Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Drupal Saving user accounts can sometimes grant the user all roles CVE-2016-6211, GHSA-frqf-9qr4-6vxf | High | 2.8% | 09 Sep, 2016 | Packagist drupal/core Packagist drupal/drupal |
ActiveRecord in Ruby on Rails allows database-query bypass CVE-2016-6317, GHSA-pr3r-4wrp-r2pv | High | 3.9% | 07 Sep, 2016 | RubyGems activerecord |
Apple iOS Webkit Memory Corruption Vulnerability CVE-2016-4657 | HighExploited | 66.8% | 25 Aug, 2016 | |
Apple iOS Memory Corruption Vulnerability CVE-2016-4656 | HighExploited | 23.6% | 25 Aug, 2016 | |
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability CVE-2016-6367 | HighExploited | 22.6% | 18 Aug, 2016 | |
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability CVE-2016-6366 | HighExploited | 87.6% | 18 Aug, 2016 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2016-3309 | HighExploited | 20.5% | 09 Aug, 2016 | |
Improper input validation in net/http and net/http/cgi CVE-2016-5386, GO-2022-0761 | High | 5.2% | 19 Jul, 2016 | Go stdlib |
HTTP Proxy header vulnerability CVE-2016-5385, GHSA-m6ch-gg5f-wxx3 | High | 50.4% | 19 Jul, 2016 | Packagist amphp/artax Packagist bugsnag/bugsnag-laravel Packagist drupal/core Packagist drupal/drupal +3 more |
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor CVE-2016-4985, GHSA-f7cr-7c2c-fm8r, PYSEC-2026-646 | High | 2.9% | 12 Jul, 2016 | PyPI ironic |
phpMyAdmin vulnerable to Cross-Site Request Forgery CVE-2016-5739, GHSA-2p7v-jm8m-g3qq | High | 2.9% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Denial Of Service (DOS) attack CVE-2016-5706, GHSA-9rmm-8fp4-26hv | High | 2.8% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
npm Token Leak in npm CVE-2016-3956, GHSA-m5h6-hr3q-22h5 | High | 5.5% | 02 Jul, 2016 | npm npm |
OpenStack Neutron Intended MAC-spoofing protection mechanism bypass CVE-2016-5363, GHSA-9pp3-cvmq-9p22, PYSEC-2026-852 | High | 3.3% | 17 Jun, 2016 | PyPI neutron |
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism CVE-2016-5362, GHSA-qpwc-p365-pqrr, PYSEC-2026-854 | High | 3.4% | 17 Jun, 2016 | PyPI neutron |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability CVE-2016-3643 | HighExploited | 3.7% | 17 Jun, 2016 | |
Microsoft Office OLE DLL Side Loading Vulnerability CVE-2016-3235 | HighExploited | 43.3% | 16 Jun, 2016 | |
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability CVE-2016-4523 | HighExploited | 31.2% | 09 Jun, 2016 | |
Katello SQL Injection vulnerabilities CVE-2016-3072, GHSA-527r-mfmj-prqf | High | 1.8% | 07 Jun, 2016 | RubyGems katello |
Doctrine Security Misconfiguration Vulnerability CVE-2015-5723, GHSA-pw5c-xqf2-6xc2 | High | 0.4% | 07 Jun, 2016 | Packagist aws/aws-sdk-php Packagist doctrine/annotations Packagist doctrine/cache Packagist doctrine/common +7 more |
Link Following in ansible CVE-2016-3096, GHSA-rh6x-qvg7-rrmj, PYSEC-2016-1 | High | 0.5% | 03 Jun, 2016 | PyPI ansible |
Symphony Denial of Service Via Overlong Usernames CVE-2016-4423, GHSA-whgv-8cg3-7hcm | High | 1.9% | 01 Jun, 2016 | Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Symfony Cryptographic Vulnerability CVE-2016-1902, GHSA-jjx5-fq5g-8xpc | High | 1.9% | 01 Jun, 2016 | Packagist symfony/security Packagist symfony/security-core Packagist symfony/symfony |
Privilege Elevation in runc CVE-2016-3697, GHSA-q3j5-32m5-58c2, GO-2021-0070 | High | 0.4% | 01 Jun, 2016 | Go github.com/opencontainers/runc |
