Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability CVE-2014-6332 | HighExploited | 94.9% | 11 Nov, 2014 | |
Microsoft IME Japanese Privilege Escalation Vulnerability CVE-2014-4077 | HighExploited | 54.6% | 11 Nov, 2014 | |
Plone and Zope2 do not reseed pseudo-random number generator CVE-2012-6661, GHSA-48vv-2pmq-9fvv, PYSEC-2014-51, PYSEC-2014-76 | High | 2.4% | 03 Nov, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Smarty arbitrary PHP code execution CVE-2014-8350, GHSA-2pmx-6mm6-6v72 | High | 3.1% | 03 Nov, 2014 | Packagist smarty/smarty |
Bottle does not properly limit content-types CVE-2014-3137, GHSA-873q-wpqr-xfgw, PYSEC-2014-77 | High | 3.1% | 25 Oct, 2014 | PyPI bottle |
python-gnupg's shell_quote function does not properly quote strings CVE-2014-1927, GHSA-r3vr-prwv-86g9, PYSEC-2014-90 | High | 3.4% | 25 Oct, 2014 | PyPI python-gnupg |
python-gnupg's shell_quote function does not properly escape characters CVE-2014-1928, GHSA-2jc8-4r6g-282j, PYSEC-2014-91 | High | 0.6% | 25 Oct, 2014 | PyPI python-gnupg |
Microsoft Windows Code Injection Vulnerability CVE-2014-6352 | HighExploited | 77.5% | 22 Oct, 2014 | |
Denial-of-Service Memory Exhaustion in qs CVE-2014-7191, GHSA-jjv7-qpx3-h62q | High | 8.3% | 19 Oct, 2014 | npm qs |
Microsoft Windows Remote Code Execution Vulnerability CVE-2014-4148 | HighExploited | 59.9% | 15 Oct, 2014 | |
Microsoft Internet Explorer Privilege Escalation Vulnerability CVE-2014-4123 | HighExploited | 47.1% | 15 Oct, 2014 | |
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability CVE-2014-4114 | HighExploited | 81.6% | 15 Oct, 2014 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2014-4113 | HighExploited | 86.6% | 15 Oct, 2014 | |
Directory Traversal in send CVE-2014-6394, GHSA-xwg4-93c6-3h42 | High | 4.3% | 08 Oct, 2014 | npm send |
WEC Map (wec_map) extension for TYPO3 allows SQL Injection CVE-2014-6295, GHSA-f3v6-g4mv-pjhq | High | 1.2% | 03 Oct, 2014 | Packagist jbartels/wec-map Packagist web-tp3/wec_map |
yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions CVE-2014-6289, GHSA-46fq-683f-2jwq | High | 1.5% | 03 Oct, 2014 | Packagist dl/yag Packagist punktde/pt_extbase |
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism CVE-2014-6288, GHSA-2jq7-pgqq-gqqj | High | 1.9% | 03 Oct, 2014 | Packagist in2code/powermail |
TYPO3 powermail extension has unrestricted file upload vulnerability CVE-2014-3947, GHSA-m278-c6gg-4jrr | High | 2.3% | 03 Oct, 2014 | Packagist in2code/powermail |
OpenStack keystonemiddleware does not verify certificate CVE-2014-7144, GHSA-7f2c-vp52-gmfw, PYSEC-2014-26, PYSEC-2014-71 | High | 1.9% | 02 Oct, 2014 | PyPI keystonemiddleware PyPI python-keystoneclient |
Plone Code Injection vulnerability CVE-2012-5485, GHSA-7hxc-mwx7-5hmc, PYSEC-2014-27 | High | 2.1% | 30 Sep, 2014 | PyPI Plone PyPI plone |
HTTP header injection in Plone and Zope2 CVE-2012-5486, GHSA-77hv-8796-8ccp, PYSEC-2014-28, PYSEC-2014-73 | High | 2.5% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Plone Sandbox Bypass CVE-2012-5487, GHSA-9m4g-f42q-vrrh, PYSEC-2014-29 | High | 1.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Code Injection vulnerability CVE-2012-5488, GHSA-cxw7-85xm-3xrc, PYSEC-2014-30 | High | 2.6% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone and Zope2 vulnerable to unauthorized access to restricted attributes CVE-2012-5489, GHSA-879r-7f3w-8jj3, PYSEC-2014-31, PYSEC-2014-74 | High | 1.9% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
