Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
ISC BIND Data Processing Errors Vulnerability CVE-2015-5477 | HighExploited | 99.6% | 29 Jul, 2015 | |
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability CVE-2015-2426 | HighExploited | 86.6% | 20 Jul, 2015 | |
Microsoft ATM Font Driver Privilege Escalation Vulnerability CVE-2015-2387 | HighExploited | 34.9% | 14 Jul, 2015 | |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2015-2425 | HighExploited | 44.7% | 14 Jul, 2015 | |
Microsoft PowerPoint Memory Corruption Vulnerability CVE-2015-2424 | HighExploited | 40.1% | 14 Jul, 2015 | |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2015-2419 | HighExploited | 53.0% | 14 Jul, 2015 | |
Django Denial-of-service by filling session store CVE-2015-5143, GHSA-h582-2pch-3xv3, PYSEC-2015-20 | High | 7.2% | 14 Jul, 2015 | PyPI Django PyPI django |
Django Vulnerable to HTTP Response Splitting Attack CVE-2015-5144, GHSA-q5qw-4364-5hhm, PYSEC-2015-10 | High | 3.2% | 14 Jul, 2015 | PyPI Django PyPI django |
Django ReDoS in validators.URLValidator CVE-2015-5145, GHSA-cqf7-ff9h-7967, PYSEC-2015-21 | High | 3.0% | 14 Jul, 2015 | PyPI Django PyPI django |
redcarpet Buffer Overflow vulnerability CVE-2015-5147, GHSA-7322-9mx6-5j2m | High | 2.5% | 14 Jul, 2015 | RubyGems redcarpet |
Centreon Command Injection CVE-2015-1561, GHSA-c4fj-3wqq-g9c9 | High | 8.3% | 14 Jul, 2015 | Packagist centreon/centreon |
RubyGems vulnerable to DNS hijack attack CVE-2015-3900, GHSA-wp3j-rvfp-624h | High | 8.9% | 24 Jun, 2015 | RubyGems rubygems-update |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2015-2360 | HighExploited | 14.8% | 10 Jun, 2015 | |
Microsoft Office Uninitialized Memory Use Vulnerability CVE-2015-1770 | HighExploited | 35.0% | 10 Jun, 2015 | |
Information Exposure in Docker Engine CVE-2015-3630, GHSA-8fvr-5rqf-3wwh, GO-2022-0638 | High | 0.5% | 18 May, 2015 | Go github.com/docker/docker |
Arbitrary File Write in Libcontainer CVE-2015-3629, GHSA-g44j-7vp3-68cv, GO-2022-0647 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Symlink Attack in Libcontainer and Docker Engine CVE-2015-3627, GHSA-g7v2-2qxx-wjrw, GO-2022-0649 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Microsoft Windows Remote Code Execution Vulnerability CVE-2015-1671 | HighExploited | 48.8% | 13 May, 2015 | |
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin CVE-2014-3598, GHSA-j6f7-g425-4gmx, PYSEC-2015-15 | High | 2.0% | 01 May, 2015 | PyPI pillow |
django-markupfield Arbitrary File Read CVE-2015-0846, GHSA-wxmr-7xjv-8xqw, PYSEC-2015-12 | High | 1.8% | 24 Apr, 2015 | PyPI django-markupfield |
TP-Link Multiple Archer Devices Directory Traversal Vulnerability CVE-2015-3035 | HighExploited | 83.9% | 22 Apr, 2015 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2015-1701 | HighExploited | 56.2% | 21 Apr, 2015 | |
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks CVE-2015-1852, GHSA-p9wq-mjh8-q72m, PYSEC-2015-30, PYSEC-2015-31 | High | 2.2% | 17 Apr, 2015 | PyPI keystonemiddleware PyPI python-keystoneclient |
Microsoft Office Memory Corruption Vulnerability CVE-2015-1641 | HighExploited | 97.2% | 14 Apr, 2015 | |
Apple OS X Authentication Bypass Vulnerability CVE-2015-1130 | HighExploited | 9.9% | 10 Apr, 2015 | |
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability CVE-2015-0666 | HighExploited | 40.4% | 03 Apr, 2015 | |
