Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory CVE-2011-4293, GHSA-wxvp-8q8h-r6rr | Medium | 2.4% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) CVE-2011-4292, GHSA-fhgh-fjh9-vq62 | Medium | 2.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) CVE-2011-4291, GHSA-m2pf-4pf8-45j2 | Medium | 1.9% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members CVE-2011-4289, GHSA-3qg4-2fcm-c8f9 | Medium | 1.7% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not force password changes for autosubscribed users CVE-2011-4287, GHSA-j3x5-cwfj-pfcw | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2011-4286, GHSA-86v9-gqh9-8268 | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle Incorrect Default Settings CVE-2011-4285, GHSA-8vjj-wf73-w882 | Medium | 1.9% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page CVE-2011-4284, GHSA-mw6p-49jf-9935 | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle allows remote attackers to obtain sensitive information CVE-2011-4283, GHSA-m3xp-4hf3-qfpp | Medium | 2.1% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2011-4282, GHSA-6xqg-f34f-5fjx | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4281, GHSA-m97f-x4mr-4x3q | Medium | 1.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to XSS via bundled spikephpcoverage library CVE-2011-4280, GHSA-mx5g-3vxh-rgm8 | Medium | 3.6% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle does not use the forceloginforprofiles setting for course-profiles access control CVE-2011-4279, GHSA-phqj-xp48-7p7c | Medium | 1.4% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle XSS In Tag Autocomplete functionality CVE-2011-4278, GHSA-6656-6qwx-4c2m | Medium | 1.8% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4133, GHSA-7cvw-wrj9-q5fp | Medium | 1.0% | 16 Jul, 2012 | Packagist moodle/moodle |
Moodle XSS Vulnerability CVE-2011-4306, GHSA-r729-mx2r-j26j | Medium | 1.8% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle Allows Modification of Constants CVE-2011-4301, GHSA-jcrj-gmr6-p5j8 | Medium | 2.1% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle does not properly restrict access to category and course data CVE-2011-4300, GHSA-9p54-pc88-36c4 | Medium | 2.1% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Scripting CVE-2011-4299, GHSA-h6px-pvfh-q2jv | Medium | 1.2% | 11 Jul, 2012 | Packagist moodle/moodle |
Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4298, GHSA-8hxm-42v5-66hm | Medium | 1.0% | 11 Jul, 2012 | Packagist moodle/moodle |
actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request CVE-2012-2694, GHSA-q34c-48gc-m9g8 | Medium | 3.9% | 22 Jun, 2012 | RubyGems actionpack |
Active Record vulnerable to SQL Injection via nested query parameters CVE-2012-2661, GHSA-fh39-v733-mxfr | Medium | 4.0% | 22 Jun, 2012 | RubyGems activerecord |
Action Pack contains database-query restrictions bypass CVE-2012-2660, GHSA-hgpp-pp89-4fgf | Medium | 4.5% | 22 Jun, 2012 | RubyGems actionpack |
OpenStack Compute (Nova) Improper Input Validation CVE-2012-2654, GHSA-46r8-9cj7-pw6g, PYSEC-2012-37 | Medium | 2.6% | 21 Jun, 2012 | PyPI nova |
PyCrypto makes Use of Insufficiently Random Values CVE-2012-2417, GHSA-v367-p58w-98h5, PYSEC-2012-16 | Medium | 2.4% | 17 Jun, 2012 | PyPI PyCrypto PyPI pycrypto |
OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2012-2094, GHSA-j772-hpmw-32rm, PYSEC-2012-32 | Medium | 2.4% | 05 Jun, 2012 | PyPI horizon |