Plone Sandbox Bypass CVE-2012-5493, GHSA-25jh-5h5r-h33m, PYSEC-2014-35 | High | 1.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone DoS via Crafted URL CVE-2012-5496, GHSA-gx6w-hcw3-5r37, PYSEC-2014-38 | High | 1.6% | 30 Sep, 2014 | PyPI plone |
Plone denial of service via Caching Bypass CVE-2012-5498, GHSA-97rj-p794-wq6m, PYSEC-2014-40 | High | 2.7% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone is vulnerable to denial of service CVE-2012-5499, GHSA-wrf2-2rch-cmr9, PYSEC-2014-41 | High | 2.5% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Arbitrary File Read CVE-2012-5501, GHSA-pvhv-qwc8-r2pg, PYSEC-2014-43 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone allows remote attackers to read hidden folder contents CVE-2012-5503, GHSA-prr5-pfr8-q9f3, PYSEC-2014-45 | High | 2.1% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone Information Disclosure CVE-2012-5505, GHSA-cq5g-924m-7fxh, PYSEC-2014-47 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI plone |
Plone denial of service via RSS Feed Request CVE-2012-5506, GHSA-79hj-474h-v4xv, PYSEC-2014-48 | High | 1.6% | 30 Sep, 2014 | PyPI plone |
Plone and Zope2 affected by Race Condition CVE-2012-5507, GHSA-3qpr-7rmg-73v8, PYSEC-2014-49, PYSEC-2014-75 | High | 1.4% | 30 Sep, 2014 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
GNU Bash OS Command Injection Vulnerability CVE-2014-6278 | HighExploited | 99.7% | 30 Sep, 2014 | |
Gentoo Portage does not verify X.509 certificates from SSL servers CVE-2013-2100, GHSA-8823-xphr-qw9v, PYSEC-2014-115 | High | 1.6% | 29 Sep, 2014 | PyPI portage |
Apple OS X Heap-Based Buffer Overflow Vulnerability CVE-2014-4404 | HighExploited | 48.9% | 18 Sep, 2014 | |
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability CVE-2013-2597 | HighExploited | 1.5% | 31 Aug, 2014 | |
Django Incorrectly Validates URLs CVE-2014-0480, GHSA-f7cm-ccfp-3q4r, PYSEC-2014-4 | High | 2.3% | 26 Aug, 2014 | PyPI Django PyPI django |
Django denial of service via file upload naming CVE-2014-0481, GHSA-296w-6qhq-gf92, PYSEC-2014-5 | High | 2.4% | 26 Aug, 2014 | PyPI Django PyPI django |
Pillow denial of service via Crafted Block Size CVE-2014-3589, GHSA-cfmr-38g9-f2h7, PYSEC-2014-10 | High | 3.4% | 25 Aug, 2014 | PyPI pillow |
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events CVE-2014-5251, GHSA-gmvp-5rf9-mxcm, PYSEC-2014-107 | High | 1.6% | 25 Aug, 2014 | PyPI keystone |
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events CVE-2014-5252, GHSA-v8fq-gq9j-3v7h, PYSEC-2014-108 | High | 1.5% | 25 Aug, 2014 | PyPI keystone |
OpenStack Keystone Domain-scoped tokens don't get revoked CVE-2014-5253, GHSA-77w8-qv8m-386h, PYSEC-2014-109 | High | 1.5% | 25 Aug, 2014 | PyPI keystone |
SaltStack Salt Insecure Temporary File Creation CVE-2014-3563, GHSA-mfr3-9cj8-h2qm, PYSEC-2014-18 | High | 0.4% | 22 Aug, 2014 | PyPI salt |
Active Record subject to strong parameters protection bypass CVE-2014-3514, GHSA-9rf5-jm6f-2fmm | High | 2.8% | 20 Aug, 2014 | RubyGems activerecord |
Microsoft Internet Explorer Privilege Escalation Vulnerability CVE-2014-2817 | HighExploited | 26.3% | 12 Aug, 2014 | |
IPython Notebook vulnerable to improper validation of the origin of websocket requests CVE-2014-3429, GHSA-75cw-5cgv-g853, PYSEC-2014-21 | High | 4.7% | 07 Aug, 2014 | PyPI ipython |
Moodle vulnerable to PHP object injection attacks CVE-2014-3541, GHSA-fccf-p8fx-vjj4 | High | 3.7% | 29 Jul, 2014 | Packagist moodle/moodle |
Elasticsearch Remote Code Execution Vulnerability CVE-2014-3120 | HighExploited | 88.6% | 28 Jul, 2014 | |
Elasticsearch Logstash allows remote attackers to execute arbitrary commands CVE-2014-4326, GHSA-8qhq-rq4j-8prj | High | 3.3% | 22 Jul, 2014 | RubyGems logstash |