Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature CVE-2009-0312, GHSA-cx94-3h5x-cc57, PYSEC-2026-676 | Medium | 2.4% | 28 Jan, 2009 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2009-0260, GHSA-7hjm-hqgj-xv9f, PYSEC-2026-670 | Medium | 5.5% | 23 Jan, 2009 | PyPI moin |
typo3/cms-felogin Cross-site Scripting vulnerability CVE-2008-5656, GHSA-xvx2-wqf5-jjgv | Medium | 1.1% | 17 Dec, 2008 | Packagist typo3/cms-felogin |
TYPO3 Cross-site Scripting vulnerability in the file backend module CVE-2008-5644, GHSA-733v-22mg-7f8w | Medium | 1.1% | 17 Dec, 2008 | Packagist typo3/cms-backend |
Trac has vulnerability in HTML sanitizer filter CVE-2008-5647, GHSA-ww53-wxxr-8f9w, PYSEC-2008-7 | Medium | 1.1% | 17 Dec, 2008 | PyPI Trac PyPI trac |
rails is vulnerable to CRLF injection CVE-2008-5189, GHSA-jmgf-p46x-982h | Medium | 1.5% | 21 Nov, 2008 | RubyGems rails |
Moodle vulnerable to symlink attack CVE-2008-5153, GHSA-x7r4-26m9-hmgq | Medium | 0.4% | 18 Nov, 2008 | Packagist moodle/moodle |
Plone Cross-site Scripting vulnerability in the LiveSearch module CVE-2008-4571, GHSA-46f9-f8jm-mw2x, PYSEC-2026-730 | Medium | 1.2% | 15 Oct, 2008 | PyPI Plone PyPI plone |
Joomla! Open Redirect vulnerability CVE-2008-4104, GHSA-9qr2-fx2g-pfvh | Medium | 1.4% | 18 Sep, 2008 | Packagist joomla/framework |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-3381, GHSA-q7q4-5g8p-33fq, PYSEC-2008-13 | Medium | 2.1% | 30 Jul, 2008 | PyPI moin |
Trac Open Redirect vulnerability CVE-2008-2951, GHSA-rcmj-xp8f-f6q4, PYSEC-2008-4 | Medium | 1.8% | 27 Jul, 2008 | PyPI trac |
Trac Cross-site Scripting (XSS) vulnerability CVE-2008-3328, GHSA-x6jf-c7wh-7m7w, PYSEC-2008-5 | Medium | 1.3% | 27 Jul, 2008 | PyPI trac |
Drupal vulnerable to Cross-site Scripting CVE-2008-3218, GHSA-6cj8-c359-p7q9 | Medium | 2.5% | 18 Jul, 2008 | Packagist drupal/drupal |
Joomla! allows attackers to access cached pages CVE-2008-3226, GHSA-8xqm-3qm5-qhfv | Medium | 1.0% | 18 Jul, 2008 | Packagist joomla/joomla-platform |
phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability CVE-2008-3032, GHSA-pm5m-9h5r-xcrg | Medium | 1.0% | 07 Jul, 2008 | Packagist mehrwert/phpmyadmin |
Mercurial Directory traversal vulnerability CVE-2008-2942, GHSA-v2gw-x5jf-pgwv, PYSEC-2026-666 | Medium | 1.9% | 30 Jun, 2008 | PyPI mercurial |
TYPO3 Unrestricted File Upload vulnerability CVE-2008-2717, GHSA-f35p-hcwf-9f9f | Medium | 3.0% | 16 Jun, 2008 | Packagist typo3/cms-core |
Django Cross-site scripting (XSS) vulnerability CVE-2008-2302, GHSA-54qj-48vx-cr9f, PYSEC-2008-1 | Medium | 1.3% | 23 May, 2008 | PyPI django |
Moodle vulnerable to Cross-site scripting CVE-2008-1502, GHSA-v759-3wr5-p294 | Medium | 10.5% | 25 Mar, 2008 | Packagist moodle/moodle |
Roundup vulnerability related to Cross-site scripting (XSS) CVE-2008-1474, GHSA-c3qv-mf8h-434r, PYSEC-2008-9 | Medium | 1.5% | 24 Mar, 2008 | PyPI roundup |
Plone credentials stored in session cookie CVE-2008-1396, GHSA-hjp5-hv33-q58g, PYSEC-2026-732 | Medium | 1.1% | 20 Mar, 2008 | PyPI plone |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-1098, GHSA-8fj9-pj4p-4vq7, PYSEC-2026-672 | Medium | 1.8% | 05 Mar, 2008 | PyPI moin |
MoinMoin Improper Access Control CVE-2008-1099, GHSA-jj2f-57jg-5rm6, PYSEC-2026-677 | Medium | 2.0% | 05 Mar, 2008 | PyPI moin |
MoinMoin Cross-site scripting (XSS) vulnerability CVE-2008-0780, GHSA-53wj-6m7w-j6mj, PYSEC-2026-667 | Medium | 1.8% | 14 Feb, 2008 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-0781, GHSA-775g-4482-pm94, PYSEC-2026-669 | Medium | 2.6% | 14 Feb, 2008 | PyPI moin |
MoinMoin Directory traversal vulnerability CVE-2008-0782, GHSA-6766-r2rx-mfw9, PYSEC-2026-668 | Medium | 14.9% | 14 Feb, 2008 | PyPI moin |
Mongrel vulnerable to directory traversal via double-encoded sequences CVE-2007-6612, GHSA-m7r6-43v2-49vf | Medium | 3.0% | 03 Jan, 2008 | RubyGems mongrel |
gtk2 vulnerable to Use of Externally-Controlled Format String CVE-2007-6183, GHSA-xgj6-pgrm-x4r2 | Medium | 3.4% | 30 Nov, 2007 | RubyGems gtk2 |
session fixation protection mechanism in cgi_process.rb in Rails CVE-2007-6077, GHSA-p4c6-77gc-694x | Medium | 2.5% | 21 Nov, 2007 | RubyGems rails |
Moderate severity vulnerability that affects rails CVE-2007-5379, GHSA-fjfg-q662-gm6j | Medium | 4.0% | 19 Oct, 2007 | RubyGems rails |
Session fixation vulnerability in Rails CVE-2007-5380, GHSA-jwhv-rgqc-fqj5 | Medium | 3.6% | 19 Oct, 2007 | RubyGems rails |
FTP backend for Duplicity Discloses Passwords to Process Listing CVE-2007-5201, GHSA-wxcw-rqxc-hj85, PYSEC-2026-633 | Medium | 0.4% | 04 Oct, 2007 | PyPI duplicity |
Joomla! vulnerable to CRLF injection CVE-2007-4190, GHSA-h22q-g2c7-2jwj | Medium | 1.7% | 08 Aug, 2007 | Packagist joomla/application |
HTML Purifier Cross-site Scripting vulnerability CVE-2007-3498, GHSA-6fh7-fwqj-mv49 | Medium | 1.0% | 29 Jun, 2007 | Packagist ezyang/htmlpurifier |
Moderate severity vulnerability that affects rails CVE-2007-3227, GHSA-gm25-fpmr-43fj | Medium | 3.7% | 14 Jun, 2007 | RubyGems rails |
MoinMoin Improper ACL handling for calendars and includes CVE-2007-2637, GHSA-cmg7-xr2j-4r9v, PYSEC-2026-675 | Medium | 1.5% | 13 May, 2007 | PyPI moin |
Trac Cross-site Scripting (XSS) vulnerability CVE-2007-1405, GHSA-w7x2-57f7-3p3x, PYSEC-2007-2 | Medium | 1.1% | 10 Mar, 2007 | PyPI trac |
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters CVE-2007-0901, GHSA-9gj2-ph57-56f5, PYSEC-2026-673 | Medium | 1.8% | 13 Feb, 2007 | PyPI Moin PyPI moin |
MoinMoin Insertion of Sensitive Information into Log File CVE-2007-0902, GHSA-mxh8-xgq9-w782, PYSEC-2026-679 | Medium | 1.4% | 13 Feb, 2007 | PyPI moin |
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2007-0857, GHSA-m84w-vgwf-p893, PYSEC-2026-678 | Medium | 2.5% | 08 Feb, 2007 | PyPI moin |
Django Improper Access Control CVE-2007-0405, GHSA-mwv2-398h-v489, PYSEC-2026-629 | Medium | 1.3% | 23 Jan, 2007 | PyPI Django PyPI django |
Plone allows a user to masquerade as a group CVE-2006-4249, GHSA-r7j4-82xw-8m9p, PYSEC-2006-10, PYSEC-2006-6 | Medium | 1.0% | 07 Dec, 2006 | PyPI Plone PyPI plone |
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files CVE-2006-5031, GHSA-rw73-xmpv-j5x2 | Medium | 7.7% | 27 Sep, 2006 | Packagist cakephp/cakephp |
Zope allows remote attackers to read arbitrary files CVE-2006-4684, GHSA-hm8g-jxjj-gfm3, PYSEC-2006-8 | Medium | 2.5% | 19 Sep, 2006 | PyPI zope2 |
Cross-site scripting (XSS) vulnerability in CakePHP CVE-2006-4067, GHSA-vc29-mvwv-wpcq | Medium | 1.2% | 10 Aug, 2006 | Packagist cakephp/cakephp |
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence CVE-2006-3360, GHSA-2wxv-3g4v-p76p | Medium | 5.6% | 06 Jul, 2006 | Packagist phpsysinfo/phpsysinfo |
Libextractor multiple heap-based buffer overflows CVE-2006-2458, GHSA-f836-7jqw-3684, PYSEC-2006-4 | Medium | 9.2% | 18 May, 2006 | PyPI extractor |
Plone allows remote users to modify arbitrary portraits CVE-2006-1711, GHSA-jcwh-rj6j-vm75, PYSEC-2026-733 | Medium | 4.0% | 11 Apr, 2006 | PyPI plone |
Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability CVE-2005-4644, GHSA-6vhp-hp77-6w52, PYSEC-2005-1 | Medium | 1.5% | 31 Dec, 2005 | PyPI trac |
phpMyAdmin CRLF Injection Vulnerability CVE-2005-3621, GHSA-wj42-52pv-wfj2 | Medium | 1.6% | 16 Nov, 2005 | Packagist phpmyadmin/phpmyadmin |