Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Nova Information leak in libvirt LVM-backed instances CVE-2012-5625, GHSA-rwhr-h69g-8qmq, PYSEC-2012-41, PYSEC-2012-42 | Medium | 1.3% | 26 Dec, 2012 | PyPI nova |
Concrete5 Vulnerable to Cross-Site Scripting (XSS) CVE-2012-5181, GHSA-x4x9-4c65-73w8 | Medium | 1.4% | 21 Dec, 2012 | Packagist concrete5/concrete5 |
OpenStack Keystone intended authorization restrictions bypass CVE-2012-5571, GHSA-qvpr-qm6w-6rcc, PYSEC-2012-35 | Medium | 2.0% | 18 Dec, 2012 | PyPI Keystone PyPI keystone |
Moodle Allows Unauthenticated Dropbox Access CVE-2012-5471, GHSA-mpjx-8phj-5m34 | Medium | 1.3% | 21 Nov, 2012 | Packagist moodle/moodle |
Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords CVE-2012-5890, GHSA-m646-h2pw-56h4 | Medium | 1.4% | 17 Nov, 2012 | Packagist sjbr/sr-feuser-register |
powermail extension for TYPO3 has Cross-site Scripting vulnerability CVE-2012-5889, GHSA-8cg3-jfjx-3pp2 | Medium | 0.9% | 17 Nov, 2012 | Packagist in2code/powermail |
Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting CVE-2012-5888, GHSA-7p53-8wjr-j8h4 | Medium | 1.8% | 17 Nov, 2012 | Packagist b13/seo_basics |
Cross-site scripting in yui 2.4.0 CVE-2012-5881, GHSA-jjg9-mf63-vqrp | Medium | 2.5% | 16 Nov, 2012 | npm yui2 |
OpenStack Glance arbitrary deletion of non-protected images CVE-2012-4573, GHSA-6rrm-xxvh-7r87, PYSEC-2012-29 | Medium | 3.4% | 11 Nov, 2012 | PyPI glance |
OpenStack Glance arbitrary deletion of non-protected images CVE-2012-5482, GHSA-vwr9-9f8v-vp5m, PYSEC-2012-30 | Medium | 2.8% | 11 Nov, 2012 | PyPI glance |
Apache Libcloud vulnerable to certificate impersonation CVE-2012-3446, GHSA-prcq-52f8-fp44, PYSEC-2012-12 | Medium | 1.2% | 04 Nov, 2012 | PyPI apache-libcloud |
phpMyAdmin Unsafe Fetching of Javascript Code CVE-2012-5368, GHSA-xpxp-v33m-5jp9 | Medium | 1.4% | 25 Oct, 2012 | Packagist phpmyadmin/phpmyadmin |
Oracle Fusion Middleware Unspecified Vulnerability CVE-2012-0518 | MediumExploited | 4.7% | 16 Oct, 2012 | |
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed CVE-2012-4457, GHSA-x8h4-xf47-pqc3, PYSEC-2026-834 | Medium | 2.3% | 09 Oct, 2012 | PyPI Keystone PyPI keystone |
Cross-site Scripting in SmartyException CVE-2012-4437, GHSA-9gqj-ppv2-f2hq | Medium | 2.5% | 01 Oct, 2012 | Packagist smarty/smarty |
Drupal improper access restrictions CVE-2012-2153, GHSA-vpm6-h53m-x2xf | Medium | 1.9% | 01 Oct, 2012 | Packagist drupal/drupal |
Fork CMS Multiple XSS Vulnerabilities CVE-2012-1188, GHSA-j5fj-m342-mgcm | Medium | 4.5% | 26 Sep, 2012 | Packagist forkcms/forkcms |
Piwik (now Matomo) Vulnerable to Arbitrary Code Execution CVE-2011-4941, GHSA-2qr8-h6pq-m27v | Medium | 2.3% | 18 Sep, 2012 | Packagist matomo/matomo Packagist piwik/piwik |
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles CVE-2012-4413, GHSA-mrxv-65rv-6hxq, PYSEC-2026-833 | Medium | 1.9% | 18 Sep, 2012 | PyPI keystone |
Silverstripe XSS Vulnerabilities CVE-2012-4968, GHSA-v358-rvxr-wffx | Medium | 1.9% | 17 Sep, 2012 | Packagist silverstripe/framework |
Silverstripe CMS Arbitrary Code Execution CVE-2011-4962, GHSA-gv6c-59h4-9pmg | Medium | 3.9% | 17 Sep, 2012 | Packagist silverstripe/cms |
Beaker Sensitive Information Disclosure vulnerability CVE-2012-3458, GHSA-39vm-p9mr-4r27, PYSEC-2012-1 | Medium | 2.5% | 15 Sep, 2012 | PyPI beaker |
MoinMoin Improper Access Control CVE-2012-4404, GHSA-g4mx-rm5q-vh24, PYSEC-2012-10 | Medium | 2.1% | 10 Sep, 2012 | PyPI moin |
Typo3 Install Tool XSS Vulnerability CVE-2012-3531, GHSA-p9wg-jvj4-cx26 | Medium | 1.5% | 05 Sep, 2012 | Packagist typo3/cms |
