-7829, GHSA-h56m-vwxc-3qpw | Medium | 4.2% | 18 Nov, 2014 | RubyGems actionpack |
Man-in-the-Middle (MitM) CVE-2014-5277, GHSA-8w94-cf6g-c8mg, GO-2022-0636, PYSEC-2014-80 | Medium | 1.9% | 17 Nov, 2014 | Go github.com/docker/docker PyPI docker-py |
facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability CVE-2014-3248, GHSA-92v7-pq4h-58j5 | Medium | 0.5% | 16 Nov, 2014 | RubyGems facter RubyGems hiera RubyGems mcollective-client RubyGems puppet |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2683, GHSA-5wm2-38q5-5rxv | Medium | 2.4% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2682, GHSA-gp39-h9c2-qw79 | Medium | 2.2% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
Several Zend Products Vulnerable to XXE and XEE attacks CVE-2014-2681, GHSA-43xg-87xw-jpv8 | Medium | 2.6% | 16 Nov, 2014 | Packagist zendframework/zendframework1 Packagist zendframework/zendopenid Packagist zendframework/zendrest Packagist zendframework/zendservice-amazon +6 more |
sprockets vulnerable to Path Traversal CVE-2014-7819, GHSA-33pp-3763-mrfp | Medium | 3.9% | 08 Nov, 2014 | RubyGems sprockets |
actionpack vulnerable to Path Traversal CVE-2014-7818, GHSA-29gr-w57f-rpfw | Medium | 3.5% | 08 Nov, 2014 | RubyGems actionpack |
phpMyAdmin micro history Implementation XSS Vulnerability CVE-2014-6300, GHSA-6wfj-2mw7-p5cg | Medium | 1.9% | 08 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page CVE-2014-8326, GHSA-pvr5-84gr-g985 | Medium | 1.5% | 05 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
OpenStack Identity Keystone Improper Privilege Management CVE-2014-0204, GHSA-c4p9-87h3-7vr4, PYSEC-2026-654 | Medium | 1.4% | 03 Nov, 2014 | PyPI keystone |
Plone contains Cross-site Request Forgery CVE-2012-5500, GHSA-2q75-f7cp-w86q, PYSEC-2014-42 | Medium | 1.1% | 03 Nov, 2014 | PyPI plone |
Exposure of Sensitive Information in Plone CVE-2012-5508, GHSA-wprr-mc54-c62q, PYSEC-2014-50 | Medium | 2.3% | 03 Nov, 2014 | PyPI Plone PyPI plone |
Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name CVE-2014-3473, GHSA-8vwv-2v7v-jmgr, PYSEC-2026-642 | Medium | 1.7% | 31 Oct, 2014 | PyPI horizon |
OpenStack Nova VMware instance leak potentially leading to compute DoS CVE-2014-8333, GHSA-g63p-mfcm-54c4, PYSEC-2026-872 | Medium | 2.0% | 31 Oct, 2014 | PyPI nova |
OpenStack Compute (Nova) Denial of Service vulnerability CVE-2014-3708, GHSA-43hc-pwvx-pmfg, PYSEC-2026-863 | Medium | 2.8% | 31 Oct, 2014 | PyPI nova |
Bundler may install gems from a different source than expected CVE-2013-0334, GHSA-49jx-9cmc-xjxm | Medium | 4.3% | 31 Oct, 2014 | RubyGems bundler |
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders CVE-2014-8327, GHSA-xwq4-2cwr-fv2q | Medium | 1.1% | 27 Oct, 2014 | Packagist co-stack/fal_sftp Packagist vertexvaar/falsftp |
Cobbler vulnerable to code injection via unsafe YAML loading CVE-2011-4953, GHSA-hpj3-5p46-g87w, PYSEC-2026-793 | Medium | 2.2% | 27 Oct, 2014 | PyPI cobbler |
Zend Access Restriction Bypass CVE-2014-8088, GHSA-f6rc-rh43-h8gr | Medium | 2.5% | 22 Oct, 2014 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
OpenStack Swift metadata constraints are not correctly enforced CVE-2014-7960, GHSA-g6x3-55qv-x6p2, PYSEC-2026-933 | Medium | 3.1% | 17 Oct, 2014 | PyPI swift |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1829, GHSA-cfj3-7x9c-4p3h, PYSEC-2014-13 | Medium | 2.2% | 15 Oct, 2014 | PyPI requests |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1830, GHSA-652x-xj99-gmcc, PYSEC-2014-14 | Medium | 2.0% | 15 Oct, 2014 | PyPI requests |
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3641, GHSA-qhch-g8qr-p497, PYSEC-2026-791 | Medium | 1.9% | 08 Oct, 2014 | PyPI cinder |
Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls CVE-2014-7189, GO-2021-0154 | Medium | 1.4% | 07 Oct, 2014 | Go stdlib |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service CVE-2014-3608, GHSA-92hc-c226-32q7, PYSEC-2026-869 | Medium | 1.7% | 06 Oct, 2014 | PyPI nova |
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting CVE-2014-6296, GHSA-mqhg-c7w9-w3cv | Medium | 0.9% | 03 Oct, 2014 | Packagist jbartels/wec-map Packagist web-tp3/wec_map |
TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users CVE-2014-6292, GHSA-377v-8637-6vq6 | Medium | 1.3% | 03 Oct, 2014 | Packagist in2code/femanager |
OpenStack Identity Keystone Exposure of Sensitive Information CVE-2014-3621, GHSA-8v8f-vc72-pmhc, PYSEC-2026-653 | Medium | 2.1% | 02 Oct, 2014 | PyPI keystone |
Plone Cross-site scripting Vulnerability CVE-2012-5490, GHSA-q46g-v7r4-9vhr, PYSEC-2014-32 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Information Disclosure CVE-2012-5491, GHSA-f8pg-wp5j-rjxx, PYSEC-2014-33 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Metadata Disclosure CVE-2012-5492, GHSA-6w93-4c4p-xv2x, PYSEC-2014-34 | Medium | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |