Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle allows attackers to obtain sensitive information CVE-2014-0124, GHSA-fc5p-vj3h-x7g4 | Medium | 1.7% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle allows bypass of intended access restrictions CVE-2014-0122, GHSA-f9m9-494r-w36p | Medium | 1.0% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle does not properly restrict access CVE-2014-0123, GHSA-2vhr-4mhq-m35c | Medium | 1.5% | 24 Mar, 2014 | Packagist moodle/moodle |
Moodle cross-site scripting (XSS) vulnerabilities CVE-2013-7341, GHSA-j6c3-3c4w-qv8p | Medium | 2.4% | 24 Mar, 2014 | Packagist moodle/moodle Packagist typo3/cms |
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability CVE-2014-2120 | MediumExploited | 22.6% | 19 Mar, 2014 | |
SabreDAV Directory Traversal vulnerability CVE-2013-1939, GHSA-qg5v-jw6f-rpfj | Medium | 1.8% | 14 Mar, 2014 | Packagist sabre/dav |
Wicked gem contains Path traversal vulnerability CVE-2013-4413, GHSA-rprj-g6xc-p5gq | Medium | 3.0% | 11 Mar, 2014 | RubyGems wicked |
Plone Authenticated Denial of Service vulnerability CVE-2013-4188, GHSA-w3pw-qxjj-6prr, PYSEC-2014-52 | Medium | 1.3% | 11 Mar, 2014 | PyPI plone |
Plone Privilege escalation due improper authorization CVE-2013-4189, GHSA-pwpq-632g-h49g, PYSEC-2014-53 | Medium | 1.3% | 11 Mar, 2014 | PyPI Plone PyPI plone |
Plone vulnerable to cross-site scripting CVE-2013-4190, GHSA-89rq-27xp-vgv7, PYSEC-2014-54 | Medium | 1.8% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to Information Exposure when generating zip archives CVE-2013-4191, GHSA-grwx-4p5v-9g2g, PYSEC-2014-55 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to File System Path Exposure CVE-2013-4194, GHSA-mm32-jw73-9227, PYSEC-2014-58 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone Multiple open redirect vulnerabilities CVE-2013-4195, GHSA-j67j-8hrp-76xm, PYSEC-2014-59 | Medium | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone is vulnerable to information exposure via the object manager implementation CVE-2013-4196, GHSA-qphh-5fv5-2mjj, PYSEC-2014-60 | Medium | 1.4% | 11 Mar, 2014 | PyPI plone |
Plone's authenticated users able to alter their password despite of policy definition CVE-2013-4198, GHSA-qjxf-6pr8-j87v, PYSEC-2014-62 | Medium | 1.1% | 11 Mar, 2014 | PyPI Plone PyPI plone |
Creation of Temporary File With Insecure Permissions in logilab-commons CVE-2014-1839, GHSA-g5m2-22h2-rr3j, PYSEC-2014-84 | Medium | 0.4% | 11 Mar, 2014 | PyPI logilab-common |
OpenStack Nova DoS through ephemeral disk backing files CVE-2013-6437, GHSA-hrv9-4x4c-9jc8, PYSEC-2026-874 | Medium | 2.0% | 06 Mar, 2014 | PyPI nova |
Microsoft Internet Explorer Information Disclosure Vulnerability CVE-2013-7331 | MediumExploited | 50.2% | 26 Feb, 2014 | |
actionpack Improper Input Validation vulnerability CVE-2014-0082, GHSA-7cgp-c3g7-qvrw | Medium | 6.2% | 20 Feb, 2014 | RubyGems actionpack |
Rails vulnerable to Cross-site Scripting CVE-2014-0081, GHSA-m46p-ggm5-5j83 | Medium | 4.0% | 20 Feb, 2014 | RubyGems actionpack RubyGems rails |
Array data injection vulnerability in activerecord CVE-2014-0080, GHSA-hqf9-rc9j-5fmj | Medium | 1.3% | 20 Feb, 2014 | RubyGems activerecord |
Puppet does not properly restrict access to node resources CVE-2011-0528, GHSA-9pvx-fwwh-w289 | Medium | 1.7% | 17 Feb, 2014 | RubyGems puppet |
OpenStack Glance sensitive information disclosure via logs CVE-2014-1948, GHSA-4xw6-hj5p-4j79, PYSEC-2014-102 | Medium | 0.3% | 14 Feb, 2014 | PyPI glance |
CiviCRM SQL injection vulnerability via Quick Search API CVE-2013-4662, GHSA-4465-r2hg-v4rj | Medium | 1.0% | 29 Jan, 2014 | Packagist civicrm/civicrm-core |
httplib2 incorrectly checks SSL certificate CVE-2013-2037, GHSA-q48q-77qv-cf9p, PYSEC-2014-81 | Medium | 1.3% | 18 Jan, 2014 | PyPI httplib2 |
OpenStack Nova Router metadata queries are not restricted by tenant CVE-2013-6419, GHSA-22w9-j288-8p9w, PYSEC-2026-858 | Medium | 1.9% | 07 Jan, 2014 | PyPI nova |
Phusion Passenger Denial of Service CVE-2013-2119, GHSA-9qj7-jvg4-qr2x | Medium | 0.4% | 03 Jan, 2014 | RubyGems passenger |
Fat Free CRM vulnerable to Exposure of Sensitive Information CVE-2013-7249, GHSA-f25h-3mj6-4jpg | Medium | 2.6% | 02 Jan, 2014 | RubyGems fat_free_crm |
Fat Free CRM vulnerable to SQL Injection CVE-2013-7225, GHSA-9ggp-5rf4-x7q9 | Medium | 1.9% | 02 Jan, 2014 | RubyGems fat_free_crm |
Fat Free CRM allows remote attackers to obtain sensitive information via a direct request CVE-2013-7224, GHSA-4xq9-vw89-p5cx | Medium | 2.5% | 02 Jan, 2014 | RubyGems fat_free_crm |
Fat Free CRM contains Cross-site Request Forgery vulnerablilities CVE-2013-7223, GHSA-mcvq-7xjq-46x6 | Medium | 1.2% | 02 Jan, 2014 | RubyGems fat_free_crm |
Fat Free CRM has fixed token value CVE-2013-7222, GHSA-g897-cgfc-7q8v | Medium | 2.4% | 02 Jan, 2014 | RubyGems fat_free_crm |
will_paginate Cross-site Scripting vulnerability CVE-2013-6459, GHSA-8r6h-7x9g-xmw9 | Medium | 2.2% | 31 Dec, 2013 | RubyGems will_paginate |
Joomla! Cross-site Scripting vulnerability CVE-2013-5583, GHSA-5xmg-w578-gq5j | Medium | 1.5% | 29 Dec, 2013 | Packagist joomla/joomla-cms |
OpenStack Nova uses insecure keystone middleware tmpdir by default CVE-2013-2030, GHSA-pxxv-rv32-2qgv, PYSEC-2026-911 | Medium | 0.2% | 27 Dec, 2013 | PyPI python-keystoneclient |
TYPO3 Improper Access Control vulnerability CVE-2013-7081, GHSA-r674-mc9p-hvw5 | Medium | 1.0% | 23 Dec, 2013 | Packagist typo3/cms-core |
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library CVE-2013-7080, GHSA-5fj8-wh3g-qvq2 | Medium | 1.2% | 23 Dec, 2013 | Packagist typo3/cms-core |
TYPO3 OpenID extension Open redirect vulnerability CVE-2013-7079, GHSA-838c-v5cq-hp33 | Medium | 1.2% | 23 Dec, 2013 | Packagist friendsoftypo3/openid |
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component CVE-2013-7075, GHSA-47ww-mq32-g4xw | Medium | 1.3% | 23 Dec, 2013 | Packagist typo3/cms |
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component CVE-2013-7073, GHSA-4rpv-g4gq-rh4m | Medium | 1.3% | 23 Dec, 2013 | Packagist typo3/cms |
TYPO3 Flow Cross-site scripting (XSS) vulnerability CVE-2013-7082, GHSA-vc74-c4m6-9979 | Medium | 1.2% | 21 Dec, 2013 | Packagist neos/flow Packagist typo3/flow |
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module CVE-2013-7077, GHSA-5cmc-r23m-hvrr | Medium | 1.2% | 21 Dec, 2013 | Packagist typo3/cms-core |
Denial of service in ruby-openid CVE-2013-1812, GHSA-6c8p-qphv-668v | Medium | 2.1% | 12 Dec, 2013 | RubyGems ruby-openid |
Microsoft WinVerifyTrust function Remote Code Execution CVE-2013-3900 | MediumExploited | 44.6% | 11 Dec, 2013 | |
Sup Code Injection vulnerability CVE-2013-4479, GHSA-hh2x-7mf9-78fr | Medium | 3.2% | 07 Dec, 2013 | RubyGems sup |
Sup Code Injection vulnerability CVE-2013-4478, GHSA-5f2p-6vjv-2q2m | Medium | 2.1% | 07 Dec, 2013 | RubyGems sup |
actionpack allows bypass of database-query restrictions CVE-2013-6417, GHSA-wpw7-wxjm-cw8r | Medium | 2.4% | 07 Dec, 2013 | RubyGems actionpack |
actionpack Cross-site Scripting vulnerability CVE-2013-6416, GHSA-w37c-q653-qg95 | Medium | 2.0% | 07 Dec, 2013 | RubyGems actionpack |
actionpack vulnerable to Cross-site Scripting CVE-2013-6415, GHSA-6h5q-96hp-9jgm | Medium | 3.2% | 07 Dec, 2013 | RubyGems actionpack |
actionpack Improper Input Validation vulnerability CVE-2013-6414, GHSA-mpxf-gcw2-pw5q | Medium | 20.7% | 07 Dec, 2013 | RubyGems actionpack |