Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
i18n gem Cross-site Scripting vulnerability CVE-2013-4492, GHSA-r5hc-9xx5-97rw | Medium | 2.2% | 07 Dec, 2013 | RubyGems i18n |
actionpack vulnerable to Cross-site Scripting CVE-2013-4491, GHSA-699m-mcjm-9cw8 | Medium | 2.2% | 07 Dec, 2013 | RubyGems actionpack |
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor CVE-2013-4522, GHSA-vm9c-39jx-q45w | Medium | 1.5% | 26 Nov, 2013 | Packagist moodle/moodle |
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability CVE-2013-5223 | MediumExploited | 50.8% | 19 Nov, 2013 | |
Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability CVE-2013-4714, GHSA-h7jc-pg2r-mqj4 | Medium | 1.2% | 06 Nov, 2013 | Packagist tikiwiki/tiki-manager |
OpenStack Compute Nova Improper Access Control CVE-2013-4497, GHSA-27q4-38qf-m25h, PYSEC-2026-859 | Medium | 1.8% | 05 Nov, 2013 | PyPI nova |
Cocaine Gem OS Command Injection vulnerability CVE-2013-4457, GHSA-c43v-hrmg-56r4 | Medium | 2.0% | 02 Nov, 2013 | RubyGems cocaine |
Moodle Authenticated Spelling Binary Remote Code Execution CVE-2013-3630, GHSA-wxqg-fg7v-mmc6 | Medium | 41.7% | 01 Nov, 2013 | Packagist moodle/moodle |
OpenStack Nova Denial of Service in network source security groups CVE-2013-4185, GHSA-ph2h-hh49-vh27, PYSEC-2026-879 | Medium | 2.1% | 29 Oct, 2013 | PyPI nova |
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS) CVE-2013-6289, GHSA-xc7q-q62f-wcvr | Medium | 1.8% | 28 Oct, 2013 | Packagist apache-solr-for-typo3/solr |
RubyGems Regular Expression Denial of Service CVE-2013-4363, GHSA-9qvm-2vhf-q649 | Medium | 1.7% | 17 Oct, 2013 | RubyGems rubygems-update |
RubyGems Regular Expression Denial of Service vulnerability CVE-2013-4287, GHSA-9j7m-rjqx-48vh | Medium | 3.3% | 17 Oct, 2013 | RubyGems rubygems-update |
actionmailer email address processing causes Denial of service CVE-2013-4389, GHSA-rg5m-3fqp-6px8 | Medium | 3.1% | 17 Oct, 2013 | RubyGems actionmailer |
Microsoft Silverlight Information Disclosure Vulnerability CVE-2013-3896 | MediumExploited | 67.1% | 09 Oct, 2013 | |
Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget CVE-2013-4249, GHSA-4894-5vqc-6r2r, PYSEC-2013-19 | Medium | 2.9% | 04 Oct, 2013 | PyPI django |
Django cross-site scripting (XSS) vulnerability via is_safe_url function CVE-2013-6044, GHSA-9cwg-mhxf-hh59, PYSEC-2013-21 | Medium | 2.3% | 04 Oct, 2013 | PyPI Django PyPI django |
RubyGems does not verify SSL certificate CVE-2012-2126, GHSA-5mgj-mvv8-46mw | Medium | 1.4% | 01 Oct, 2013 | RubyGems rubygems-update |
RubyGems HTTPS to HTTP redirect CVE-2012-2125, GHSA-228f-g3h7-3fj3 | Medium | 2.5% | 01 Oct, 2013 | RubyGems rubygems-update |
insecure temporary directory usage in passenger CVE-2013-4136, GHSA-w6rc-q387-vpgq | Medium | 0.3% | 30 Sep, 2013 | RubyGems passenger |
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CVE-2013-5943, PYSEC-2013-4 | Medium | 1.8% | 27 Sep, 2013 | PyPI graphite-web |
FriendsOfSymfony FOSUserBundle denial of service via login form CVE-2013-5750, GHSA-9mpf-g3fc-9rgv | Medium | 1.2% | 25 Sep, 2013 | Packagist friendsofsymfony/user-bundle |
Improper Link Resolution Before File Access in Suds CVE-2013-2217, GHSA-vpqp-hx68-p2wx, PYSEC-2013-32, PYSEC-2013-33 | Medium | 0.6% | 23 Sep, 2013 | PyPI suds PyPI suds-py3 |
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token CVE-2013-4294, GHSA-5qpp-v56f-mqfm, PYSEC-2013-42 | Medium | 2.7% | 23 Sep, 2013 | PyPI keystone |
OpenStack Cinder Denial of Service using XML entities CVE-2013-4202, GHSA-mfg4-9xf4-f45q, PYSEC-2026-790 | Medium | 2.6% | 16 Sep, 2013 | PyPI cinder |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4179, GHSA-j6xh-q826-55jw, PYSEC-2026-875 | Medium | 2.7% | 16 Sep, 2013 | PyPI nova |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information CVE-2013-2256, GHSA-5mj6-643f-2g85, PYSEC-2026-866 | Medium | 1.8% | 16 Sep, 2013 | PyPI nova |
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots CVE-2013-4183, GHSA-q3rw-wcj6-8cjf, PYSEC-2013-35 | Medium | 0.4% | 16 Sep, 2013 | PyPI cinder |
Ansible Arbitrary File Overwrite Vulnerability CVE-2013-4260, GHSA-pcqv-c46v-2p4v, PYSEC-2013-2 | Medium | 0.3% | 16 Sep, 2013 | PyPI ansible |
Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service CVE-2013-4761, GHSA-cj43-9h3w-v976 | Medium | 1.6% | 20 Aug, 2013 | RubyGems puppet |
OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4155, GHSA-wxx2-gqvv-34hx, PYSEC-2026-935 | Medium | 1.7% | 20 Aug, 2013 | PyPI swift |
Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting CVE-2013-5323, GHSA-6p8h-36qp-8h72 | Medium | 1.3% | 20 Aug, 2013 | Packagist sjbr/static-info-tables |
jplayer Cross Site Scripting vulnerability CVE-2013-2022, GHSA-3jcq-cwr7-6332 | Medium | 2.7% | 17 Aug, 2013 | npm jplayer |
Improper Link Resolution Before File Access in pip CVE-2013-1888, GHSA-4gv5-qhvr-36vv, PYSEC-2013-9 | Medium | 0.4% | 17 Aug, 2013 | PyPI pip |
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo CVE-2013-2132, GHSA-x33v-f3gp-gw2c, PYSEC-2013-30 | Medium | 4.1% | 15 Aug, 2013 | PyPI pymongo |
Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting CVE-2013-5100, GHSA-4mm3-xgc2-656r | Medium | 1.3% | 09 Aug, 2013 | Packagist jambagecom/div2007 |
Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown CVE-2013-2209, GHSA-6g7x-4c7m-g63m, PYSEC-2026-913 | Medium | 2.2% | 31 Jul, 2013 | PyPI reviewboard |
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities CVE-2013-4997, GHSA-5gh4-v2ch-pcx4 | Medium | 1.5% | 31 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4942, GHSA-9ww8-j8j2-3788 | Medium | 1.2% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4941, GHSA-64r3-582j-frqm | Medium | 1.2% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4940, GHSA-x5hj-47vv-53p8 | Medium | 1.5% | 29 Jul, 2013 | Packagist moodle/moodle npm yui |
Cross-Site Scripting in yui CVE-2013-4939, GHSA-mj87-8xf8-fp4w | Medium | 1.5% | 29 Jul, 2013 | npm yui |
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-2096, GHSA-m674-hmx2-ffhq, PYSEC-2026-876 | Medium | 0.4% | 09 Jul, 2013 | PyPI nova |
phpMyAdmin Global variables scope injection vulnerability CVE-2013-4729, GHSA-x962-w72p-mv7q | Medium | 1.1% | 04 Jul, 2013 | Packagist phpmyadmin/phpmyadmin |
PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting CVE-2013-4744, GHSA-c5x3-gq36-prrp | Medium | 1.4% | 01 Jul, 2013 | Packagist oliverklee/phpunit |
Typo3 Backend History Module Vulnerable to SQL Injection CVE-2012-6144, GHSA-947m-vgqc-x6v4 | Medium | 2.2% | 01 Jul, 2013 | Packagist typo3/cms |
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class CVE-2013-2083, GHSA-m63h-q4x3-6hwj | Medium | 2.3% | 25 May, 2013 | Packagist moodle/moodle |
Moodle does not enforce capability requirements for reading blog comments CVE-2013-2082, GHSA-wp3g-pr4h-q6vv | Medium | 2.3% | 25 May, 2013 | Packagist moodle/moodle |
Moodle does not consider "don't send" attributes during hub registration CVE-2013-2081, GHSA-x3x8-fjw6-hccx | Medium | 1.5% | 25 May, 2013 | Packagist moodle/moodle |
Moodle is vulnerable to Sensitive Information Disclosure CVE-2013-2080, GHSA-wmmc-qjq2-vvm2 | Medium | 1.8% | 25 May, 2013 | Packagist moodle/moodle |
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user CVE-2013-2059, GHSA-hj89-qmx9-8qmh, PYSEC-2013-41 | Medium | 2.5% | 21 May, 2013 | PyPI keystone |