Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
MiCollab, MiVoice Business Express Access Control Vulnerability CVE-2022-26143 | CriticalExploited | 87.3% | 10 Mar, 2022 | |
Static Code Injection in Microweber CVE-2022-0895, GHSA-x28w-hvwc-mp75 | Critical | 1.7% | 10 Mar, 2022 | Packagist microweber/microweber |
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments CVE-2022-0482, GHSA-r6cm-wg48-rh2r | Critical | 43.7% | 09 Mar, 2022 | Packagist alextselegidis/easyappointments |
Server-Side Request Forgery in calibreweb CVE-2022-0767, GHSA-h65g-jfqg-2w6m, PYSEC-2026-306 | Critical | 1.0% | 07 Mar, 2022 | PyPI calibreweb |
Server-Side Request Forgery in calibreweb CVE-2022-0766, GHSA-2647-c639-qv2j, PYSEC-2026-304 | Critical | 1.3% | 07 Mar, 2022 | PyPI calibreweb |
OS Command Injection in GenieACS CVE-2021-46704, GHSA-2877-693q-pj33 | Critical | 21.9% | 06 Mar, 2022 | npm genieacs |
Code Injection in PyTorch Lightning CVE-2022-0845, GHSA-r5qj-cvf9-p85h, PYSEC-2022-181, PYSEC-2026-3969 | Critical | 1.0% | 05 Mar, 2022 | PyPI lightning PyPI pytorch-lightning |
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution CVE-2022-26318 | CriticalExploited | 78.2% | 04 Mar, 2022 | |
VMware Spring Cloud Gateway Code Injection Vulnerability CVE-2022-22947 | CriticalExploited | 98.3% | 03 Mar, 2022 | |
OS Command injection in npm-lockfile CVE-2022-0841, GHSA-cr6m-62pq-hmqh | Critical | 2.5% | 03 Mar, 2022 | npm npm-lockfile |
Improper regex in htaccess file CVE-2022-25769, GHSA-mj6m-246h-9w56 | Critical | 0.5% | 01 Mar, 2022 | Packagist mautic/core |
Remote CLI Command Execution Vulnerability in CodeIgniter4 BIT-codeigniter-2022-24711, CVE-2022-24711, GHSA-xjp4-6w75-qrj7 | Critical | 1.2% | 28 Feb, 2022 | Packagist codeigniter4/framework |
Server-Side Request Forgery (SSRF) in rudloff/alltube CVE-2022-0768, GHSA-r5hc-wm3g-hjw6 | Critical | 1.6% | 28 Feb, 2022 | Packagist rudloff/alltube |
Arbitrary file delete in ectouch/ectouch CVE-2022-25098, GHSA-ph62-8768-r87v | Critical | 1.0% | 24 Feb, 2022 | Packagist ectouch/ectouch |
SQL injection in francoisjacquet/rosariosis CVE-2021-44567, GHSA-82rr-mq4r-p4r3 | Critical | 23.1% | 24 Feb, 2022 | Packagist francoisjacquet/rosariosis |
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters. CVE-2022-0691, GHSA-jf5r-8hm2-f872 | Critical | 2.2% | 21 Feb, 2022 | npm url-parse |
Authorization Bypass Through User-Controlled Key in url-parse CVE-2022-0686, GHSA-hgjh-723h-mx2j | Critical | 1.8% | 20 Feb, 2022 | npm url-parse |
Debian-specific Redis Server Lua Sandbox Escape Vulnerability CVE-2022-0543 | CriticalExploited | 99.4% | 18 Feb, 2022 | |
Prototype Pollution in object-extend CVE-2021-23702, GHSA-m639-9whg-fw97 | Critical | 1.4% | 18 Feb, 2022 | npm object-extend |
Code injection in ezsystems/ezpublish-kernel CVE-2022-25337, GHSA-xwv6-v7qx-f5jc | Critical | 1.1% | 18 Feb, 2022 | Packagist ezsystems/ezpublish-kernel |
D-Link Multiple Routers Remote Code Execution Vulnerability CVE-2021-45382 | CriticalExploited | 97.8% | 17 Feb, 2022 | |
Prototype pollution in Plist before 3.0.5 can cause denial of service CVE-2022-22912, GHSA-4cpg-3vgw-4877 | Critical | 2.6% | 17 Feb, 2022 | npm plist |
Magento improper input validation vulnerability BIT-magento-2022-24086, CVE-2022-24086, GHSA-f8fv-f786-9933 | CriticalExploited | 99.2% | 16 Feb, 2022 | Packagist magento/community-edition |
Prototype Pollution in litespeed.js and appwrite/server-ce CVE-2021-23682, GHSA-v9p9-535w-4285 | Critical | 2.1% | 16 Feb, 2022 | Packagist appwrite/server-ce npm litespeed.js |
Path Traversal in ImpressCMS CVE-2022-24977, GHSA-389p-fchr-q2mg | Critical | 6.4% | 14 Feb, 2022 | Packagist impresscms/impresscms |
Sandbox bypass in vm2 CVE-2021-23555, GHSA-6pw2-5hjv-9pf7, SNYK-JS-VM2-2309905 | Critical | 2.9% | 11 Feb, 2022 | npm vm2 |
Apache APISIX Authentication Bypass Vulnerability CVE-2022-24112 | CriticalExploited | 96.1% | 11 Feb, 2022 | |
Possible SQL injection in tablelookupwizard Contao Extension GHSA-v3mr-gp7j-pw5w | Critical | Not scored | 10 Feb, 2022 | Packagist terminal42/contao-tablelookupwizard |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20700 | CriticalExploited | 5.7% | 10 Feb, 2022 | |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20699 | CriticalExploited | 72.5% | 10 Feb, 2022 | |
NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow GHSA-h6gw-r52c-724r | Critical | Not scored | 09 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
SAP Multiple Products HTTP Request Smuggling Vulnerability CVE-2022-22536 | CriticalExploited | 97.9% | 09 Feb, 2022 | |
Prototype Pollution leading to Remote Code Execution in superjson CVE-2022-23631, GHSA-5888-ffcr-r425 | Critical | 2.7% | 09 Feb, 2022 | npm blitz npm superjson |
Joplin Vulnerable to Code Injection CVE-2022-23340, GHSA-8478-53pv-jxvm | Critical | 1.5% | 08 Feb, 2022 | npm joplin |
Code injection in Twig CVE-2022-23614, GHSA-5mv2-rx3q-4w2v | Critical | 8.2% | 04 Feb, 2022 | Packagist twig/twig |
Integer overflow in TensorFlow BIT-tensorflow-2022-23587, CVE-2022-23587, GHSA-8jj7-5vxc-pg2q, PYSEC-2022-151, PYSEC-2022-96, PYSEC-2026-3137 | Critical | 0.9% | 04 Feb, 2022 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Prototype Pollution in object-path-set CVE-2021-23507, GHSA-h6pr-c536-6rjg, SNYK-JS-OBJECTPATHSET-2388576 | Critical | 2.1% | 04 Feb, 2022 | npm object-path-set |
Prototype Pollution in @strikeentco/set CVE-2021-23497, GHSA-39qv-prmh-x37f, SNYK-JS-STRIKEENTCOSET-2385945 | Critical | 3.7% | 04 Feb, 2022 | npm @strikeentco/set |
Prototype Pollution in putil-merge CVE-2021-23470, GHSA-4g77-cvgw-grvw, SNYK-JS-PUTILMERGE-2391487 | Critical | 1.3% | 04 Feb, 2022 | npm putil-merge |
Path Traversal in w-zip CVE-2022-0401, GHSA-fr6q-jv7j-35g3 | Critical | 1.6% | 01 Feb, 2022 | npm w-zip |
Server-Side Request Forgery in calibreweb CVE-2022-0339, GHSA-4w8p-x6g8-fv64, PYSEC-2022-23 | Critical | 1.0% | 30 Jan, 2022 | PyPI calibreweb |
Prototype Pollution in keyget CVE-2021-23760, GHSA-9fp7-4fjm-q3mf | Critical | 1.7% | 28 Jan, 2022 | npm keyget |
Prototype Pollution in bmoor CVE-2021-23558, GHSA-4m8h-h59m-m34j, SNYK-JS-BMOOR-2342622 | Critical | 1.6% | 28 Jan, 2022 | npm bmoor |
Exposure of Resource to Wrong Sphere in Zip-Local CVE-2021-23484, GHSA-wxj7-97fp-j53j, SNYK-JS-ZIPLOCAL-2327477 | Critical | 2.1% | 28 Jan, 2022 | npm zip-local |
Server Side Twig Template Injection CVE-2022-21686, GHSA-mrq4-7ch7-2465 | Critical | 1.8% | 26 Jan, 2022 | Packagist prestashop/prestashop |
SQL Injection in showdoc CVE-2022-0362, GHSA-9cq5-xgg4-x477 | Critical | 1.5% | 26 Jan, 2022 | Packagist showdoc/showdoc |
SQL injection in Moodle BIT-moodle-2022-0332, CVE-2022-0332, GHSA-6jhm-4vmx-mr76 | Critical | 44.0% | 25 Jan, 2022 | Packagist moodle/moodle |
Authentication Bypass in ADOdb/ADOdb CVE-2021-3850, GHSA-65mj-7c86-79jf | Critical | 2.2% | 25 Jan, 2022 | Packagist adodb/adodb-php |
Prototype Pollution in cached-path-relative CVE-2021-23518, GHSA-wg6g-ppvx-927h | Critical | 1.9% | 21 Jan, 2022 | npm cached-path-relative |
Oracle Fusion Middleware Unspecified Vulnerability CVE-2021-35587 | CriticalExploited | 96.3% | 19 Jan, 2022 |