Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Uncontrolled Resource Consumption in pyftpdlib CVE-2009-5013, GHSA-8gv6-x88p-3f6h, PYSEC-2010-10 | Medium | 1.7% | 19 Oct, 2010 | PyPI pyftpdlib |
Zope Object Database Denial of Service vulnerability CVE-2010-3495, GHSA-j6m4-frxh-p4x8, PYSEC-2010-27 | Medium | 1.3% | 19 Oct, 2010 | PyPI zodb3 |
Roundup Cross-site Scripting (XSS) vulnerability CVE-2010-2491, GHSA-frgf-rv99-862x, PYSEC-2010-31 | Medium | 2.5% | 24 Sep, 2010 | PyPI roundup |
Cross-site scripting in django CVE-2010-3082, GHSA-fxpg-gg9g-76gj, PYSEC-2010-12 | Medium | 1.9% | 14 Sep, 2010 | PyPI Django PyPI django |
phpMyAdmin Cross-site Scripting vulnerability CVE-2010-2958, GHSA-frv8-xjcp-hrm2 | Medium | 1.9% | 08 Sep, 2010 | Packagist phpmyadmin/phpmyadmin |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2010-2487, GHSA-5m2m-27cg-7v4v, PYSEC-2010-16 | Medium | 2.7% | 05 Aug, 2010 | PyPI moin |
MoinMoin cross-site scripting (XSS) vulnerability CVE-2010-2969, GHSA-2j76-26qq-7rvv, PYSEC-2010-17 | Medium | 2.5% | 05 Aug, 2010 | PyPI moin |
MoinMoin cross-site scripting (XSS) vulnerability CVE-2010-2970, GHSA-gxh5-r8gp-pjc3, PYSEC-2010-18 | Medium | 2.5% | 05 Aug, 2010 | PyPI Moin PyPI moin |
HTML Purifier Cross-site Scripting (XSS) vulnerability CVE-2010-2479, GHSA-6rm6-mjmh-86jq | Medium | 2.0% | 06 Jul, 2010 | Packagist ezyang/htmlpurifier |
Cross-site Scripting in python-cjson CVE-2009-4924, GHSA-95jp-77w6-qj52, PYSEC-2010-26 | Medium | 1.4% | 02 Jul, 2010 | PyPI python-cjson |
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson CVE-2010-1666, GHSA-cqmh-mpx2-g633, PYSEC-2010-30 | Medium | 1.7% | 02 Jul, 2010 | PyPI python-cjson |
Mako contains Cross-site Scripting vulnerability CVE-2010-2480, GHSA-7q8x-38mc-p84f, PYSEC-2010-1 | Medium | 1.8% | 02 Jul, 2010 | PyPI mako |
Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter CVE-2010-2230, GHSA-3gm8-32vv-q8mp | Medium | 2.2% | 28 Jun, 2010 | Packagist moodle/moodle |
Plone Cross-site Scripting vulnerability in PortalTransforms CVE-2010-2422, GHSA-qj7x-wm9q-qjx8, PYSEC-2010-19 | Medium | 2.0% | 24 Jun, 2010 | PyPI Plone PyPI plone |
Cross-Site Scripting in dojo CVE-2010-2273, GHSA-536q-8gxx-m782 | Medium | 4.5% | 15 Jun, 2010 | npm dojo |
Joomla! vulnerable to Cross-site Scripting CVE-2010-1649, GHSA-fj57-vhrc-73r7 | Medium | 1.0% | 08 Jun, 2010 | Packagist joomla/joomla-cms |
Moodle vulnerable to Cross-site Scripting CVE-2010-1619, GHSA-hhxf-w8hj-43w6 | Medium | 1.7% | 29 Apr, 2010 | Packagist moodle/moodle |
phpCAS client library and Moodle Cross-site Scripting vulnerability CVE-2010-1618, GHSA-45ch-hxgr-vx8j | Medium | 1.8% | 29 Apr, 2010 | Packagist apereo/phpcas Packagist moodle/moodle |
Moodle doesn't properly check role CVE-2010-1617, GHSA-q53j-c866-h9mw | Medium | 1.5% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle is vulnerable to unauthorized new accounts creation CVE-2010-1616, GHSA-966m-m549-2878 | Medium | 1.2% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle vulnerable to Cross-site Scripting CVE-2010-1614, GHSA-5fgv-cvr8-xg48 | Medium | 1.7% | 29 Apr, 2010 | Packagist moodle/moodle |
Moodle Session Fixation vulnerability CVE-2010-1613, GHSA-j5rc-cr5w-vfg6 | Medium | 1.8% | 29 Apr, 2010 | Packagist moodle/moodle |
SilverStripe vulnerable to Cross-site Scripting CVE-2010-1593, GHSA-wg4m-vvp6-2hc5 | Medium | 2.6% | 28 Apr, 2010 | Packagist silverstripe/cms Packagist silverstripe/framework |
Red Hat JBoss Authentication Bypass Vulnerability CVE-2010-0738 | MediumExploited | 73.8% | 28 Apr, 2010 | |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2010-0828, GHSA-fc72-v54c-x9jg, PYSEC-2010-28 | Medium | 2.3% | 05 Apr, 2010 | PyPI moin |
Moderate severity vulnerability that affects Zope2 CVE-2010-1104, GHSA-v7q8-wvvh-c97p, PYSEC-2026-765 | Medium | 2.0% | 25 Mar, 2010 | PyPI Zope2 PyPI zope2 |
MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration CVE-2010-0668, GHSA-574f-mh6m-c6qm, PYSEC-2010-15 | Medium | 2.2% | 26 Feb, 2010 | PyPI moin |
Adobe BlazeDS Information Disclosure Vulnerability CVE-2009-3960 | MediumExploited | 90.1% | 15 Feb, 2010 | |
Improper Input Validation in actionpack CVE-2008-7248, GHSA-8fqx-7pv4-3jwm | Medium | 8.1% | 16 Dec, 2009 | RubyGems actionpack |
Moderate severity vulnerability that affects rails CVE-2009-4214, GHSA-9p3v-wf2w-v29c | Medium | 3.0% | 07 Dec, 2009 | RubyGems rails |
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure CVE-2009-4160, GHSA-p65f-652v-35r2 | Medium | 1.2% | 02 Dec, 2009 | Packagist jweiland/kk-downloader |
Typo3 API Install Tool vulnerable to Cross-site Scripting CVE-2009-3636, GHSA-c73w-4rcj-2622 | Medium | 2.0% | 02 Nov, 2009 | Packagist typo3/cms-install |
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential CVE-2009-3635, GHSA-hwrc-w5gg-f335 | Medium | 2.1% | 02 Nov, 2009 | Packagist typo3/cms |
TYPO3 API function vulnerable to Cross-site Scripting CVE-2009-3633, GHSA-m7rg-85g8-28m9 | Medium | 0.9% | 02 Nov, 2009 | Packagist typo3/cms-core |
TYPO3 Backend vulnerable to Frame Hijacking CVE-2009-3630, GHSA-mg66-3x8x-r8g2 | Medium | 2.0% | 02 Nov, 2009 | Packagist typo3/cms-backend |
TYPO3 Backend Discloses Encryption Key CVE-2009-3628, GHSA-2wgg-c8xc-7gg3 | Medium | 1.1% | 02 Nov, 2009 | Packagist typo3/cms-backend |
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting CVE-2009-3821, GHSA-2q2r-xgj5-h3hm | Medium | 2.0% | 28 Oct, 2009 | Packagist apache-solr-for-typo3/solr |
phpMyAdmin Cross-site Scripting In MySQL Table Name CVE-2009-3696, GHSA-5pvv-f8h3-gw96 | Medium | 2.6% | 16 Oct, 2009 | Packagist phpmyadmin/phpmyadmin |
actionpack and activesupport vulnerable to information leaks CVE-2009-3086, GHSA-fg9w-g6m4-557j | Medium | 2.2% | 08 Sep, 2009 | RubyGems actionpack RubyGems activesupport |
Cross site scripting that affects rails CVE-2009-3009, GHSA-8qrh-h9m2-5fvf | Medium | 3.0% | 08 Sep, 2009 | RubyGems actionpack RubyGems activesupport |
Buildbot vulnerable to cross-site scripting CVE-2009-2967, GHSA-mj3x-wprp-mvj9, PYSEC-2009-2 | Medium | 2.3% | 26 Aug, 2009 | PyPI buildbot |
Buildbot Cross-site scripting (XSS) vulnerability CVE-2009-2959, GHSA-jqqh-999x-w26w, PYSEC-2009-1 | Medium | 2.0% | 25 Aug, 2009 | PyPI buildbot |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability CVE-2009-2055 | MediumExploited | 3.3% | 19 Aug, 2009 | |
Roundup Improper Access Control CVE-2009-2737, GHSA-9rj9-5wcv-xgf2, PYSEC-2026-744 | Medium | 2.3% | 11 Aug, 2009 | PyPI Roundup PyPI roundup |
MoinMoin Cross-site Scripting (XSS) vulnerability CVE-2009-1482, GHSA-4pfg-2frf-f67v, PYSEC-2009-6 | Medium | 2.5% | 29 Apr, 2009 | PyPI moin |
Moderate severity vulnerability that affects Products.PlonePAS CVE-2009-0662, GHSA-pq3x-96c3-xgjg, PYSEC-2009-17, PYSEC-2026-739 | Medium | 1.0% | 23 Apr, 2009 | PyPI Products.PlonePAS PyPI plone PyPI products-plonepas |
Cross-Site Scripting in dojo CVE-2008-6681, GHSA-39cx-xcwj-3rc4 | Medium | 1.1% | 09 Apr, 2009 | npm dojo |
MoinMoin improper access control on the included page for the rst parser CVE-2008-6548, GHSA-jhxw-4hw4-mhh7, PYSEC-2009-11 | Medium | 1.0% | 30 Mar, 2009 | PyPI moin |
Typo3 Backend XSS Vulnerability CVE-2009-0816, GHSA-jg55-3q6h-2ccf | Medium | 1.1% | 05 Mar, 2009 | Packagist typo3/cms |
TYPO3 leaks a hash secret in an error message CVE-2009-0815, GHSA-c22j-84c7-cm77 | Medium | 42.2% | 05 Mar, 2009 | Packagist typo3/cms |