Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Potential Remote Code Execution in TYPO3 with mediace extension CVE-2020-15086, GHSA-4h44-w6fm-548g | Critical | 3.6% | 29 Jul, 2020 | Packagist friendsoftypo3/mediace |
Magento DOM-based Cross-site scripting vulnerability BIT-magento-2020-9691, CVE-2020-9691, GHSA-g7pc-799q-743f | Critical | 6.0% | 29 Jul, 2020 | Packagist magento/community-edition Packagist magento/project-community-edition |
Code injection in mock2easy CVE-2020-7697, GHSA-g4xj-wcq6-qwx5 | Critical | 2.0% | 29 Jul, 2020 | npm mock2easy |
Command injection in Gerapy CVE-2020-7698, GHSA-g57j-q48p-9vm2, PYSEC-2020-44, SNYK-PYTHON-GERAPY-572470 | Critical | 1.7% | 29 Jul, 2020 | PyPI gerapy |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability CVE-2020-12812 | CriticalExploited | 45.4% | 24 Jul, 2020 | |
Magento php object injection vulnerability CVE-2020-9664, GHSA-337c-3rch-q35j | Critical | 8.4% | 22 Jul, 2020 | Packagist magento/core |
Command injection in codecov (npm package) CVE-2020-15123, GHSA-xp63-6vf5-xf3v | Critical | 3.8% | 20 Jul, 2020 | npm codecov |
Path traversal in rollup-plugin-serve CVE-2020-7684, GHSA-4j46-mp85-mv8c | Critical | 1.5% | 17 Jul, 2020 | npm rollup-plugin-serve |
Command injection via Celery broker in Apache Airflow BIT-airflow-2020-11981, CVE-2020-11981, GHSA-976r-qfjj-c24w, PYSEC-2020-15 | Critical | 36.8% | 17 Jul, 2020 | PyPI apache-airflow |
Insecure default config of Celery worker in Apache Airflow BIT-airflow-2020-11982, CVE-2020-11982, GHSA-9g2w-5f3v-mfmm, PYSEC-2020-16 | Critical | 7.2% | 17 Jul, 2020 | PyPI apache-airflow |
Remote Code Execution in scratch-vm CVE-2020-14000, GHSA-vc9j-fhvv-8vrf | Critical | 2.8% | 16 Jul, 2020 | npm scratch-vm |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14644 | CriticalExploited | 94.5% | 15 Jul, 2020 | |
Command Injection in jison CVE-2020-8178, GHSA-vr9x-mm65-2438 | Critical | 3.6% | 15 Jul, 2020 | npm jison |
Microsoft Windows DNS Server Remote Code Execution Vulnerability CVE-2020-1350 | CriticalExploited | 96.7% | 14 Jul, 2020 | |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability CVE-2020-1040 | CriticalExploited | 7.4% | 14 Jul, 2020 | |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability CVE-2020-6287 | CriticalExploited | 94.7% | 14 Jul, 2020 | |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CVE-2020-10987 | CriticalExploited | 79.8% | 13 Jul, 2020 | |
Injection and Command Injection in devcert CVE-2020-8186, GHSA-4228-7qvx-f4rq | Critical | 2.8% | 10 Jul, 2020 | npm devcert |
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability CVE-2020-15505 | CriticalExploited | 99.7% | 07 Jul, 2020 | |
Context isolation bypass via contextBridge in Electron CVE-2020-4077, GHSA-h9jc-284h-533g | Critical | 1.0% | 07 Jul, 2020 | npm electron |
Context isolation bypass via leaked cross-context objects in Electron CVE-2020-4076, GHSA-m93v-9qjc-3g79 | Critical | 0.4% | 07 Jul, 2020 | npm electron |
OS Command Injection in Locutus CVE-2020-13619, GHSA-h86x-mv66-gr5q | Critical | 2.9% | 01 Jul, 2020 | npm locutus |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability CVE-2020-5902 | CriticalExploited | 100.0% | 01 Jul, 2020 | |
Authorization bypass in express-jwt CVE-2020-15084, GHSA-6g6m-m6h5-w9gf | Critical | 1.2% | 30 Jun, 2020 | npm express-jwt |
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CVE-2020-15415 | CriticalExploited | 84.5% | 30 Jun, 2020 | |
Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 | CriticalExploited | 10.7% | 29 Jun, 2020 | |
OS Command Injection in wifiscanner CVE-2020-15362, GHSA-m6rw-m2v9-7hx4 | Critical | 2.5% | 29 Jun, 2020 | npm wifiscanner |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2020-2021 | CriticalExploited | 4.4% | 29 Jun, 2020 | |
Magento security mitigation bypass vulnerability BIT-magento-2020-9632, CVE-2020-9632, GHSA-6w29-x5j4-qhrw | Critical | 7.4% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento security mitigation bypass vulnerability BIT-magento-2020-9631, CVE-2020-9631, GHSA-gffx-9f36-r8wp | Critical | 7.4% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento business logic error vulnerability BIT-magento-2020-9630, CVE-2020-9630, GHSA-5j4w-v87m-8r65 | Critical | 4.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Defense-in-depth security mitigation vulnerability BIT-magento-2020-9585, CVE-2020-9585, GHSA-55gv-hfg3-hwjq | Critical | 4.9% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9583, CVE-2020-9583, GHSA-c55h-7q4j-g6rq | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9582, CVE-2020-9582, GHSA-c3m4-hxv9-4mxj | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Security mitigation bypass vulnerability BIT-magento-2020-9580, CVE-2020-9580, GHSA-j2jp-58gv-g2pg | Critical | 5.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento Security mitigation bypass vulnerability BIT-magento-2020-9579, CVE-2020-9579, GHSA-vrp3-wc28-qg2h | Critical | 5.0% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core |
Magento command injection vulnerability BIT-magento-2020-9578, CVE-2020-9578, GHSA-724x-gqhv-9c5x | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Magento command injection vulnerability BIT-magento-2020-9576, CVE-2020-9576, GHSA-4f7x-gjqc-qqpg | Critical | 5.7% | 26 Jun, 2020 | Packagist magento/community-edition Packagist magento/core Packagist magento/project-community-edition |
Out-of-bounds read in Pillow BIT-pillow-2020-11538, CVE-2020-11538, GHSA-43fq-w8qq-v88h, PYSEC-2020-80 | Critical | 2.5% | 25 Jun, 2020 | PyPI Pillow PyPI pillow |
Node-Traceroute RCE Vulnerability CVE-2018-21268, GHSA-8j9v-qhp4-wv55 | Critical | 4.3% | 25 Jun, 2020 | npm traceroute |
Improper Authentication in Apache Spark BIT-spark-2020-9480, CVE-2020-9480, GHSA-wgx7-jwwm-cgjv, PYSEC-2020-95 | Critical | 29.4% | 23 Jun, 2020 | Maven org.apache.spark:spark-parent_2.11 PyPI pyspark |
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign CVE-2020-14968, GHSA-q3gh-5r98-j4h3 | Critical | 2.9% | 22 Jun, 2020 | npm jsrsasign |
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign CVE-2020-14967, GHSA-xxxq-chmp-67g4 | Critical | 2.3% | 22 Jun, 2020 | npm jsrsasign |
Deserialization of Untrusted Data in Tendenci CVE-2020-14942, GHSA-jqmc-fxxp-r589, PYSEC-2020-112 | Critical | 1.4% | 21 Jun, 2020 | PyPI tendenci |
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs CVE-2020-7679, GHSA-vrr3-5r3v-7xfw | Critical | 2.0% | 19 Jun, 2020 | npm casperjs |
Uncontrolled Resource Consumption in Indy Node CVE-2020-11090, GHSA-3gw4-m5w7-v89c, PYSEC-2020-47 | Critical | 2.2% | 11 Jun, 2020 | PyPI indy-node |
Phar unserialization vulnerability in phpMussel CVE-2020-4043, GHSA-qr95-4mq5-r3fh | Critical | 2.6% | 10 Jun, 2020 | Packagist Maikuolan/phpMussel Packagist maikuolan/phpmussel Packagist phpmussel/phpmussel |
Code Injection in cd-messenger CVE-2020-7675, GHSA-v756-4whv-48vc, SNYK-JS-CDMESSENGER-571493 | Critical | 2.6% | 10 Jun, 2020 | npm cd-messenger |
Improper Input Validation in access-policy CVE-2020-7674, GHSA-fw2f-7f87-5r6c, SNYK-JS-ACCESSPOLICY-571490 | Critical | 2.6% | 10 Jun, 2020 | npm access-policy |
Code Injection in node-extend CVE-2020-7673, GHSA-cg42-4wrc-gp47 | Critical | 2.6% | 10 Jun, 2020 | npm node-extend |