Typo3 API XSS Vulnerability CVE-2012-3530, GHSA-94c2-g68f-9r98 | Medium | 1.6% | 05 Sep, 2012 | Packagist typo3/cms |
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects CVE-2012-3527, GHSA-m4hw-r893-xh4g | Medium | 2.1% | 05 Sep, 2012 | Packagist typo3/cms |
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by CVE-2012-3540, PYSEC-2012-18 | Medium | 2.9% | 05 Sep, 2012 | PyPI horizon |
Typo3 API XSS Vulnerabilities CVE-2012-1608, GHSA-w3v6-r62r-fvqh | Medium | 2.3% | 04 Sep, 2012 | Packagist typo3/cms |
TYPO3 allows remote attackers to obtain the database name via a direct request CVE-2012-1607, GHSA-q68v-vcjg-r3vp | Medium | 3.1% | 04 Sep, 2012 | Packagist typo3/cms |
Typo3 Extbase Framework Unsafe Deserialization CVE-2012-1605, GHSA-7jfm-px59-99w8 | Medium | 2.4% | 04 Sep, 2012 | Packagist typo3/cms |
Typo3 Exception Handler XSS CVE-2012-2112, GHSA-qfr3-29w6-hwpg | Medium | 1.4% | 27 Aug, 2012 | Packagist typo3/cms |
Elefant CMS Multiple XSS Vulnerabilities CVE-2012-1296, GHSA-qjjq-rcq8-jw6j | Medium | 1.3% | 26 Aug, 2012 | Packagist elefant/cms |
OpenStack Nova Long server names grow nova-api log files significantly CVE-2012-1585, GHSA-pjvw-p2v5-wf6q, PYSEC-2026-880 | Medium | 2.1% | 17 Aug, 2012 | PyPI nova |
actionpack Cross-site Scripting vulnerability CVE-2012-3465, GHSA-7g65-ghrg-hpf5 | Medium | 2.0% | 10 Aug, 2012 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2012-3464, GHSA-h835-75hw-pj89 | Medium | 2.6% | 10 Aug, 2012 | RubyGems activesupport |
actionpack Cross-site Scripting vulnerability CVE-2012-3463, GHSA-98mf-8f57-64qf | Medium | 1.3% | 10 Aug, 2012 | RubyGems actionpack |
actionpack Improper Authentication vulnerability CVE-2012-3424, GHSA-92w9-2pqw-rhjj | Medium | 1.9% | 08 Aug, 2012 | RubyGems actionpack |
Chef Improper Access Control vulnerability CVE-2010-5142, GHSA-f68m-q26r-64f6 | Medium | 1.6% | 08 Aug, 2012 | RubyGems chef |
Pupper does not properly restrict characters in Common Name field of Certificate Signing Request CVE-2012-3867, GHSA-q44r-f2hm-v76v | Medium | 2.5% | 06 Aug, 2012 | RubyGems puppet |
OpenStack Keystone token expiration issues CVE-2012-3426, GHSA-xp97-6w7r-4cjc, PYSEC-2012-34 | Medium | 2.3% | 31 Jul, 2012 | PyPI Keystone PyPI keystone |
Moodle Authentication Bypass in File Upload CVE-2012-3387, GHSA-w66h-c2vj-cm7f | Medium | 1.1% | 23 Jul, 2012 | Packagist moodle/moodle |
OpenStack Nova Directory traversal vulnerability CVE-2012-3360, GHSA-m454-cm7h-rqhh, PYSEC-2012-38 | Medium | 3.1% | 22 Jul, 2012 | PyPI nova |
OpenStack Nova Arbitrary file injection/corruption through directory traversal issues CVE-2012-3361, GHSA-cm54-3vvf-f5p8, PYSEC-2012-39 | Medium | 2.7% | 22 Jul, 2012 | PyPI nova |
Moodle Authentication Bypass in Question-Bank CVE-2012-2356, GHSA-3rqj-jchw-9cc7 | Medium | 1.4% | 21 Jul, 2012 | Packagist moodle/moodle |
Moodle Exposes Sensitive User Information CVE-2012-2353, GHSA-mr97-gvvg-rhgh | Medium | 1.4% | 21 Jul, 2012 | Packagist moodle/moodle |
Moodle Open Redirect in Calendar Set Page CVE-2011-4582, GHSA-jcrj-x36p-h9f6 | Medium | 1.2% | 20 Jul, 2012 | Packagist moodle/moodle |
Mail Gem Path Traversal vulnerability CVE-2012-2139, GHSA-cj92-c4fj-w9c5 | Medium | 4.9% | 18 Jul, 2012 | RubyGems mail |
Moodle Users Can Bypass Deleted Status CVE-2012-0797, GHSA-72gv-qqrp-h9qg | Medium | 1.1% | 17 Jul, 2012 | Packagist moodle/moodle |
Moodle does not properly restrict comment capabilities CVE-2011-4297, GHSA-62wv-866c-rh86 | Medium | 1.6% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle Open Redirect Via Error Messages CVE-2011-4294, GHSA-hxmp-8f47-x9fc | Medium | 1.5% | 16 Jul, 2012 | Packagist moodle/moodle |