Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function CVE-2013-1838, GHSA-63fq-8fp9-vhwq, PYSEC-2013-44 | High | 2.7% | 22 Mar, 2013 | PyPI nova |
Curl Gem insufficient URL escaping command injection CVE-2013-2617, GHSA-hxx6-p24v-wg8c | High | 4.4% | 20 Mar, 2013 | RubyGems curl |
MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2616, GHSA-w754-gq8r-pf5f | High | 3.6% | 20 Mar, 2013 | RubyGems mini_magick |
fastreader Gem for Ruby URI Handling Arbitrary Command Injection CVE-2013-2615, GHSA-w248-xr37-jx8m | High | 2.3% | 20 Mar, 2013 | RubyGems fastreader |
Shell command injection in command_wrap CVE-2013-1875, GHSA-p673-hjf2-pwfr | High | 3.6% | 20 Mar, 2013 | RubyGems command_wrap |
Puppet Improper Input Validation vulnerability CVE-2013-1655, GHSA-574q-fxfj-wv6h | High | 4.6% | 20 Mar, 2013 | RubyGems puppet |
TYPO3 SQL injection vulnerability in the Extbase Framework CVE-2013-1842, GHSA-m64j-j252-jxmr | High | 3.1% | 20 Mar, 2013 | Packagist typo3/cms-core |
Microsoft Silverlight Double Dereference Vulnerability CVE-2013-0074 | HighExploited | 78.9% | 13 Mar, 2013 | |
Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2013-2551 | HighExploited | 74.1% | 11 Mar, 2013 | |
Adobe Flash Player Code Execution Vulnerability CVE-2013-0648 | HighExploited | 11.1% | 27 Feb, 2013 | |
Adobe Flash Player Incorrect Default Permissions Vulnerability CVE-2013-0643 | HighExploited | 10.5% | 27 Feb, 2013 | |
Adobe Reader Buffer Overflow Vulnerability CVE-2013-0641 | HighExploited | 32.3% | 14 Feb, 2013 | |
Adobe Reader and Acrobat Memory Corruption Vulnerability CVE-2013-0640 | HighExploited | 86.9% | 14 Feb, 2013 | |
JSON gem has Improper Input Validation vulnerability CVE-2013-0269, GHSA-x457-cw4h-hq5f | High | 13.9% | 13 Feb, 2013 | RubyGems json |
activesupport in Rails vulnerable to incorrect data conversion CVE-2013-0333, GHSA-xgr2-v94m-rc9g | High | 95.6% | 30 Jan, 2013 | RubyGems activesupport |
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate. CVE-2012-5484, PYSEC-2013-36, PYSEC-2013-38 | High | 0.6% | 27 Jan, 2013 | PyPI freeipa PyPI ipa |
actionpack Improper Input Validation vulnerability CVE-2013-0156, GHSA-jmgw-6vjg-jjwg | High | 99.0% | 13 Jan, 2013 | RubyGems actionpack |
Adobe ColdFusion Information Disclosure Vulnerability CVE-2013-0631 | HighExploited | 66.4% | 09 Jan, 2013 | |
Adobe ColdFusion Directory Traversal Vulnerability CVE-2013-0629 | HighExploited | 65.8% | 09 Jan, 2013 | |
Active Record contains SQL Injection CVE-2012-6496, GHSA-gh2w-j7cx-2664 | High | 4.6% | 04 Jan, 2013 | RubyGems activerecord |
Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2012-4792 | HighExploited | 78.8% | 30 Dec, 2012 | |
OpenStack Keystone Insufficient token expiration CVE-2012-5563, GHSA-w66p-78g4-mr7g, PYSEC-2012-20 | High | 2.9% | 18 Dec, 2012 | PyPI keystone |
Microsoft Word Remote Code Execution Vulnerability CVE-2012-2539 | HighExploited | 53.0% | 12 Dec, 2012 | |
Python Keyring does not securely initialize encryption cipher CVE-2012-4571, GHSA-p3h7-3c45-qj4v, PYSEC-2012-8 | High | 0.4% | 30 Nov, 2012 | PyPI keyring |
Django Allows Arbitrary URL Generation CVE-2012-4520, GHSA-2655-q453-22f9, PYSEC-2012-7 | High | 3.7% | 18 Nov, 2012 | PyPI django |
Tweepy does not verify SSL Certificate CVE-2012-5825, GHSA-pwx5-xg7g-wpc5, PYSEC-2012-17 | High | 0.6% | 04 Nov, 2012 | PyPI tweepy |
