Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Mozilla Firefox Information Disclosure Vulnerability CVE-2013-1675 | MediumExploited | 6.7% | 16 May, 2013 | |
Zend Framework XXE Vulnerability CVE-2012-5657, GHSA-9m5v-vq4f-mrvf | Medium | 1.7% | 02 May, 2013 | Packagist zendframework/zendframework1 |
Django Data leakage via admin history log CVE-2013-0305, GHSA-r7w6-p47g-vj53, PYSEC-2013-16 | Medium | 1.9% | 02 May, 2013 | PyPI Django PyPI django |
Django is vulnerable to Denial of Service attack in formset CVE-2013-0306, GHSA-g8xg-jgj6-49r3, PYSEC-2013-17 | Medium | 2.6% | 02 May, 2013 | PyPI Django PyPI django |
Devise does not properly perform type conversion when performing database queries CVE-2013-0233, GHSA-jxhw-mg8m-2pj8 | Medium | 14.6% | 25 Apr, 2013 | RubyGems devise |
OpenStack Keystone allows context-dependent attackers to bypass access restrictions CVE-2013-0282, GHSA-8833-qrvm-wc3h, PYSEC-2026-652 | Medium | 1.8% | 12 Apr, 2013 | PyPI Keystone PyPI keystone |
OpenStack Keystone Denial of Service vulnerability via a large HTTP request CVE-2013-0270, GHSA-4ppj-4p4v-jf4p, PYSEC-2026-650 | Medium | 3.2% | 12 Apr, 2013 | PyPI keystone |
newrelic_rpm Gem Discloses Sensitive Information CVE-2013-0284, GHSA-q6cw-2553-7837 | Medium | 1.3% | 09 Apr, 2013 | RubyGems newrelic_rpm |
omniauth-oauth2 Cross-Site Request Forgery vulnerability CVE-2012-6134, GHSA-fgmx-8h93-26fh | Medium | 1.2% | 09 Apr, 2013 | RubyGems omniauth-oauth2 |
ldoce Gem Arbitrary Command Execution CVE-2013-1911, GHSA-g266-3crh-h7gj | Medium | 2.0% | 03 Apr, 2013 | RubyGems ldoce |
XML External Entity (XXE) in Django CVE-2013-1665, GHSA-x64m-686f-fmm3, PYSEC-2026-802 | Medium | 4.5% | 03 Apr, 2013 | PyPI Django PyPI django |
XML Entity Expansion (XEE) in Django CVE-2013-1664, GHSA-qrh7-x6fp-c2mp, PYSEC-2026-801 | Medium | 4.8% | 03 Apr, 2013 | PyPI Django PyPI django |
Moodle does not properly manage privileges for WebDAV repositories CVE-2013-1836, GHSA-664q-mrxx-2x2v | Medium | 1.9% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle allows remote authenticated users to reassign notes CVE-2013-1834, GHSA-prrh-679x-79qh | Medium | 1.7% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle includes the WebDAV password in the configuration form CVE-2013-1832, GHSA-pgp5-rcwp-qvfg | Medium | 1.1% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle reveals absolute path in exception message CVE-2013-1831, GHSA-xr24-jp5c-6c4v | Medium | 1.6% | 25 Mar, 2013 | Packagist moodle/moodle |
Moodle does not enforce the forceloginforprofiles setting CVE-2013-1830, GHSA-8r7x-qq55-74v2 | Medium | 1.8% | 25 Mar, 2013 | Packagist moodle/moodle |
OpenStack Glance is vulnerable to Exposure of Sensitive Information CVE-2013-1840, GHSA-c8w9-83vg-r8vv, PYSEC-2013-46 | Medium | 1.7% | 22 Mar, 2013 | PyPI glance |
OpenStack Keystone Improper Authentication vulnerability CVE-2013-1865, GHSA-22q6-wwq7-2jj9, PYSEC-2013-39 | Medium | 2.6% | 22 Mar, 2013 | PyPI keystone |
Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests CVE-2013-2633, GHSA-v8h8-93mx-82h5 | Medium | 1.0% | 21 Mar, 2013 | Packagist matomo/matomo Packagist piwik/piwik |
Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS) CVE-2013-1844, GHSA-5fpj-6vq6-fmwh | Medium | 0.9% | 21 Mar, 2013 | Packagist matomo/matomo Packagist piwik/piwik |
TYPO3 Open redirect vulnerability in the Access tracking mechanism CVE-2013-1843, GHSA-7gxq-5qqc-v3fc | Medium | 2.4% | 20 Mar, 2013 | Packagist typo3/cms-core |
actionpack Cross-site Scripting vulnerability CVE-2013-1857, GHSA-j838-vfpq-fmf2 | Medium | 1.9% | 19 Mar, 2013 | RubyGems actionpack |
activesupport Improper Input Validation vulnerability CVE-2013-1856, GHSA-9c2j-593q-3g82 | Medium | 2.1% | 19 Mar, 2013 | RubyGems activesupport |
actionpack Cross-site Scripting vulnerability CVE-2013-1855, GHSA-q759-hwvc-m3jg | Medium | 2.6% | 19 Mar, 2013 | RubyGems actionpack |
Active Record Improper Input Validation CVE-2013-1854, GHSA-3crr-9vmg-864v | Medium | 3.5% | 19 Mar, 2013 | RubyGems activerecord |
jQuery vulnerable to Cross-Site Scripting (XSS) CVE-2011-4969, GHSA-579v-mp3v-rrw5 | Medium | 19.2% | 08 Mar, 2013 | Maven org.webjars.npm:jquery NuGet jQuery RubyGems jquery-rails npm jquery |
spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles CVE-2013-2506, GHSA-jp57-9j37-5476 | Medium | 1.3% | 08 Mar, 2013 | RubyGems spree_auth_devise |
Spree Improper Input Validation vulnerability CVE-2013-1656, GHSA-jxx8-v83v-rhw3 | Medium | 1.5% | 08 Mar, 2013 | RubyGems spree |
RDoc contains XSS vulnerability CVE-2013-0256, GHSA-v2r9-c84j-v7xm | Medium | 3.0% | 01 Mar, 2013 | RubyGems rdoc |
Rack vulnerable to Denial of Service CVE-2013-0184, GHSA-v882-ccj6-jc48 | Medium | 2.4% | 01 Mar, 2013 | RubyGems rack |
Rack rubygems receiving excessively long lines triggers out-of-memory error CVE-2013-0183, GHSA-3pxh-h8hw-mj8w | Medium | 3.8% | 01 Mar, 2013 | RubyGems rack |
Rack vulnerable to REDoS CVE-2012-6109, GHSA-h77x-m5q8-c29h | Medium | 2.7% | 01 Mar, 2013 | RubyGems rack |
ldap_fluff authentication bypass CVE-2012-5604, GHSA-9whh-582r-589h | Medium | 1.8% | 01 Mar, 2013 | RubyGems ldap_fluff |
OpenStack Glance logs user name and password in cleartext CVE-2013-0212, GHSA-xv7j-2v4w-cjvh, PYSEC-2013-37 | Medium | 3.0% | 24 Feb, 2013 | PyPI glance |
Zend Framework XEE Vulnerability CVE-2012-6532, GHSA-jh4x-4wmf-67pr | Medium | 1.8% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
Zend Framework XEE Vulnerability CVE-2012-6531, GHSA-h5p3-7mg6-hgj4 | Medium | 2.5% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
ActiveRecord vulnerable to modification of protected model attributes CVE-2013-0276, GHSA-gr44-7grc-37vq | Medium | 3.0% | 13 Feb, 2013 | RubyGems activerecord |
Rack arbitrary code execution via timing attack CVE-2013-0263, GHSA-xc85-32mf-xpv8 | Medium | 5.4% | 08 Feb, 2013 | RubyGems rack |
Rack Vulnerable to Path Traversal CVE-2013-0262, GHSA-85r7-w5mv-c849 | Medium | 2.9% | 08 Feb, 2013 | RubyGems rack |
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests CVE-2012-6112, GHSA-fx5h-3786-h2w6 | Medium | 2.3% | 27 Jan, 2013 | Packagist moodle/moodle |
Moodle Arbitrary File Read via Backup Functionality CVE-2012-6099, GHSA-cr78-rphw-w73p | Medium | 1.1% | 27 Jan, 2013 | Packagist moodle/moodle |
Active Record allows bypassing of database-query restrictions CVE-2013-0155, GHSA-gppp-5xc5-wfpx | Medium | 8.2% | 13 Jan, 2013 | RubyGems activerecord |
Authlogic Information Exposure vulnerability CVE-2012-6497, GHSA-rx7j-mw4c-76g9 | Medium | 2.7% | 04 Jan, 2013 | RubyGems authlogic |
MoinMoin Directory Traversal vulnerability CVE-2012-6080, GHSA-v33q-2xcj-4f3m, PYSEC-2013-5 | Medium | 4.0% | 03 Jan, 2013 | PyPI moin |
MoinMoin Multiple unrestricted file upload vulnerabilities CVE-2012-6081, GHSA-m2c4-jgmm-fvq3, PYSEC-2013-6 | Medium | 35.1% | 03 Jan, 2013 | PyPI moin |
MoinMoin Cross-site scripting (XSS) vulnerability CVE-2012-6082, GHSA-452h-rx28-49w9, PYSEC-2013-23 | Medium | 2.1% | 03 Jan, 2013 | PyPI moin |
MoinMoin Multiple vulnerable to directory traversal CVE-2012-6495, GHSA-6gx4-29v9-g9q5, PYSEC-2013-7 | Medium | 18.6% | 03 Jan, 2013 | PyPI Moin PyPI moin |
Symfony Access Control Vulnerability CVE-2012-6432, GHSA-89cp-fvcc-hxh7 | Medium | 1.2% | 27 Dec, 2012 | Packagist symfony/symfony |
Symfony Allows URI Restrictions Bypass Via Double-Encoded String CVE-2012-6431, GHSA-83c3-qx27-2rwr | Medium | 1.9% | 27 Dec, 2012 | Packagist symfony/http-foundation Packagist symfony/routing Packagist symfony/security Packagist symfony/symfony |