Denial of service due to unchecked parameters in crypto/dsa CVE-2016-3959, GO-2022-0166 | High | 4.4% | 23 May, 2016 | Go stdlib |
Privilege escalation on Windows via malicious DLL in syscall CVE-2016-3958, GO-2021-0163 | High | 0.4% | 23 May, 2016 | Go stdlib |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2016-2157, GHSA-f5pm-c4cw-563p | High | 1.0% | 22 May, 2016 | Packagist moodle/moodle |
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method CVE-2016-3693, GHSA-c92m-rrrc-q5wf | High | 2.1% | 20 May, 2016 | RubyGems safemode |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2016-0189 | HighExploited | 94.1% | 11 May, 2016 | |
Microsoft Windows Media Center Remote Code Execution Vulnerability CVE-2016-0185 | HighExploited | 69.8% | 11 May, 2016 | |
Mercurial vulnerable to arbitrary code execution when converting Git repos CVE-2016-3105, GHSA-49cw-434h-qc57, PYSEC-2016-28 | High | 2.8% | 09 May, 2016 | PyPI mercurial |
ImageMagick Improper Input Validation Vulnerability CVE-2016-3714 | HighExploited | 97.5% | 05 May, 2016 | |
Apache Struts Command Injection Vulnerability CVE-2016-3081 | HighExploited | 96.9% | 26 Apr, 2016 | |
High severity vulnerability that affects electron CVE-2016-1202, GHSA-gvcj-pfq2-wxj7 | High | 0.4% | 25 Apr, 2016 | npm electron |
TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers CVE-2015-5271, GHSA-8936-44gw-7664, PYSEC-2016-34 | High | 2.5% | 15 Apr, 2016 | PyPI tripleo-heat-templates |
Denial of service or RCE from libxml2 and libxslt CVE-2015-8806, GHSA-7hp2-xwpj-95jq | High | 5.0% | 13 Apr, 2016 | RubyGems nokogiri |
Regular Expression Denial of Service in hawk CVE-2016-2515, GHSA-jcpv-g9rr-qxrc | High | 3.4% | 13 Apr, 2016 | npm hawk |
Pillow Buffer overflow in ImagingFliDecode CVE-2016-0775, GHSA-8xjv-v9xq-m5h9, PYSEC-2016-6 | High | 2.5% | 13 Apr, 2016 | PyPI Pillow PyPI pillow |
Pillow buffer overflow in ImagingPcdDecode CVE-2016-2533, GHSA-3c5c-7235-994j, PYSEC-2016-19 | High | 4.0% | 13 Apr, 2016 | PyPI pillow |
Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068, GHSA-j7c2-rqm3-c97m, PYSEC-2016-26 | High | 5.4% | 13 Apr, 2016 | PyPI mercurial |
Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069, GHSA-8fm8-7365-5rh2, PYSEC-2016-27 | High | 5.0% | 13 Apr, 2016 | PyPI mercurial |
Mercurial arbitrary code execution vulnerability CVE-2016-3630, GHSA-9vjf-jjcq-3gh7, PYSEC-2016-29 | High | 4.9% | 13 Apr, 2016 | PyPI mercurial |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2016-0167 | HighExploited | 5.7% | 12 Apr, 2016 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2016-0165 | HighExploited | 13.7% | 12 Apr, 2016 | |
Microsoft Windows CSRSS Security Feature Bypass Vulnerability CVE-2016-0151 | HighExploited | 62.8% | 12 Apr, 2016 | |
Drupal arbitrary code execution CVE-2016-3171, GHSA-69g8-g9jq-74v7 | High | 3.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal saving user accounts can sometimes grant the user all roles CVE-2016-3169, GHSA-q3p9-8728-wq7x | High | 2.2% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Open redirect vulnerability in the drupal_goto function CVE-2016-3167, GHSA-gxwx-c7m8-f95h | High | 1.4% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Form API ignores access restrictions on submit buttons CVE-2016-3165, GHSA-4gh5-3hqj-x3pj | High | 1.4% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal Open Redirect CVE-2016-3164, GHSA-836p-6p4j-35cg | High | 1.9% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |