Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Drupal Brute force amplification attacks via XML-RPC CVE-2016-3163, GHSA-h3r9-pjmr-f938 | High | 1.4% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Drupal File upload access bypass and denial of service CVE-2016-3162, GHSA-w2pj-c8x5-jvg2 | High | 1.6% | 12 Apr, 2016 | Packagist drupal/core Packagist drupal/drupal |
Salt Improper Access Control CVE-2016-1866, GHSA-vqh4-crjf-jjxx, PYSEC-2016-23 | High | 1.5% | 12 Apr, 2016 | PyPI salt |
OpenStack TripleO Heat templates spoof metadata requests CVE-2015-5303, GHSA-m94p-8942-pm49, PYSEC-2016-35 | High | 1.7% | 11 Apr, 2016 | PyPI tripleo-heat-templates |
Django XSS Vulnerability CVE-2016-2512, GHSA-pw27-w7w4-9qc7, PYSEC-2016-15 | High | 4.1% | 08 Apr, 2016 | PyPI Django PyPI django |
SAP NetWeaver Directory Traversal Vulnerability CVE-2016-3976 | HighExploited | 47.3% | 07 Apr, 2016 | |
actionpack allows remote code execution via application's unrestricted use of render method CVE-2016-2098, GHSA-78rc-8c29-p45g | High | 81.4% | 07 Apr, 2016 | RubyGems actionpack |
Google Chromium V8 Out-of-Bounds Read Vulnerability CVE-2016-1646 | HighExploited | 48.1% | 29 Mar, 2016 | |
Adobe Flash Player and AIR Integer Overflow Vulnerability CVE-2016-1010 | HighExploited | 19.3% | 12 Mar, 2016 | |
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability CVE-2016-0099 | HighExploited | 37.0% | 09 Mar, 2016 | |
Regular Expression Denial of Service in is-my-json-valid CVE-2016-2537, GHSA-f522-ffg8-j8r6 | High | 1.8% | 23 Feb, 2016 | npm is-my-json-valid |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2015-5338, GHSA-v33x-q8gh-4x42 | High | 0.8% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle uses predictable password-recovery tokens CVE-2015-5267, GHSA-382v-gxj9-ffhc | High | 2.4% | 22 Feb, 2016 | Packagist moodle/moodle |
Moodle open redirect vulnerability CVE-2015-3272, GHSA-2hw2-h3mf-c2j9 | High | 1.8% | 22 Feb, 2016 | Packagist moodle/moodle |
phpMyAdmin Unsafe comparison of XSRF/CSRF token CVE-2016-2041, GHSA-8m97-xc46-rw9w | High | 2.6% | 20 Feb, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Cryptographic Vulnerability CVE-2016-1927, GHSA-4gmg-gwjh-3mmr | High | 2.7% | 20 Feb, 2016 | Packagist phpmyadmin/phpmyadmin |
Directory traversal vulnerability in Action View in Ruby on Rails CVE-2016-0752, GHSA-xrr4-p6fq-hjg7 | HighExploited | 95.5% | 16 Feb, 2016 | RubyGems actionpack RubyGems actionview |
actionpack is vulnerable to denial of service via a crafted HTTP Accept header CVE-2016-0751, GHSA-ffpv-c4hm-3x6v | High | 9.7% | 16 Feb, 2016 | RubyGems actionpack |
actionpack is vulnerable to denial of service because of a wildcard controller route CVE-2015-7581, GHSA-9h6g-gp95-x3q5 | High | 6.7% | 16 Feb, 2016 | RubyGems actionpack |
Adobe Flash Player and AIR Use-After-Free Vulnerability CVE-2016-0984 | HighExploited | 54.5% | 10 Feb, 2016 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2016-0040 | HighExploited | 24.3% | 10 Feb, 2016 | |
Django Access Restrictions Bypass CVE-2016-2048, GHSA-46x4-9jmv-jc8p, PYSEC-2016-14 | High | 1.5% | 08 Feb, 2016 | PyPI django |
Access Restriction Bypass in kubernetes CVE-2016-1905, GHSA-xx8c-m748-xr4j, GO-2022-0893 | High | 1.6% | 03 Feb, 2016 | Go github.com/kubernetes/kubernetes |
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials CVE-2015-7546, GHSA-8c4w-v65p-jvcv, PYSEC-2016-20, PYSEC-2026-2549 | High | 2.0% | 03 Feb, 2016 | PyPI keystone PyPI keystonemiddleware |
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0738, GHSA-fxwr-2vxm-cg7p, PYSEC-2026-932 | High | 4.0% | 29 Jan, 2016 | PyPI swift |
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0737, GHSA-972c-cfv8-2hq8, PYSEC-2026-929 | High | 3.9% | 29 Jan, 2016 | PyPI swift |
Incorrect calculation affecting RSA computations in math/big CVE-2015-8618, GO-2021-0160 | High | 2.6% | 27 Jan, 2016 | Go stdlib |
CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter CVE-2015-8379, GHSA-556q-h4vr-pgh2 | High | 1.5% | 26 Jan, 2016 | Packagist cakephp/cakephp |
Microsoft Silverlight Runtime Remote Code Execution Vulnerability CVE-2016-0034 | HighExploited | 69.4% | 13 Jan, 2016 | |
Adobe Flash Player Integer Overflow Vulnerability CVE-2015-8651 | HighExploited | 67.7% | 28 Dec, 2015 | |
Joomla! Framework Remote Code Injection Vulnerability CVE-2015-8566, GHSA-wwfh-28hx-w2r2 | High | 8.5% | 16 Dec, 2015 | Packagist joomla/session |
Nokogiri subject to DoS via libxml2 vulnerability CVE-2015-5312, GHSA-xjqg-9jvg-fgx2 | High | 4.5% | 15 Dec, 2015 | RubyGems nokogiri |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2015-6175 | HighExploited | 5.3% | 09 Dec, 2015 | |
Symfony Vulnerable to Timing Attack CVE-2015-8125, GHSA-g97c-jfx6-xvxh | High | 2.5% | 07 Dec, 2015 | Packagist symfony/form Packagist symfony/security Packagist symfony/security-http Packagist symfony/symfony |
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 | HighExploited | 5.0% | 07 Dec, 2015 | |
Jenkins User Interface (UI) Information Disclosure Vulnerability CVE-2015-5317 | HighExploited | 23.0% | 25 Nov, 2015 | |
Twig remote code execution in templates CVE-2015-7809, GHSA-xw83-pwrm-9j74 | High | 3.4% | 06 Nov, 2015 | Packagist twig/twig |
Kallithea CRLF injection vulnerability CVE-2015-5285, GHSA-vfg9-phjp-9frw, PYSEC-2015-13 | High | 6.2% | 29 Oct, 2015 | PyPI kallithea |
phpMyAdmin allows remote attackers to spoof content via the url parameter CVE-2015-7873, GHSA-5pmg-qh2c-7j24 | High | 2.6% | 28 Oct, 2015 | Packagist phpmyadmin/phpmyadmin |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2015-7645 | HighExploited | 65.3% | 15 Oct, 2015 | |
DataTable Vulnerable to Cross-Site Scripting CVE-2015-6584, GHSA-4mv4-gmmf-q382 | High | 2.7% | 11 Sep, 2015 | Packagist datatables/datatables npm datatables |
Microsoft Win32k Memory Corruption Vulnerability CVE-2015-2546 | HighExploited | 10.1% | 09 Sep, 2015 | |
Microsoft Office Malformed EPS File Vulnerability CVE-2015-2545 | HighExploited | 85.9% | 09 Sep, 2015 | |
Directory Traversal in geddy CVE-2015-5688, GHSA-333x-9vgq-v2j4 | High | 9.4% | 04 Sep, 2015 | npm geddy |
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file CVE-2015-5163, GHSA-q73f-vjc2-3gqf, PYSEC-2015-39 | High | 1.5% | 19 Aug, 2015 | PyPI glance |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2015-2502 | HighExploited | 51.0% | 19 Aug, 2015 | |
Microsoft Office Memory Corruption Vulnerability CVE-2015-1642 | HighExploited | 53.1% | 15 Aug, 2015 | |
Ansible does not verify that the server hostname matches a domain name in certificates CVE-2015-3908, GHSA-w64c-pxjj-h866, PYSEC-2015-1 | High | 0.9% | 12 Aug, 2015 | PyPI ansible |
Red Hat Libuser Race Condition Vulnerability CVE-2015-3246 | HighExploited | 8.5% | 11 Aug, 2015 | |
Mozilla Firefox Security Feature Bypass Vulnerability CVE-2015-4495 | HighExploited | 68.6% | 08 Aug, 2015 |