OpenStack Horizon Session Fixation CVE-2012-2144, GHSA-w7h9-8wr4-hwqh, PYSEC-2012-33 | Medium | 2.1% | 05 Jun, 2012 | PyPI horizon |
TYPO3 Path Traversal vulnerability CVE-2010-5099, GHSA-66j3-66cp-6c2m | Medium | 3.1% | 30 May, 2012 | Packagist typo3/cms |
Puppet Arbitrary Command Execution CVE-2012-1988, GHSA-6xxq-j39w-g3f6 | Medium | 2.6% | 29 May, 2012 | RubyGems puppet |
Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2012-1906, GHSA-c4mc-49hq-q275 | Medium | 0.4% | 29 May, 2012 | RubyGems puppet |
Puppet Privilege Escallation CVE-2012-1053, GHSA-77hg-g8cc-5r37 | Medium | 0.4% | 29 May, 2012 | RubyGems puppet |
TYPO3 Sensitive Information Disclosure via escapeStrForLike method CVE-2010-5104, GHSA-xgc2-q928-27wv | Medium | 1.6% | 21 May, 2012 | Packagist typo3/cms-core |
TYPO3 SQL Injection vulnerability CVE-2010-5103, GHSA-r2w2-2r2x-fpcx | Medium | 1.3% | 21 May, 2012 | Packagist typo3/cms |
TYPO3 Directory Traversal vulnerability CVE-2010-5101, GHSA-rmqc-wfjm-3f66 | Medium | 1.9% | 21 May, 2012 | Packagist typo3/cms |
Drupal Open Redirect CVE-2012-1589, GHSA-wwrm-8947-4m6c | Medium | 1.4% | 18 May, 2012 | Packagist drupal/drupal |
Spree uses a hardcoded hash value CVE-2008-7311, GHSA-g466-57gh-cqfw | Medium | 1.2% | 05 Apr, 2012 | RubyGems spree |
Spree does not properly restrict the use of a hash to provide values for a model's attributes CVE-2008-7310, GHSA-7h48-m3rw-vr27 | Medium | 1.2% | 05 Apr, 2012 | RubyGems spree |
Cross-site Scripting in actionpack CVE-2012-1099, GHSA-2xjj-5x6h-8vmf | Medium | 2.4% | 13 Mar, 2012 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2012-1098, GHSA-qv8p-v9qw-wc7g | Medium | 2.6% | 13 Mar, 2012 | RubyGems activesupport |
Fork CMS XSS via Highlight Parameter CVE-2012-1209, GHSA-v3fg-x8jw-m974 | Medium | 1.1% | 24 Feb, 2012 | Packagist forkcms/forkcms |
ForkCMS Directory Traversal vulnerability CVE-2012-1207, GHSA-4x28-j85r-668q | Medium | 1.7% | 24 Feb, 2012 | Packagist forkcms/forkcms |
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability CVE-2012-0767 | MediumExploited | 6.2% | 16 Feb, 2012 | |
phpMyAdmin Open Redirect in redirector CVE-2011-1941, GHSA-v6fw-xf2c-8q43 | Medium | 1.9% | 26 Jan, 2012 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Vulnerable to Cross-Site Scripting CVE-2011-1940, GHSA-4q58-5x28-53wv | Medium | 1.2% | 26 Jan, 2012 | Packagist phpmyadmin/phpmyadmin |
Virtualenv Allows Symlink Attack on /tmp/ CVE-2011-4617, GHSA-3jhc-wjqf-5f2c, PYSEC-2011-23 | Medium | 0.3% | 31 Dec, 2011 | PyPI virtualenv |
Rack Gem Subject to Denial of Service via Hash Collisions CVE-2011-5036, GHSA-v6j3-7jrw-hq2p | Medium | 3.9% | 30 Dec, 2011 | Maven org.jruby:jruby-parent RubyGems rack |
OpenStack Nova Multiple directory traversal vulnerabilities CVE-2011-4596, GHSA-qr62-r9xc-r2gj, PYSEC-2026-881 | Medium | 1.8% | 23 Dec, 2011 | PyPI nova |
phpMyAdmin Cross-site Scripting vulnerability CVE-2011-4782, GHSA-2h23-c973-x63q | Medium | 1.3% | 22 Dec, 2011 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to Cross-site Scripting CVE-2011-4634, GHSA-9j9h-cpgc-8356 | Medium | 2.1% | 22 Dec, 2011 | Packagist phpmyadmin/phpmyadmin |
Moodle CRLF Injection Vulnerability in Calendar Component CVE-2011-4203, GHSA-4w8m-96v9-2c86 | Medium | 1.2% | 22 Dec, 2011 | Packagist moodle/moodle |