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references CVE-2012-4399, GHSA-5964-pq8r-4q62 | High | 12.1% | 09 Oct, 2012 | Packagist cakephp/cakephp |
OpenStack Keystone Improper Authentication vulnerability CVE-2012-4456, GHSA-mf98-r2gf-2x3w, PYSEC-2026-832 | High | 4.0% | 09 Oct, 2012 | PyPI keystone |
ImpressPages CMS eval injection vulnerability CVE-2011-4932, GHSA-fr34-mx6j-vpxh | High | 3.9% | 06 Oct, 2012 | Packagist impresspages/impresspages |
Adobe Flash Player Integer Overflow Vulnerability CVE-2012-5054 | HighExploited | 21.2% | 24 Sep, 2012 | |
Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2012-4969 | HighExploited | 80.3% | 18 Sep, 2012 | |
OpenStack Keystone Allows Remote User Account Creation CVE-2012-3542, GHSA-gf2q-j2qq-pjf2, PYSEC-2012-19 | High | 2.5% | 05 Sep, 2012 | PyPI keystone |
Elixir can leak information due to weak use of crypto CVE-2012-2146, GHSA-vfcg-5ggc-3rxx, PYSEC-2012-13 | High | 1.7% | 26 Aug, 2012 | PyPI Elixir PyPI elixir |
PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function CVE-2012-1176, GHSA-6476-g47x-h3c7, PYSEC-2012-11 | High | 2.7% | 26 Aug, 2012 | PyPI pyfribidi |
Arbitrary file overwrite in OpenStack Nova CVE-2012-3447, GHSA-xc4g-7vw8-924h, PYSEC-2012-21 | High | 1.9% | 20 Aug, 2012 | PyPI nova |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2012-1535 | HighExploited | 70.4% | 15 Aug, 2012 | |
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability CVE-2012-1856 | HighExploited | 72.0% | 15 Aug, 2012 | |
Django Image Field Vulnerable to Image Decompression Bombs CVE-2012-3443, GHSA-59w8-4wm2-4xw8, PYSEC-2012-3 | High | 2.7% | 31 Jul, 2012 | PyPI Django PyPI django |
Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2012-3444, GHSA-5h2q-4hrp-v9rr, PYSEC-2012-4 | High | 1.8% | 31 Jul, 2012 | PyPI Django PyPI django |
Mail Gem Improper Input Validation vulnerability CVE-2012-2140, GHSA-rp63-jfmw-532w | High | 4.5% | 18 Jul, 2012 | RubyGems mail |
PHPMailer vulnerable to email header injection CVE-2012-0796, GHSA-398j-f7m7-795j | High | 1.7% | 17 Jul, 2012 | Packagist phpmailer/phpmailer |
Trytond allows modification of privileges of arbitrary users CVE-2012-0215, GHSA-cqg4-rf29-3mv6, PYSEC-2012-6 | High | 2.0% | 12 Jul, 2012 | PyPI trytond |
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2012-1854 | HighExploited | 20.9% | 10 Jul, 2012 | |
activerecord vulnerable to SQL Injection CVE-2012-2695, GHSA-76wq-xw4h-f8wj | High | 2.9% | 22 Jun, 2012 | RubyGems activerecord |
Rack-Cache caches sensitive headers CVE-2012-2671, GHSA-hrp6-w4v2-8737 | High | 2.3% | 17 Jun, 2012 | RubyGems rack-cache |
Cobbler subject to Command Injection CVE-2012-2395, GHSA-g34c-mg6m-xvxj, PYSEC-2026-792 | High | 5.7% | 16 Jun, 2012 | PyPI cobbler |
Microsoft XML Core Services Memory Corruption Vulnerability CVE-2012-1889 | HighExploited | 83.5% | 13 Jun, 2012 | |
Adobe Flash Player Memory Corruption Vulnerability CVE-2012-2034 | HighExploited | 7.7% | 09 Jun, 2012 | |
Tornado CRLF injection vulnerability CVE-2012-2374, GHSA-f7fv-v9rh-prvc, PYSEC-2012-5 | High | 1.3% | 23 May, 2012 | PyPI tornado |
feedparser denial of service vulnerability CVE-2012-2921, GHSA-hjf3-r7gw-9rwg, PYSEC-2012-14 | High | 2.7% | 21 May, 2012 | PyPI feedparser |