Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Prototype Pollution in y18n CVE-2020-7774, GHSA-c4w7-xm78-47vh | Critical | 69.6% | 17 Nov, 2020 | npm y18n |
Prototype Pollution in doc-path CVE-2020-7772, GHSA-gm8g-xhh8-rmwr, SNYK-JS-DOCPATH-1011952 | Critical | 2.8% | 15 Nov, 2020 | npm doc-path |
Prototype Pollution in deephas CVE-2020-28271, GHSA-4fr2-j4g9-mppf | Critical | 3.4% | 12 Nov, 2020 | npm deephas |
Prototype pollution in object-hierarchy-access CVE-2020-28270, GHSA-fxwf-45c7-4ppr | Critical | 3.8% | 12 Nov, 2020 | npm object-hierarchy-access |
Prototype Pollution in field CVE-2020-28269, GHSA-hm82-qr45-h7mw | Critical | 4.2% | 12 Nov, 2020 | npm field |
Prototype pollution in json8 CVE-2020-7770, GHSA-7h43-gx24-p529, SNYK-JS-JSON8-1017116 | Critical | 1.9% | 12 Nov, 2020 | npm json8 |
Command injection in nodemailer CVE-2020-7769, GHSA-48ww-j4fc-435p | Critical | 2.3% | 12 Nov, 2020 | npm nodemailer |
Prototype pollution in grpc and @grpc/grpc-js CVE-2020-7768, GHSA-pp75-xfpw-37g9 | Critical | 4.0% | 11 Nov, 2020 | npm @grpc/grpc-js npm grpc |
MoinMoin vulnerable to remote code execution via cache action CVE-2020-25074, GHSA-52q8-877j-gghq, PYSEC-2020-67 | Critical | 6.6% | 10 Nov, 2020 | PyPI moin |
Arbitrary Code Execution in json-ptr CVE-2020-7766, GHSA-x5r6-x823-9848 | Critical | 1.9% | 10 Nov, 2020 | npm json-ptr |
Authentication bypass in Apache Airflow BIT-airflow-2020-13927, CVE-2020-13927, GHSA-hhx9-p69v-cx2j, PYSEC-2020-18 | CriticalExploited | 99.8% | 10 Nov, 2020 | PyPI apache-airflow |
Magento 2 Community Edition RCE via Unsafe File Upload BIT-magento-2020-24407, CVE-2020-24407, GHSA-7pxg-6p87-8c9v | Critical | 5.3% | 09 Nov, 2020 | Packagist magento/community-edition Packagist magento/project-community-edition |
LDAP authentication bypass with empty password CVE-2020-26214, GHSA-5hmm-x8q8-w5jh, PYSEC-2020-159 | Critical | 65.9% | 06 Nov, 2020 | PyPI alerta-server |
SaltStack Salt Command Injection in netapi ssh client CVE-2020-16846, GHSA-qr38-h96j-2j3w, PYSEC-2020-104 | CriticalExploited | 99.6% | 06 Nov, 2020 | PyPI salt |
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi CVE-2020-25592, GHSA-29j3-2446-5j4w, PYSEC-2020-106 | Critical | 56.8% | 06 Nov, 2020 | PyPI salt |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability CVE-2020-16010 | CriticalExploited | 6.4% | 03 Nov, 2020 | |
Google Chrome FreeType Heap Buffer Overflow Vulnerability CVE-2020-15999 | CriticalExploited | 63.9% | 03 Nov, 2020 | |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14750 | CriticalExploited | 99.2% | 02 Nov, 2020 | |
Prototype pollution in chart.js CVE-2020-7746, GHSA-h68q-55jf-x68w | Critical | 4.7% | 29 Oct, 2020 | npm chart.js |
QNAP NAS File Station Command Injection Vulnerability CVE-2018-19949 | CriticalExploited | 30.2% | 28 Oct, 2020 | |
Command Injection in systeminformation CVE-2020-26300, GHSA-fj59-f6c3-3vw4 | Critical | 1.4% | 27 Oct, 2020 | npm systeminformation |
Markdown-supplied Shell Command Execution CVE-2020-15271, GHSA-c84h-w6cr-5v8q, PYSEC-2020-61 | Critical | 2.3% | 26 Oct, 2020 | PyPI lookatme |
Authorization bypass in Strapi CVE-2020-27664, GHSA-7frv-9phw-vrvr | Critical | 2.3% | 22 Oct, 2020 | npm strapi |
Cross-Site Scripting in scratch-svg-renderer CVE-2020-7750, GHSA-j977-g5vj-j27g, SNYK-JS-SCRATCHSVGRENDERER-1020497 | Critical | 6.1% | 21 Oct, 2020 | npm scratch-svg-renderer |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14882 | CriticalExploited | 100.0% | 21 Oct, 2020 | |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability CVE-2020-14871 | CriticalExploited | 80.2% | 21 Oct, 2020 | |
VMware ESXi OpenSLP Use-After-Free Vulnerability CVE-2020-3992 | CriticalExploited | 83.0% | 20 Oct, 2020 | |
Prototype pollution in object-path CVE-2020-15256, GHSA-cwx2-736x-mf6w | Critical | 1.5% | 19 Oct, 2020 | npm object-path |
libtaxii Server-Side Request Forgery vulnerability CVE-2020-27197, GHSA-836c-xg97-8p4h, PYSEC-2020-59 | Critical | 2.3% | 17 Oct, 2020 | PyPI libtaxii |
Arbitrary Code Execution in blazar-dashboard CVE-2020-26943, GHSA-939m-4xpw-v34v, PYSEC-2020-225 | Critical | 3.3% | 16 Oct, 2020 | PyPI blazar-dashboard |
SonicWall SonicOS Buffer Overflow Vulnerability CVE-2020-5135 | CriticalExploited | 26.9% | 12 Oct, 2020 | |
phpMyAdmin SQL injection vulnerability BIT-phpmyadmin-2020-26935, CVE-2020-26935, GHSA-7ff4-cv53-4cjq | Critical | 63.7% | 10 Oct, 2020 | Packagist phpmyadmin/phpmyadmin |
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability CVE-2020-26919 | CriticalExploited | 57.5% | 09 Oct, 2020 | |
Always-Incorrect Control Flow Implementation in Facebook Hermes CVE-2020-1914, GHSA-327c-qx3v-h673 | Critical | 2.5% | 08 Oct, 2020 | npm hermes-engine |
XSS in hello.js CVE-2020-7741, GHSA-7jh9-6cpf-h4m7, SNYK-JS-HELLOJS-1014546 | Critical | 1.5% | 06 Oct, 2020 | npm hellojs |
Prototype Pollution in safetydance CVE-2020-7737, GHSA-6m85-wvcr-pgw3 | Critical | 1.4% | 02 Oct, 2020 | npm safetydance |
Prototype Pollution in bmoor CVE-2020-7736, GHSA-h3rx-g5c9-8q4x, SNYK-JS-BMOOR-598664 | Critical | 1.5% | 02 Oct, 2020 | npm bmoor |
Potential Remote Code Execution vulnerability CVE-2020-15227, GHSA-8gv3-3j7f-wg94 | Critical | 34.4% | 01 Oct, 2020 | Packagist nette/application |
Malicious code in `loadyaml` GHSA-mfc2-93pr-jf92 | Critical | Not scored | 01 Oct, 2020 | npm loadyaml |
Malicious code in `electorn` GHSA-38hx-3542-8fh3 | Critical | Not scored | 01 Oct, 2020 | npm electorn |
Out of bounds access in tensorflow-lite BIT-tensorflow-2020-15212, CVE-2020-15212, GHSA-hx2x-85gr-wrpq, PYSEC-2020-135, PYSEC-2020-292, PYSEC-2020-327 | Critical | 0.7% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Out of bounds write in tensorflow-lite BIT-tensorflow-2020-15214, CVE-2020-15214, GHSA-p2cq-cprg-frvm, PYSEC-2020-137, PYSEC-2020-294, PYSEC-2020-329 | Critical | 0.7% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Data corruption in tensorflow-lite BIT-tensorflow-2020-15208, CVE-2020-15208, GHSA-mxjj-953w-2c2v, PYSEC-2020-131, PYSEC-2020-288, PYSEC-2020-323 | Critical | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault and data corruption in tensorflow-lite BIT-tensorflow-2020-15207, CVE-2020-15207, GHSA-q4qf-3fc6-8x34, PYSEC-2020-130, PYSEC-2020-287, PYSEC-2020-322 | Critical | 1.2% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Data leak in Tensorflow BIT-tensorflow-2020-15205, CVE-2020-15205, GHSA-g7p5-5759-qv46, PYSEC-2020-128, PYSEC-2020-285, PYSEC-2020-320 | Critical | 1.0% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer truncation in Shard API usage BIT-tensorflow-2020-15202, CVE-2020-15202, GHSA-h6fg-mjxg-hqq4, PYSEC-2020-125, PYSEC-2020-282, PYSEC-2020-317 | Critical | 1.3% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in Tensorflow BIT-tensorflow-2020-15196, CVE-2020-15196, GHSA-pg59-2f92-5cph, PYSEC-2020-119, PYSEC-2020-276, PYSEC-2020-311 | Critical | 0.9% | 25 Sep, 2020 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 | CriticalExploited | 96.8% | 25 Sep, 2020 | |
TypeORM vulnerable to MAID and Prototype Pollution CVE-2020-8158, GHSA-pf2j-9qmp-jqr2 | Critical | 2.1% | 18 Sep, 2020 | npm typeorm |
Heap Overflow in PyMiniRacer CVE-2020-25489, GHSA-vwcg-7xqw-qcxw, PYSEC-2020-93 | Critical | 2.5% | 17 Sep, 2020 | PyPI py-mini-racer |