Slim vulnerable to PHP object injection CVE-2015-2171, GHSA-74mf-vjpg-9xh7 | High | 2.5% | 30 Mar, 2015 | Packagist slim/slim |
Django Denial-of-service possibility with strip_tags CVE-2015-2316, GHSA-j3j3-jrfh-cm2w, PYSEC-2015-18 | High | 4.8% | 25 Mar, 2015 | PyPI Django PyPI django |
OpenStack Glance Denial of service by creating a large number of images CVE-2014-9684, GHSA-h737-q6g6-8wr6, PYSEC-2015-37 | High | 2.0% | 24 Feb, 2015 | PyPI glance |
OpenStack Glance Denial of service by creating a large number of images CVE-2015-1881, GHSA-4jp4-3c62-r8jv, PYSEC-2015-38 | High | 2.1% | 24 Feb, 2015 | PyPI glance |
D-Link DIR-645 Router Remote Code Execution Vulnerability CVE-2015-2051 | HighExploited | 97.1% | 23 Feb, 2015 | |
RhodeCode and Kallithea are vulnerable to sensitive information disclosure CVE-2015-0260, GHSA-hhx9-4vw2-x54r, PYSEC-2015-29, PYSEC-2015-32 | High | 1.9% | 16 Feb, 2015 | PyPI Kallithea PyPI RhodeCode PyPI kallithea PyPI rhodecode |
SQL Injection in sequelize CVE-2015-1369, GHSA-xqg8-cv3h-xppv | High | 2.1% | 27 Jan, 2015 | npm sequelize |
Adobe Flash Player ASLR Bypass Vulnerability CVE-2015-0310 | HighExploited | 15.1% | 23 Jan, 2015 | |
Pillow denial of service via PNG bomb CVE-2014-9601, GHSA-h5rf-vgqx-wjv2, PYSEC-2015-16 | High | 4.7% | 16 Jan, 2015 | PyPI pillow |
Django DoS in django.views.static.serve CVE-2015-0221, GHSA-jhjg-w2cp-5j44, PYSEC-2015-6 | High | 4.5% | 16 Jan, 2015 | PyPI Django PyPI django |
Django database denial-of-service with ModelMultipleChoiceField CVE-2015-0222, GHSA-6g95-x6cj-mg4v, PYSEC-2015-7 | High | 2.7% | 16 Jan, 2015 | PyPI Django PyPI django |
Microsoft Windows TS WebProxy Directory Traversal Vulnerability CVE-2015-0016 | HighExploited | 75.8% | 13 Jan, 2015 | |
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability CVE-2014-100005 | HighExploited | 43.5% | 13 Jan, 2015 | |
Typo3 Vulnerable to Cache Poisoning CVE-2014-9509, GHSA-5479-gqqr-f9gj | High | 1.5% | 04 Jan, 2015 | Packagist typo3/cms |
Arbitrary Code Execution CVE-2014-9357, GHSA-997c-fj8j-rq5h, GO-2022-0640 | High | 6.2% | 16 Dec, 2014 | Go github.com/docker/docker |
Arbitrary Code Execution in Docker CVE-2014-6407, GHSA-5qgp-p5jc-w2rm, GO-2022-0630 | High | 4.9% | 12 Dec, 2014 | Go github.com/docker/docker |
Potential for Script Injection in syntax-error CVE-2014-7192, GHSA-5726-g6r9-5f22 | High | 13.0% | 11 Dec, 2014 | npm syntax-error |
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability CVE-2014-9163 | HighExploited | 44.9% | 10 Dec, 2014 | |
Adobe Flash Player Dereferenced Pointer Vulnerability CVE-2014-8439 | HighExploited | 20.4% | 25 Nov, 2014 | |
Moodle Temporary Passwords are Brute Force-able CVE-2014-7845, GHSA-9v64-447r-wch6 | High | 2.4% | 24 Nov, 2014 | Packagist moodle/moodle |
SQL Injection in Gogs CVE-2014-8682, GHSA-g6xv-8q23-w2q3, GO-2022-0831 | High | 32.6% | 21 Nov, 2014 | Go gogs.io/gogs |
SQL Injection in gogs.io/gogs CVE-2014-8681, GHSA-mr6h-chqp-p9g2, GO-2020-0021 | High | 4.4% | 21 Nov, 2014 | Go github.com/gogits/gogs Go gogs.io/gogs |
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability CVE-2014-6324 | HighExploited | 87.3% | 18 Nov, 2014 | |
MAGMI plugin for Magento Unsafe File Upload CVE-2014-8770, GHSA-x3gh-95p8-43qv | High | 6.5% | 13 Nov, 2014 | Packagist dweeves/magmi |