Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
GeSHi vulnerable to Cross-site Scripting CVE-2012-3522, GHSA-f3f3-5q5j-6v47 | Medium | 1.2% | 13 Jun, 2014 | Packagist geshi/geshi |
ImpressCMS Cross-site scripting Vulnerability CVE-2014-4036, GHSA-f5jh-q6mp-9c8p | Medium | 1.0% | 11 Jun, 2014 | Packagist impresscms/impresscms |
Typo3 Information Disclosure CVE-2014-3946, GHSA-vccp-5v5h-p8m6 | Medium | 1.1% | 03 Jun, 2014 | Packagist typo3/cms |
TYPO3 Improper Session Invalidation CVE-2014-3944, GHSA-9j8h-xrgj-7gw2 | Medium | 1.3% | 03 Jun, 2014 | Packagist typo3/cms |
Typo3 Host Header Spoofing Vulnerability CVE-2014-3941, GHSA-594h-cx6w-p4jf | Medium | 2.7% | 03 Jun, 2014 | Packagist typo3/cms |
OpenStack Identity (Keystone) Denial of Service CVE-2013-2014, GHSA-7332-36h8-8jh8, PYSEC-2026-651 | Medium | 3.3% | 02 Jun, 2014 | PyPI keystone |
Hub Package Arbitrary File Overwrite CVE-2014-0177, GHSA-x5m6-jh4r-34mv | Medium | 0.4% | 27 May, 2014 | Go github.com/github/hub RubyGems hub |
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities CVE-2014-3840, GHSA-wpvx-26f7-65q3, PYSEC-2014-110 | Medium | 3.5% | 27 May, 2014 | PyPI mayan-edms |
Moodle cross-site scripting (XSS) vulnerability CVE-2014-0218, GHSA-ch68-5r37-p7c3 | Medium | 1.8% | 27 May, 2014 | Packagist moodle/moodle |
Moodle does not check for the moodle/course:viewhiddencourses capability CVE-2014-0217, GHSA-c3vx-v4x8-x894 | Medium | 1.9% | 27 May, 2014 | Packagist moodle/moodle |
Moodle does not properly restrict file access CVE-2014-0216, GHSA-8rc7-4qfv-4484 | Medium | 2.1% | 27 May, 2014 | Packagist moodle/moodle |
Moodle Reveals Student Information Meant To Be Anonymous CVE-2014-0215, GHSA-2fmv-j5xj-4fmq | Medium | 1.7% | 27 May, 2014 | Packagist moodle/moodle |
Moodle creates a MoodleMobile web-service token with an infinite lifetime CVE-2014-0214, GHSA-48rq-vj58-2mh6 | Medium | 3.0% | 27 May, 2014 | Packagist moodle/moodle |
Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2014-0213, GHSA-h75f-hjcr-cvh8 | Medium | 1.0% | 27 May, 2014 | Packagist moodle/moodle |
TYPO3 Improper Access Management in the File Abstraction Layer CVE-2013-4320, GHSA-p9jg-9w87-6rg4 | Medium | 1.0% | 20 May, 2014 | Packagist typo3/cms-core |
Typo3 Backend History Module Vulnerable to XSS CVE-2012-6146, GHSA-2hp4-8h6h-93rr | Medium | 1.0% | 20 May, 2014 | Packagist typo3/cms |
SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347, GHSA-rv8h-p43r-4x5r, PYSEC-2014-86 | Medium | 2.4% | 20 May, 2014 | PyPI oauth2 |
Insecure Temporary File in Jinja2 CVE-2014-0012, GHSA-fqh9-2qgg-h84h, PYSEC-2014-82 | Medium | 0.4% | 19 May, 2014 | PyPI Jinja2 PyPI jinja2 |
GitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed CVE-2013-4489, GHSA-95xq-v4m2-fq3r | Medium | 1.4% | 17 May, 2014 | RubyGems gitlab-grit |
lxml Cross-site Scripting Via Control Characters CVE-2014-3146, GHSA-57qw-cc2g-pv5p, PYSEC-2014-9 | Medium | 6.3% | 14 May, 2014 | PyPI lxml |
Cobbler Path Traversal vulnerability CVE-2014-3225, GHSA-xc7w-jvhx-p6q9, PYSEC-2026-797 | Medium | 8.9% | 14 May, 2014 | PyPI cobbler |
omniauth-facebook Cross-Site Request Forgery vulnerability CVE-2013-4562, GHSA-cf36-985g-v73c | Medium | 1.2% | 13 May, 2014 | RubyGems omniauth-facebook |
SOAPpy vulnerable to XXE attacks CVE-2014-3243, GHSA-2gh8-gr6x-7q26, PYSEC-2026-923 | Medium | 2.7% | 12 May, 2014 | PyPI SOAPpy PyPI soappy |
SOAPpy vulnerable to XML External Entity attacks CVE-2014-3242, GHSA-52wr-3vww-rmpq, PYSEC-2026-924 | Medium | 1.8% | 12 May, 2014 | PyPI SOAPpy PyPI soappy |
eyeD3 is vulnerable to arbitrary file modification via symlink attack CVE-2014-1934, GHSA-4r2w-w73w-36jm, PYSEC-2026-807 | Medium | 0.3% | 08 May, 2014 | PyPI eyeD3 PyPI eyed3 |
OpenStack Neutron Improper Authentication vulnerability CVE-2014-0056, GHSA-72p9-6gc7-q93r, PYSEC-2026-851 | Medium | 1.4% | 08 May, 2014 | PyPI neutron |
Linux Kernel Race Condition Vulnerability CVE-2014-0196 | MediumExploited | 20.3% | 07 May, 2014 | |
PyWBEM TOCTOU vulnerability in certificate validation CVE-2013-6444, GHSA-gh2c-6m38-c78j, PYSEC-2014-94 | Medium | 1.1% | 05 May, 2014 | PyPI pywbem |
Plone Filesystem path information leak CVE-2013-7060, GHSA-rg52-j87w-pf83, PYSEC-2014-65, PYSEC-2014-67 | Medium | 2.2% | 02 May, 2014 | PyPI Products.CMFPlone PyPI plone PyPI products-cmfplone |
Plone Privilege escalation through exposed underlying API CVE-2013-7061, GHSA-4vr8-r7qr-fpvq, PYSEC-2014-66, PYSEC-2014-68 | Medium | 1.3% | 02 May, 2014 | PyPI Plone PyPI Products.CMFPlone PyPI plone PyPI products-cmfplone |
Ajenti Cross-site scripting (XSS) vulnerability CVE-2014-2260, GHSA-9crx-p357-5vw8, PYSEC-2014-98 | Medium | 1.5% | 30 Apr, 2014 | PyPI ajenti |
Cross-site scripting vulnerability in includes/actions/InfoAction.php CVE-2014-2853, GHSA-6h86-9r5g-f2h5 | Medium | 2.4% | 29 Apr, 2014 | Packagist mediawiki/core |
Exposure of Sensitive Information in bio-basespace-sdk CVE-2013-7111, GHSA-xwr3-fmgj-mmfr | Medium | 1.5% | 29 Apr, 2014 | RubyGems bio-basespace-sdk |
DOMPDF Arbitrary File Read CVE-2014-2383, GHSA-qr6q-w4gj-3865 | Medium | 39.4% | 28 Apr, 2014 | Packagist dompdf/dompdf |
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability CVE-2014-0162, GHSA-r7pj-rvwg-vxhr, PYSEC-2026-817 | Medium | 2.0% | 27 Apr, 2014 | PyPI glance |
Script Injection in Show In Browser gem CVE-2013-2105, GHSA-9hx9-w2j6-rw76 | Medium | 0.4% | 22 Apr, 2014 | RubyGems show_in_browser |
rbovirt uses the rest-client gem with SSL verification disabled CVE-2014-0036, GHSA-ww79-8xwv-932x | Medium | 2.0% | 17 Apr, 2014 | RubyGems rbovirt |
Pillow Temporary file name leakage CVE-2014-1933, GHSA-r854-96gq-rfg3, PYSEC-2014-23 | Medium | 0.5% | 17 Apr, 2014 | PyPI Pillow PyPI pillow |
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests CVE-2014-0167, GHSA-p258-xmh3-72pv, PYSEC-2026-878 | Medium | 1.7% | 15 Apr, 2014 | PyPI nova |
OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting CVE-2014-0157, GHSA-cmg8-5c63-pg95, PYSEC-2026-822 | Medium | 1.2% | 15 Apr, 2014 | PyPI horizon |
python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware CVE-2014-0105, GHSA-gwvq-rgqf-993f, PYSEC-2014-70 | Medium | 1.1% | 15 Apr, 2014 | PyPI python-keystoneclient |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2012-6130, GHSA-mccq-3m7h-fjxg, PYSEC-2014-15 | Medium | 2.0% | 11 Apr, 2014 | PyPI roundup |
Roundup Cross-site scripting (XSS) vulnerability CVE-2012-6131, GHSA-gw2q-cgvq-9g3v, PYSEC-2014-16 | Medium | 2.0% | 11 Apr, 2014 | PyPI roundup |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2012-6132, GHSA-5v6q-xqq8-g4xj, PYSEC-2014-96 | Medium | 1.8% | 10 Apr, 2014 | PyPI roundup |
rack-ssl Cross-site Scripting vulnerability CVE-2014-2538, GHSA-v3rr-cph9-2g2q | Medium | 2.2% | 25 Mar, 2014 | RubyGems rack-ssl |
Moodle attackers to modify grade metadata CVE-2014-2572, GHSA-267j-cwvg-j28c | Medium | 1.1% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle's time-validation implementation allows bypassing intended restrictions CVE-2014-0127, GHSA-6p3g-hw27-qh44 | Medium | 1.5% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle allows attackers to modify the visibility of a badge CVE-2014-0129, GHSA-5rr5-fxhc-jv64 | Medium | 1.7% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle places a session key in a URL CVE-2014-0125, GHSA-j465-7mp6-3xg3 | Medium | 1.9% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle cross-site request forgery (CSRF) vulnerability CVE-2014-0126, GHSA-4wvg-7886-83gv | Medium | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |