Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability CVE-2011-4723 | MediumExploited | 3.1% | 20 Dec, 2011 | |
Celery local privilege escalation vulnerability CVE-2011-4356, GHSA-rpc6-h455-3rx5, PYSEC-2011-17 | Medium | 0.3% | 05 Dec, 2011 | PyPI celery |
Cross-site Scripting vulnerability in i18n translations helper method CVE-2011-4319, GHSA-xxr8-833v-c7wc | Medium | 1.6% | 28 Nov, 2011 | RubyGems actionpack |
Joomla! vulnerable to Cross-site Scripting CVE-2011-4332, GHSA-hq9x-8m8j-5hmh | Medium | 1.1% | 23 Nov, 2011 | Packagist joomla/joomla-cms |
phpMyAdmin vulnerable to XML external entity (XXE) injection attack CVE-2011-4107, GHSA-q4mm-89q2-xffg | Medium | 12.7% | 17 Nov, 2011 | Packagist phpmyadmin/phpmyadmin |
Puppet uses predictable filenames, allowing arbitrary file overwrite CVE-2011-3871, GHSA-mpmx-gm5v-q789 | Medium | 0.3% | 27 Oct, 2011 | RubyGems puppet |
Puppet allows local users to modify the permissions of arbitrary files CVE-2011-3870, GHSA-qh3g-27jf-3j54 | Medium | 0.4% | 27 Oct, 2011 | RubyGems puppet |
Puppet arbitrary file overwrite CVE-2011-3869, GHSA-8c56-v25w-f89c | Medium | 0.3% | 27 Oct, 2011 | RubyGems puppet |
Session manipulation in Django CVE-2011-4136, GHSA-x88j-93vc-wpmp, PYSEC-2011-1 | Medium | 2.3% | 19 Oct, 2011 | PyPI Django PyPI django |
BaserCMS privilege escallation CVE-2011-2674, GHSA-6wr6-54mw-mvhr | Medium | 1.3% | 02 Oct, 2011 | Packagist baserproject/basercms |
HTML Purifier allows remote attackers to obtain sensitive information CVE-2011-3744, GHSA-jw86-5cjf-mv79 | Medium | 1.4% | 23 Sep, 2011 | Packagist ezyang/htmlpurifier |
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file CVE-2011-3712, GHSA-r7p6-fr3x-r877 | Medium | 1.6% | 23 Sep, 2011 | Packagist cakephp/cakephp |
actionpack Improper Input Validation vulnerability CVE-2011-3187, GHSA-3vfw-7rcp-3xgm | Medium | 6.7% | 29 Aug, 2011 | RubyGems actionpack |
actionpack CRLF injection vulnerability CVE-2011-3186, GHSA-fcqf-h4h4-695m | Medium | 1.7% | 29 Aug, 2011 | RubyGems actionpack |
activesupport Cross-site Scripting vulnerability CVE-2011-2932, GHSA-9fh3-vh3h-q4g3 | Medium | 2.5% | 29 Aug, 2011 | RubyGems activesupport |
actionpack Cross-site Scripting vulnerability CVE-2011-2931, GHSA-v5jg-558j-q67c | Medium | 2.5% | 29 Aug, 2011 | RubyGems actionpack |
actionpack Improper Input Validation vulnerability CVE-2011-2929, GHSA-r7q2-5gqg-6c7q | Medium | 1.8% | 29 Aug, 2011 | RubyGems actionpack |
Plone XSS Vulnerability CVE-2011-1340, GHSA-cvwc-g7fw-7xrj, PYSEC-2026-896 | Medium | 1.2% | 05 Aug, 2011 | PyPI plone |
phpMyAdmin Directory Traversal Vulnerability CVE-2011-2718, GHSA-xhqq-554j-p4x8 | Medium | 1.7% | 01 Aug, 2011 | Packagist phpmyadmin/phpmyadmin |
Joomla! vulnerable to Cross-site Scripting CVE-2011-2509, GHSA-vcq7-x4wr-w2mj | Medium | 1.1% | 27 Jul, 2011 | Packagist joomla/joomla-cms |
Fabric vulnerable to symlink attack on tmp files CVE-2011-2185, GHSA-xwg2-qc6c-7c3q, PYSEC-2026-808 | Medium | 0.3% | 27 Jul, 2011 | PyPI fabric |
phpMyAdmin remote variable manipulation CVE-2011-2505, GHSA-vqcm-r62w-w437 | Medium | 12.9% | 14 Jul, 2011 | Packagist phpmyadmin/phpmyadmin |
rails Cross-site Scripting vulnerability CVE-2011-2197, GHSA-v9v4-7jp6-8c73 | Medium | 2.0% | 30 Jun, 2011 | RubyGems actionpack RubyGems activesupport |
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool CVE-2011-1948, GHSA-p7h9-vf92-5fj5, PYSEC-2011-14, PYSEC-2026-2965, PYSEC-2026-2966 | Medium | 2.4% | 06 Jun, 2011 | PyPI Plone PyPI Products.CMFPlone PyPI Products.PasswordResetTool PyPI plone +2 more |
Plone Cross-site Scripting vulnerability CVE-2011-1949, GHSA-h6hq-c896-w882, PYSEC-2011-15 | Medium | 1.9% | 06 Jun, 2011 | PyPI Plone PyPI plone |
QooxDoo XSS in Callback Parameter CVE-2011-1714, GHSA-pchf-755w-jj6v | Medium | 2.6% | 18 Apr, 2011 | npm qooxdoo |
feedparser Cross-site Scripting vulnerability CVE-2009-5065, GHSA-3mwg-gp5g-fv3q, PYSEC-2011-18 | Medium | 4.5% | 11 Apr, 2011 | PyPI feedparser |
feedparser Cross-site Scripting vulnerability CVE-2011-1157, GHSA-2p78-8hh6-96xc, PYSEC-2011-20 | Medium | 2.5% | 11 Apr, 2011 | PyPI feedparser |
feedparser Cross-site Scripting vulnerability CVE-2011-1158, GHSA-4m72-rmm9-2qjr, PYSEC-2011-21 | Medium | 2.3% | 11 Apr, 2011 | PyPI feedparser |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2011-1058, GHSA-m9j7-xcj7-42j9, PYSEC-2011-6 | Medium | 2.6% | 22 Feb, 2011 | PyPI moin |
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file CVE-2011-0986, GHSA-wcmm-28rg-mg3r | Medium | 1.6% | 14 Feb, 2011 | Packagist phpmyadmin/phpmyadmin |
actionpack Cross-Site Request Forgery vulnerability CVE-2011-0447, GHSA-24fg-p96v-hxh8 | Medium | 1.4% | 14 Feb, 2011 | RubyGems actionpack |
Rails actionpack gem vulnerable to Cross-site Scripting CVE-2011-0446, GHSA-75w6-p6mg-vh8j | Medium | 2.4% | 14 Feb, 2011 | RubyGems actionpack RubyGems actionview |
Cross-site scripting in django CVE-2011-0697, GHSA-8m3r-rv5g-fcpq, PYSEC-2011-11, PYSEC-2011-31 | Medium | 2.6% | 14 Feb, 2011 | PyPI Django PyPI django |
EC-CUBE XSS Vulnerabilities CVE-2011-0451, GHSA-wgvv-5396-ggvj | Medium | 1.9% | 03 Feb, 2011 | Packagist ec-cube/ec-cube |
Mail Improper Input Validation vulnerability CVE-2011-0739, GHSA-cpjc-p7fc-j9xh | Medium | 2.7% | 02 Feb, 2011 | RubyGems mail |
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack CVE-2010-4338, GHSA-5pjj-7m4p-wfh2, PYSEC-2026-886 | Medium | 0.3% | 20 Jan, 2011 | PyPI ocrodjvu |
Improper date handling in Django CVE-2010-4535, GHSA-7wph-fc4w-wqp2, PYSEC-2011-29, PYSEC-2011-9 | Medium | 3.4% | 10 Jan, 2011 | PyPI Django PyPI django |
ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter CVE-2010-4616, GHSA-39vm-rvwh-q86j | Medium | 1.1% | 29 Dec, 2010 | Packagist impresscms/impresscms |
Spree allows remote attackers to obtain sensitive information CVE-2010-3978, GHSA-hwrx-wc75-mgh7 | Medium | 2.5% | 17 Nov, 2010 | RubyGems spree |
Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code CVE-2010-2477, GHSA-7gfc-2v6g-6w9f, PYSEC-2010-29 | Medium | 2.3% | 06 Nov, 2010 | PyPI paste |
HTML Purifier cross-site scripting (XSS) vulnerability CVE-2010-4183, GHSA-3p68-m5qw-9g9w | Medium | 0.9% | 05 Nov, 2010 | Packagist ezyang/htmlpurifier |
Rails activerecord gem has Improper Input Validation vulnerability CVE-2010-3933, GHSA-gjxw-5w2q-7grf | Medium | 2.2% | 28 Oct, 2010 | RubyGems activerecord |
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend CVE-2010-3715, GHSA-mwqv-jff6-5v62 | Medium | 1.1% | 25 Oct, 2010 | Packagist typo3/cms-backend |
Directory Traversal in pyftpdlib CVE-2007-6736, GHSA-f8wg-36r9-7f4q, PYSEC-2010-20 | Medium | 1.9% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper privilege management in pyftpdlib CVE-2007-6741, GHSA-8xgx-75qw-6268, PYSEC-2010-25 | Medium | 1.8% | 19 Oct, 2010 | PyPI pyftpdlib |
Directory traversal in pyftpdlib CVE-2008-7262, GHSA-jw88-wxv5-7c4f, PYSEC-2010-4 | Medium | 2.0% | 19 Oct, 2010 | PyPI pyftpdlib |
Improper input validation in pyftpdlib CVE-2008-7264, GHSA-8p2c-fghc-9hj4, PYSEC-2010-6 | Medium | 1.3% | 19 Oct, 2010 | PyPI pyftpdlib |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib CVE-2009-5010, GHSA-mpg6-rgp4-35rr, PYSEC-2010-7 | Medium | 1.4% | 19 Oct, 2010 | PyPI pyftpdlib |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib CVE-2009-5011, GHSA-62xg-239j-vxg7, PYSEC-2010-8 | Medium | 0.9% | 19 Oct, 2010 | PyPI pyftpdlib |