Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Privilege Escalation in Docker CVE-2014-3499, GHSA-wxj3-qwv4-cvfm, GO-2022-0752 | High | 0.4% | 11 Jul, 2014 | Go github.com/docker/docker |
Active Record contains SQL Injection via improper range quoting CVE-2014-3483, GHSA-r8fh-hq2p-7qhq | High | 4.2% | 07 Jul, 2014 | RubyGems activerecord |
SQL Injection in Active Record CVE-2014-3482, GHSA-mhwp-qhpc-h3jm | High | 4.3% | 07 Jul, 2014 | RubyGems activerecord |
Yii PHP Framework arbitrary PHP scripts execution CVE-2014-4672, GHSA-74qv-rv53-5wcx | High | 2.1% | 03 Jul, 2014 | Packagist yiisoft/yii |
GeSHi vulnerable to Directory Traversal CVE-2012-3521, GHSA-fw3x-2pr2-5j64 | High | 3.2% | 13 Jun, 2014 | Packagist geshi/geshi |
Dragonfly Code Injection vulnerability CVE-2013-1756, GHSA-p463-639r-q9g9 | High | 3.7% | 09 Jun, 2014 | RubyGems dragonfly |
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters CVE-2013-7323, GHSA-c2fx-8r76-gh36, PYSEC-2014-89 | High | 2.9% | 09 Jun, 2014 | PyPI python-gnupg |
Linux Kernel Privilege Escalation Vulnerability CVE-2014-3153 | HighExploited | 37.2% | 07 Jun, 2014 | |
XXE in SabreDAV CVE-2014-2055, GHSA-qm4x-ch5w-gr62 | High | 2.2% | 04 Jun, 2014 | Packagist sabre/dav |
PHPExcel vulnerable to XXE attacks through libxml CVE-2014-2054, GHSA-28rm-rj57-qjpv | High | 1.5% | 04 Jun, 2014 | Packagist phpoffice/phpexcel |
getID3 is vulnerable to XML External Entity (XXE) CVE-2014-2053, GHSA-5v43-55m5-qr8f | High | 4.7% | 04 Jun, 2014 | Packagist james-heinrich/getid3 |
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code CVE-2014-3942, GHSA-55g3-fjwm-w2c8 | High | 1.6% | 03 Jun, 2014 | Packagist typo3/cms |
Symfony Arbitrary PHP code Execution CVE-2013-1397, GHSA-7w53-hfpw-rg3g | High | 1.6% | 02 Jun, 2014 | Packagist symfony/symfony Packagist symfony/yaml |
Symphony Vulnerable to PHP Code Injection via YAML Parsing CVE-2013-1348, GHSA-2r5h-6r7v-5m7c | High | 1.6% | 02 Jun, 2014 | Packagist symfony/symfony Packagist symfony/yaml |
TYPO3 vulnerable to remote authenticated arbitrary code execution CVE-2013-4321, GHSA-m76j-69c2-c3m8 | High | 1.1% | 20 May, 2014 | Packagist typo3/cms |
TYPO3 doesn't properly check file extensions CVE-2013-4250, GHSA-54jj-pxx2-pv8h | High | 1.2% | 20 May, 2014 | Packagist typo3/cms |
SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346, GHSA-4433-4cxq-vv73, PYSEC-2014-85 | High | 2.4% | 20 May, 2014 | PyPI oauth2 |
Incorrect Privilege Assignment in Jinja2 CVE-2014-1402, GHSA-8r7q-cvjq-x353, PYSEC-2014-8 | High | 0.4% | 19 May, 2014 | PyPI Jinja2 PyPI jinja2 |
File Descriptor Leak Can Cause DoS Vulnerability in hapi CVE-2014-3742, GHSA-cqr7-78pj-3g7j | High | 2.4% | 16 May, 2014 | npm hapi |
Django Allows Open Redirects CVE-2014-3730, GHSA-vq3h-3q7v-9prw, PYSEC-2014-20 | High | 3.1% | 16 May, 2014 | PyPI Django PyPI django |
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability CVE-2014-1812 | HighExploited | 65.1% | 14 May, 2014 | |
Code injection in dragonfly gem CVE-2013-5671, GHSA-qrgf-jqqm-x7xv | High | 2.2% | 12 May, 2014 | RubyGems dragonfly RubyGems fog-dragonfly |
actionpack Path Traversal vulnerability CVE-2014-0130, GHSA-6x85-j5j2-27jx | HighExploited | 53.7% | 07 May, 2014 | RubyGems actionpack |
PyWBEM TOCTOU vulnerability in certificate validation CVE-2013-6418, GHSA-f9q5-46qg-74x4, PYSEC-2014-93 | High | 1.7% | 05 May, 2014 | PyPI pywbem |
Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters CVE-2014-2322, GHSA-hgmw-x865-hf9x | High | 2.2% | 02 May, 2014 | RubyGems Arabic-Prawn |
Transifex command-line client has improper certificate validation CVE-2013-7110, GHSA-jf99-2rj4-jxrm, PYSEC-2014-72 | High | 0.8% | 02 May, 2014 | PyPI transifex-client |
sfpagent Command Injection vulnerability CVE-2014-2888, GHSA-vm28-mrm7-fpjq | High | 2.2% | 23 Apr, 2014 | RubyGems sfpagent |
Django Reuses Cached CSRF Token CVE-2014-0473, GHSA-89hj-xfx5-7q66, PYSEC-2014-2 | High | 2.0% | 23 Apr, 2014 | PyPI Django PyPI django |
Django Vulnerable to MySQL Injection CVE-2014-0474, GHSA-wqjj-hx84-v449, PYSEC-2014-3 | High | 4.8% | 23 Apr, 2014 | PyPI Django PyPI django |
Pimcore Vulnerable to PHP Object Injection Attacks CVE-2014-2921, GHSA-g7pj-3v97-3vxp | High | 6.4% | 21 Apr, 2014 | Packagist pimcore/pimcore |
PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles CVE-2014-1932, GHSA-x895-2wrm-hvp7, PYSEC-2014-22 | High | 0.5% | 17 Apr, 2014 | PyPI pillow |
OpenStack Identity (Keystone) DoS through V3 API authentication chaining CVE-2014-2828, GHSA-6mv3-p2gr-wgqf, PYSEC-2014-106 | High | 3.2% | 15 Apr, 2014 | PyPI keystone |
OpenSSL Information Disclosure Vulnerability CVE-2014-0160 | HighExploited | 100.0% | 07 Apr, 2014 | |
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend CVE-2014-2237, GHSA-23x9-8hxr-978c, PYSEC-2014-105 | High | 1.4% | 01 Apr, 2014 | PyPI keystone |
OpenStack Nova VMWare driver leaks rescued images CVE-2014-2573, GHSA-jv34-xvjq-ppch, PYSEC-2014-113 | High | 0.7% | 25 Mar, 2014 | PyPI nova |
Microsoft Word Memory Corruption Vulnerability CVE-2014-1761 | HighExploited | 77.7% | 25 Mar, 2014 | |
Plone is vulnerable to email spoofing CVE-2013-4192, GHSA-f5h9-3hpf-9j8m, PYSEC-2014-56 | High | 1.1% | 11 Mar, 2014 | PyPI plone |
Plone Unrestricted Filed Manipulation vulnerability via content edit forms CVE-2013-4193, GHSA-6fgf-x7wg-hp8r, PYSEC-2014-57 | High | 1.2% | 11 Mar, 2014 | PyPI plone |
Plone Improper Access Control Vulnerability CVE-2013-4197, GHSA-jjvw-3h9j-p7jf, PYSEC-2014-61 | High | 1.3% | 11 Mar, 2014 | PyPI plone |
Improper Link Resolution Before File Access in logilab-commons CVE-2014-1838, GHSA-rr52-wg7f-8875, PYSEC-2014-83 | High | 0.3% | 11 Mar, 2014 | PyPI logilab-common |
Adobe Flash Player Double Free Vulnerablity CVE-2014-0502 | HighExploited | 24.8% | 21 Feb, 2014 | |
Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2014-0322 | HighExploited | 85.1% | 14 Feb, 2014 | |
python-bugzilla has improper validation of X.509 certificates CVE-2013-2191, GHSA-2q4h-27m7-rj67, PYSEC-2014-88 | High | 0.9% | 08 Feb, 2014 | PyPI python-bugzilla |
OpenStack Nova Live migration can leak root disk into ephemeral storage CVE-2013-7130, GHSA-99rx-9x8v-9j8p, PYSEC-2014-111 | High | 2.4% | 06 Feb, 2014 | PyPI nova |
OpenStack Swift Discloses Secret URLs to Timing Attack CVE-2014-0006, GHSA-cf9m-q836-vf26, PYSEC-2014-116 | High | 1.9% | 23 Jan, 2014 | PyPI swift |
python-keystoneclient missing expiration check in PKI token validation CVE-2013-2104, GHSA-4rrr-j7ff-r844, PYSEC-2014-69 | High | 2.1% | 21 Jan, 2014 | PyPI python-keystoneclient |
Plone Open Redirection vulnerability via next parameter CVE-2013-4200, GHSA-56p3-rrp4-2j82, PYSEC-2014-64 | High | 2.2% | 21 Jan, 2014 | PyPI Plone PyPI plone |
Adobe Reader and Acrobat Use-After-Free Vulnerability CVE-2014-0496 | HighExploited | 40.0% | 15 Jan, 2014 | |
Webbynode Code Injection vulnerability CVE-2013-7086, GHSA-p65m-qr5x-rrqq | High | 3.5% | 19 Dec, 2013 | RubyGems webbynode |
sprout Arbitrary Code Execution vulnerability CVE-2013-6421, GHSA-229r-pqp6-8w6g | High | 2.0% | 12 Dec, 2013 | RubyGems sprout |