Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
phpMyAdmin micro history Implementation XSS Vulnerability CVE-2014-6300, GHSA-6wfj-2mw7-p5cg | Medium | 1.9% | 08 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page CVE-2014-8326, GHSA-pvr5-84gr-g985 | Medium | 1.5% | 05 Nov, 2014 | Packagist phpmyadmin/phpmyadmin |
OpenStack Identity Keystone Improper Privilege Management CVE-2014-0204, GHSA-c4p9-87h3-7vr4, PYSEC-2026-654 | Medium | 1.4% | 03 Nov, 2014 | PyPI keystone |
Plone contains Cross-site Request Forgery CVE-2012-5500, GHSA-2q75-f7cp-w86q, PYSEC-2014-42 | Medium | 1.1% | 03 Nov, 2014 | PyPI plone |
Exposure of Sensitive Information in Plone CVE-2012-5508, GHSA-wprr-mc54-c62q, PYSEC-2014-50 | Medium | 2.3% | 03 Nov, 2014 | PyPI Plone PyPI plone |
Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name CVE-2014-3473, GHSA-8vwv-2v7v-jmgr, PYSEC-2026-642 | Medium | 1.7% | 31 Oct, 2014 | PyPI horizon |
OpenStack Nova VMware instance leak potentially leading to compute DoS CVE-2014-8333, GHSA-g63p-mfcm-54c4, PYSEC-2026-872 | Medium | 2.0% | 31 Oct, 2014 | PyPI nova |
OpenStack Compute (Nova) Denial of Service vulnerability CVE-2014-3708, GHSA-43hc-pwvx-pmfg, PYSEC-2026-863 | Medium | 2.8% | 31 Oct, 2014 | PyPI nova |
Bundler may install gems from a different source than expected CVE-2013-0334, GHSA-49jx-9cmc-xjxm | Medium | 4.3% | 31 Oct, 2014 | RubyGems bundler |
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders CVE-2014-8327, GHSA-xwq4-2cwr-fv2q | Medium | 1.1% | 27 Oct, 2014 | Packagist co-stack/fal_sftp Packagist vertexvaar/falsftp |
Cobbler vulnerable to code injection via unsafe YAML loading CVE-2011-4953, GHSA-hpj3-5p46-g87w, PYSEC-2026-793 | Medium | 2.2% | 27 Oct, 2014 | PyPI cobbler |
Zend Access Restriction Bypass CVE-2014-8088, GHSA-f6rc-rh43-h8gr | Medium | 2.5% | 22 Oct, 2014 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
OpenStack Swift metadata constraints are not correctly enforced CVE-2014-7960, GHSA-g6x3-55qv-x6p2, PYSEC-2026-933 | Medium | 3.1% | 17 Oct, 2014 | PyPI swift |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1829, GHSA-cfj3-7x9c-4p3h, PYSEC-2014-13 | Medium | 2.2% | 15 Oct, 2014 | PyPI requests |
Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1830, GHSA-652x-xj99-gmcc, PYSEC-2014-14 | Medium | 2.0% | 15 Oct, 2014 | PyPI requests |
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3641, GHSA-qhch-g8qr-p497, PYSEC-2026-791 | Medium | 1.9% | 08 Oct, 2014 | PyPI cinder |
Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls CVE-2014-7189, GO-2021-0154 | Medium | 1.4% | 07 Oct, 2014 | Go stdlib |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service CVE-2014-3608, GHSA-92hc-c226-32q7, PYSEC-2026-869 | Medium | 1.7% | 06 Oct, 2014 | PyPI nova |
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting CVE-2014-6296, GHSA-mqhg-c7w9-w3cv | Medium | 0.9% | 03 Oct, 2014 | Packagist jbartels/wec-map Packagist web-tp3/wec_map |
TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users CVE-2014-6292, GHSA-377v-8637-6vq6 | Medium | 1.3% | 03 Oct, 2014 | Packagist in2code/femanager |
OpenStack Identity Keystone Exposure of Sensitive Information CVE-2014-3621, GHSA-8v8f-vc72-pmhc, PYSEC-2026-653 | Medium | 2.1% | 02 Oct, 2014 | PyPI keystone |
Plone Cross-site scripting Vulnerability CVE-2012-5490, GHSA-q46g-v7r4-9vhr, PYSEC-2014-32 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Information Disclosure CVE-2012-5491, GHSA-f8pg-wp5j-rjxx, PYSEC-2014-33 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Metadata Disclosure CVE-2012-5492, GHSA-6w93-4c4p-xv2x, PYSEC-2014-34 | Medium | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5494, GHSA-3g6w-4m7x-97v6, PYSEC-2014-36 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone User account enumeration via crafted URL CVE-2012-5497, GHSA-683w-84m7-p8pw, PYSEC-2014-39 | Medium | 2.2% | 30 Sep, 2014 | PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5502, GHSA-hr59-35cr-qf43, PYSEC-2014-44 | Medium | 1.0% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Cross-site scripting Vulnerability CVE-2012-5504, GHSA-5whw-5cmm-9jw4, PYSEC-2014-46 | Medium | 1.2% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Moodle allows discovery of an author's username CVE-2014-3617, GHSA-p5j7-26wj-423j | Medium | 1.1% | 15 Sep, 2014 | Packagist moodle/moodle |
Fat Free CRM subject to Cross-site Scripting CVE-2014-5441, GHSA-wcfx-3m6v-4frg | Medium | 1.9% | 12 Sep, 2014 | RubyGems fat_free_crm |
Django Middleware Enables Session Hijacking CVE-2014-0482, GHSA-625g-gx8c-xcmg, PYSEC-2014-6 | Medium | 2.0% | 26 Aug, 2014 | PyPI Django PyPI django |
Django data leakage via querystring manipulation in admin CVE-2014-0483, GHSA-rw75-m7gp-92m3, PYSEC-2014-7 | Medium | 2.0% | 26 Aug, 2014 | PyPI Django PyPI django |
OpenStack Glance improper validation of the image_size_cap configuration option CVE-2014-5356, GHSA-479j-jf2p-38pg, PYSEC-2026-810 | Medium | 2.1% | 25 Aug, 2014 | PyPI glance |
The Preview plugin in CKEditor allows Cross-site scripting (XSS) CVE-2014-5191, GHSA-v27h-j97p-wqmx | Medium | 1.8% | 07 Aug, 2014 | Packagist ckeditor/ckeditor |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3517, GHSA-xjmj-p278-4jp5, PYSEC-2026-884 | Medium | 2.0% | 07 Aug, 2014 | PyPI nova |
Moodle does not enforce the moodle/site:accessallgroups capability requirement CVE-2014-3553, GHSA-mg69-5q59-8jcg | Medium | 1.0% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3548, GHSA-f66h-6mj2-rwj2 | Medium | 1.8% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3547, GHSA-hwjv-mc78-cccj | Medium | 1.2% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle allows attackers to obtain username and course information CVE-2014-3546, GHSA-4c5g-w3gf-rf4f | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle remote code execution via quiz questions CVE-2014-3545, GHSA-3m99-h3hp-w9j7 | Medium | 1.7% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle Arbitrary File Read via XML External Entity vulnerability CVE-2014-3543, GHSA-27j2-c838-c3qg | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
Moodle allows remote attackers to read arbitrary files CVE-2014-3542, GHSA-xmwv-mqh8-4xgw | Medium | 1.4% | 29 Jul, 2014 | Packagist moodle/moodle |
OpenStack Neutron allows remote authenticated users to cause a denial of service CVE-2014-3555, GHSA-4pmp-38hf-rmwj | Medium | 2.2% | 23 Jul, 2014 | PyPI neutron |
Rosetta-Flash JSONP Vulnerability in hapi CVE-2014-4671, GHSA-363h-vj6q-3cmj | Medium | 22.0% | 09 Jul, 2014 | npm hapi |
IBM InfoSphere BigInsights Invalid Input Vulnerability CVE-2013-3993 | MediumExploited | 4.8% | 07 Jul, 2014 | |
OpenStack Swift Cross-site Scriping vulnerability CVE-2014-3497, GHSA-66vj-393f-hxfv, PYSEC-2026-928 | Medium | 2.1% | 03 Jul, 2014 | PyPI swift |
Eugene Pankov Ajenti Cross-site scripting Vulnerabilities CVE-2014-4301, GHSA-2ch8-f849-pjg3, PYSEC-2014-99 | Medium | 2.3% | 18 Jun, 2014 | PyPI ajenti |
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege CVE-2014-3476, GHSA-274v-r947-v34r, PYSEC-2026-649 | Medium | 2.3% | 17 Jun, 2014 | PyPI keystone |
Djiblets Cross-site scripting Vulnerability via JSON Objects CVE-2014-3994, GHSA-w7rq-8f2g-jvqr, PYSEC-2014-78 | Medium | 2.4% | 16 Jun, 2014 | PyPI Djblets PyPI djblets |
Djblets Cross-site scripting Vulnerability CVE-2014-3995, GHSA-4xf6-xr96-7vmp, PYSEC-2014-79 | Medium | 2.1% | 16 Jun, 2014 | PyPI Djblets PyPI djblets |