Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Paste Script has improper group memberships permissions CVE-2012-0878, GHSA-27px-qpmj-qg38, PYSEC-2012-15, PYSEC-2026-2859 | High | 4.0% | 01 May, 2012 | PyPI paste PyPI pastescript |
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability CVE-2012-0158 | HighExploited | 100.0% | 10 Apr, 2012 | |
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability CVE-2012-0151 | HighExploited | 87.7% | 10 Apr, 2012 | |
Adobe Flash Player Memory Corruption Vulnerability CVE-2012-0754 | HighExploited | 91.2% | 16 Feb, 2012 | |
Plone Denial of Service vulnerability CVE-2011-4462, GHSA-pcwm-8jc3-qxvj, PYSEC-2011-22 | High | 3.2% | 30 Dec, 2011 | PyPI Plone PyPI plone |
Microsoft Windows Remote Code Execution Vulnerability CVE-2011-3402 | HighExploited | 78.1% | 04 Nov, 2011 | |
Denial of service in django CVE-2011-4137, GHSA-3jqw-crqj-w8qw, PYSEC-2011-2 | High | 3.0% | 19 Oct, 2011 | PyPI Django PyPI django |
Django Might Allow CSRF Requests via URL Verification CVE-2011-4138, GHSA-wxg3-mfph-qg9w, PYSEC-2011-3 | High | 2.4% | 19 Oct, 2011 | PyPI Django PyPI django |
Django Vulnerable to Cache Poisoning CVE-2011-4139, GHSA-rm2j-x595-q9cj, PYSEC-2011-4 | High | 2.4% | 19 Oct, 2011 | PyPI Django PyPI django |
Django Cross-Site Request Forgery vulnerability CVE-2011-4140, GHSA-h95j-h2rv-qrg4, PYSEC-2011-5 | High | 1.1% | 19 Oct, 2011 | PyPI Django PyPI django |
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability CVE-2011-2005 | HighExploited | 31.8% | 12 Oct, 2011 | |
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable CVE-2011-4030, GHSA-pwgm-jvqv-6v8p, PYSEC-2026-897 | High | 2.0% | 10 Oct, 2011 | PyPI Plone PyPI plone |
Zope Command Execution Vulnerability CVE-2011-3587, GHSA-8w48-m6hx-rjw2, PYSEC-2026-1067 | High | 78.1% | 10 Oct, 2011 | PyPI zope2 |
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands CVE-2010-4962, GHSA-xq29-jcj7-xg86 | High | 1.9% | 09 Oct, 2011 | Packagist dmk/webkitpdf |
Webkit PDFs for TYPO3 has SQL Injection vulnerability CVE-2010-4961, GHSA-9568-hcj9-rf7v | High | 1.1% | 09 Oct, 2011 | Packagist dmk/webkitpdf |
DOMPDF Remote File Inclusion Vulnerability CVE-2010-4879, GHSA-48r9-4v93-x4wh | High | 5.2% | 07 Oct, 2011 | Packagist dompdf/dompdf |
Apache Libcloud does not verify SSL certificates for HTTPS connections CVE-2010-4340, GHSA-w3j6-8j34-q43x, PYSEC-2011-24 | High | 1.4% | 12 Sep, 2011 | PyPI apache-libcloud |
activerecord vulnerable to SQL Injection CVE-2011-2930, GHSA-h6w6-xmqv-7q78 | High | 2.3% | 29 Aug, 2011 | RubyGems activerecord |
Drupal Access Control Bypass CVE-2011-2687, GHSA-96vx-qf28-6f8m | High | 3.1% | 27 Jul, 2011 | Packagist drupal/core |
High severity vulnerability that affects Plone and Zope2 CVE-2011-2528, GHSA-p6h9-hpcg-c6gm, PYSEC-2011-25, PYSEC-2011-32, PYSEC-2026-764 | High | 2.0% | 19 Jul, 2011 | PyPI Plone PyPI Zope2 PyPI plone PyPI zope2 |
phpMyAdmin Directory Traversal vulnerability CVE-2011-2508, GHSA-q6vw-39cg-wjjf | High | 1.9% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin vulnerable to static code injection CVE-2011-2506, GHSA-p6h7-29r2-g88f | High | 9.6% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
Android OS Privilege Escalation Vulnerability CVE-2011-1823 | HighExploited | 41.4% | 09 Jun, 2011 | |
Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts CVE-2011-1950, GHSA-2qx8-589j-gcpx, PYSEC-2011-16, PYSEC-2026-2888 | High | 2.3% | 06 Jun, 2011 | PyPI Plone PyPI plone PyPI plone-app-users PyPI plone.app.users |
Adobe Flash Player Remote Code Execution Vulnerability CVE-2011-0611 | HighExploited | 99.4% | 13 Apr, 2011 | |
feedparser denial of service vulnerability CVE-2011-1156, GHSA-6h52-4vmh-8x4f, PYSEC-2011-19 | High | 3.3% | 11 Apr, 2011 | PyPI feedparser |
Adobe Flash Player Unspecified Vulnerability CVE-2011-0609 | HighExploited | 63.5% | 15 Mar, 2011 | |
actionpack allows remote attackers to bypass intended access restrictions CVE-2011-0449, GHSA-4ww3-3rxj-8v6q | High | 2.5% | 21 Feb, 2011 | RubyGems actionpack |
activerecord vulnerable to SQL Injection CVE-2011-0448, GHSA-jmm9-2p29-vh2w | High | 2.2% | 21 Feb, 2011 | RubyGems activerecord |
Cross-site request forgery in Django CVE-2011-0696, GHSA-5j2h-h5hg-3wf8, PYSEC-2011-10, PYSEC-2011-30 | High | 1.6% | 14 Feb, 2011 | PyPI Django PyPI django |
Smarty Does Not Consider Umask Values When Setting Permissions CVE-2009-5054, GHSA-6m9f-8vwq-97pm | High | 1.6% | 03 Feb, 2011 | Packagist smarty/smarty |
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code CVE-2010-4335, GHSA-g2vx-8v47-4vhh | High | 55.2% | 14 Jan, 2011 | Packagist cakephp/cakephp |
Improper query string handling in Django CVE-2010-4534, GHSA-fwr5-q9rx-294f, PYSEC-2011-28, PYSEC-2011-8 | High | 2.5% | 10 Jan, 2011 | PyPI Django PyPI django |
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information CVE-2010-4481, GHSA-gmc7-jvv7-w245 | High | 2.0% | 17 Dec, 2010 | Packagist phpmyadmin/phpmyadmin |
Exim Privilege Escalation Vulnerability CVE-2010-4345 | HighExploited | 18.0% | 14 Dec, 2010 | |
Cobbler is vulnerable to code injection CVE-2010-2235, GHSA-jhm7-38xj-pvm8, PYSEC-2026-794 | High | 3.3% | 09 Dec, 2010 | PyPI cobbler |
Linux Kernel Improper Input Validation Vulnerability CVE-2010-3904 | HighExploited | 15.9% | 06 Dec, 2010 | |
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability CVE-2010-4398 | HighExploited | 8.7% | 06 Dec, 2010 | |
Microsoft Office Stack-based Buffer Overflow Vulnerability CVE-2010-3333 | HighExploited | 89.4% | 10 Nov, 2010 | |
Microsoft PowerPoint Buffer Overflow Vulnerability CVE-2010-2572 | HighExploited | 58.6% | 10 Nov, 2010 | |
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability CVE-2010-3962 | HighExploited | 96.8% | 05 Nov, 2010 | |
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism CVE-2010-3714, GHSA-w736-qv86-vq94 | High | 24.1% | 25 Oct, 2010 | Packagist typo3/cms |
Improper Authentication in pyftpdlib CVE-2007-6737, GHSA-9x66-ghqx-8g5r, PYSEC-2010-21 | High | 2.1% | 19 Oct, 2010 | PyPI pyftpdlib |
pyftpdlib Use of Insufficiently Random Values of port selection on PASV command CVE-2007-6738, GHSA-gh7c-cg3x-pmcr, PYSEC-2010-22 | High | 1.1% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper Input Validation in pyftpdlib CVE-2007-6739, GHSA-5f3f-pg2c-cxcv, PYSEC-2010-23 | High | 2.2% | 19 Oct, 2010 | PyPI pyftpdlib |
pyftpdlib vulnerable to allocation of resources without limits CVE-2007-6740, GHSA-cx59-cp6c-9fr8, PYSEC-2010-24 | High | 1.7% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper Authentication in pyftpdlib CVE-2008-7263, GHSA-q6w2-jxcm-2crj, PYSEC-2010-5 | High | 1.5% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper Access Control in pyftpdlib CVE-2009-5012, GHSA-h4g7-8m7r-87r9, PYSEC-2010-9 | High | 1.0% | 19 Oct, 2010 | PyPI pyftpdlib |
Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib CVE-2010-3494, GHSA-hw4g-fhcp-x5mq, PYSEC-2010-11 | High | 2.3% | 19 Oct, 2010 | PyPI pyftpdlib |
powermail extension for TYPO3 vulnerable to SQL Injection CVE-2010-3604, GHSA-rp53-fw29-rxg3 | High | 1.1% | 24 Sep, 2010 | Packagist in2code/powermail |