Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
IBM Planning Analytics Remote Code Execution Vulnerability CVE-2019-4716 | CriticalExploited | 86.4% | 18 Dec, 2019 | |
class.upload.php in verot.net omits .pht from the set of dangerous file extensions CVE-2019-19634, GHSA-2gc7-w4hw-rr2m | Critical | 4.2% | 17 Dec, 2019 | Packagist verot/class.upload.php |
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow CVE-2019-16778, GHSA-844w-j86r-4x2j, PYSEC-2019-209, PYSEC-2019-227, PYSEC-2019-234 | Critical | 0.8% | 16 Dec, 2019 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Improper Authentication in requests-kerberos CVE-2014-8650, GHSA-wh37-37xw-54hr, PYSEC-2019-200 | Critical | 3.6% | 15 Dec, 2019 | PyPI requests-kerberos |
Object injection in cookie driver in phpfastcache CVE-2019-16774, GHSA-484f-743f-6jx2 | Critical | 1.2% | 12 Dec, 2019 | Packagist phpfastcache/phpfastcache |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability CVE-2019-18935 | CriticalExploited | 99.7% | 11 Dec, 2019 | |
Inadequate Encryption Strength in python-keystoneclient CVE-2013-2166, GHSA-c3xq-cj8f-7829, PYSEC-2019-197 | Critical | 2.1% | 10 Dec, 2019 | PyPI python-keystoneclient |
Insufficient Verification of Data Authenticity in python-keystoneclient CVE-2013-2167, GHSA-9vg3-cf92-h2h7, PYSEC-2019-161 | Critical | 2.0% | 10 Dec, 2019 | PyPI python-keystoneclient |
Sandbox Breakout / Arbitrary Code Execution in safer-eval CVE-2019-10769, GHSA-v63x-xc9j-hhvq | Critical | 2.6% | 06 Dec, 2019 | npm safer-eval |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability CVE-2019-5544 | CriticalExploited | 98.1% | 06 Dec, 2019 | |
phpMyAdmin unsanitized Git information CVE-2019-19617, GHSA-pgph-mc4p-f8c3 | Critical | 2.3% | 06 Dec, 2019 | Packagist phpmyadmin/phpmyadmin |
QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 | CriticalExploited | 89.3% | 05 Dec, 2019 | |
QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 | CriticalExploited | 82.7% | 05 Dec, 2019 | |
QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 | CriticalExploited | 14.4% | 05 Dec, 2019 | |
QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 | CriticalExploited | 88.1% | 05 Dec, 2019 | |
Remote code execution in verot/class.upload.php CVE-2019-19576, GHSA-r5gm-4p5w-pq2p | Critical | 26.4% | 04 Dec, 2019 | Packagist verot/class.upload.php |
Typo3 SQL injection due to faulty prepared statements CVE-2011-3583, GHSA-gx4p-6w86-f8jx | Critical | 1.4% | 26 Nov, 2019 | Packagist typo3/cms |
SQL injection in phpMyAdmin CVE-2019-18622, GHSA-jgjc-332c-8cmc | Critical | 2.2% | 22 Nov, 2019 | Packagist phpmyadmin/phpmyadmin |
Symfony Unsafe Cache Serialization Could Enable RCE CVE-2019-18889, GHSA-79gr-58r3-pwm3 | Critical | 33.2% | 21 Nov, 2019 | Packagist symfony/cache Packagist symfony/symfony |
Improper Input Validation in Symfony CVE-2019-11325, GHSA-w4rc-rx25-8m86 | Critical | 3.4% | 21 Nov, 2019 | Packagist symfony/symfony Packagist symfony/var-exporter |
Sangoma FreePBX Improper Authentication Vulnerability CVE-2019-19006 | CriticalExploited | 55.9% | 21 Nov, 2019 | |
Arbitrary File Write in iobroker.admin CVE-2019-10765, GHSA-54xj-q58h-9x57, SNYK-JS-IOBROKERADMIN-534634 | Critical | 1.7% | 20 Nov, 2019 | npm iobroker.admin |
Smarty3 Arbitrary PHP Code Execution CVE-2011-1028, GHSA-6frx-2r5w-c524 | Critical | 1.6% | 20 Nov, 2019 | Packagist smarty/smarty |
SQL Injection in usmanhalalit/pixie CVE-2019-10766, GHSA-68wg-qv6r-j4vp, SNYK-PHP-USMANHALALITPIXIE-534879 | Critical | 1.5% | 19 Nov, 2019 | Packagist usmanhalalit/pixie |
Eval injection in Supybot/Limnoria CVE-2019-19010, GHSA-6g88-vr3v-76mf, PYSEC-2019-102 | Critical | 2.3% | 16 Nov, 2019 | PyPI limnoria |
Critical severity vulnerability that affects slpjs CVE-2019-16762, GHSA-425c-ccf3-3jrr | Critical | 1.1% | 15 Nov, 2019 | npm slpjs |
Validation Bypass in slp-validate CVE-2019-16761, GHSA-wmx6-vxcf-c3gr | Critical | 1.0% | 15 Nov, 2019 | npm slp-validate |
Pimcore 2FA Vulnerable to Brute Forcing CVE-2019-18985, GHSA-hf62-5vxh-jpwj | Critical | 1.4% | 15 Nov, 2019 | Packagist pimcore/pimcore |
Pimcore Access Control Issues CVE-2019-18981, GHSA-jhcf-j4hg-v64r | Critical | 1.4% | 15 Nov, 2019 | Packagist pimcore/pimcore |
Improper Verification of Cryptographic Signature in matrix-synapse CVE-2019-18835, GHSA-cppw-2mf8-qpm5, PYSEC-2019-186 | Critical | 0.9% | 08 Nov, 2019 | PyPI matrix-synapse |
Strapi allows unauthenticated attacker to reset admin password without valid reset token CVE-2019-18818, GHSA-6xc2-mj39-q599 | Critical | 97.6% | 07 Nov, 2019 | npm strapi |
Typo3 Authentication Bypass CVE-2011-4628, GHSA-79gv-5cgx-x6rx | Critical | 1.6% | 06 Nov, 2019 | Packagist typo3/cms |
Magento 2 Community Edition XML Injection CVE-2019-8158, GHSA-8p5c-f836-m4h7 | Critical | 1.3% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento Broken authentication and session managememt CVE-2019-8149, GHSA-8mwx-wpp4-5xh4 | Critical | 2.1% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition RCE Vulnerability CVE-2019-8144, GHSA-vpg9-gq7j-mxqg | Critical | 2.8% | 06 Nov, 2019 | Packagist magento/community-edition |
Magento 2 Community Edition Insecure Component CVE-2019-8136, GHSA-xgcp-59g2-wm8g | Critical | 1.2% | 06 Nov, 2019 | Packagist magento/community-edition |
Remote code execution via vulnerable Symphony dependecy injection CVE-2019-8135, GHSA-3q5x-7mxp-rp6j | Critical | 2.5% | 06 Nov, 2019 | Packagist magento/community-edition |
Using JS libraries with known security vulnerabilities CVE-2019-8121, GHSA-89ch-hqf9-rgp3 | Critical | 1.2% | 05 Nov, 2019 | Packagist magento/community-edition Packagist magento/product-community-edition |
ReviewBoard and Djblets library are vulnerable to code execution CVE-2013-4409, GHSA-58h8-44mg-r43x, PYSEC-2019-175, PYSEC-2026-524 | Critical | 3.6% | 04 Nov, 2019 | PyPI ReviewBoard PyPI djblets PyPI reviewboard |
python-docutils allows insecure usage of temporary files CVE-2009-5042, GHSA-cg75-6938-wx58, PYSEC-2019-176 | Critical | 1.4% | 31 Oct, 2019 | PyPI docutils |
SQL Injection in medoo CVE-2019-10762, GHSA-q9p4-qfc8-fvpp, SNYK-PHP-CATFANMEDOO-474562 | Critical | 1.4% | 30 Oct, 2019 | Packagist catfan/medoo |
SQL Injection in sequelize CVE-2019-10749, GHSA-2598-2f59-rmhq, SNYK-JS-SEQUELIZE-450222 | Critical | 1.2% | 29 Oct, 2019 | npm sequelize |
SQL Injection in sequelize CVE-2019-10748, GHSA-j9xp-92vc-559j, SNYK-JS-SEQUELIZE-450221 | Critical | 1.3% | 29 Oct, 2019 | npm sequelize |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability CVE-2019-11043 | CriticalExploited | 99.8% | 28 Oct, 2019 | |
Zend Framework Allows SQL Injection CVE-2015-0270, GHSA-v59p-p692-v382 | Critical | 1.1% | 25 Oct, 2019 | Packagist zendframework/zend-db Packagist zendframework/zendframework |
SQL Injection and Cross-site Scripting in class-validator CVE-2019-18413, GHSA-fj58-h2fr-3pp2 | Critical | 2.0% | 24 Oct, 2019 | npm class-validator |
Craft CMS possibility of brute force attempts CVE-2019-15929, GHSA-wvr4-w6cw-4px8 | Critical | 1.8% | 24 Oct, 2019 | Packagist craftcms/cms |
Sandbox Breakout in realms-shim GHSA-7cg8-pq9v-x98q | Critical | Not scored | 21 Oct, 2019 | npm realms-shim |
SQL Injection in sequelize CVE-2019-10752, GHSA-m9jw-237r-gvfv | Critical | 1.5% | 17 Oct, 2019 | npm sequelize |
slub_events for Typo3 Arbitrary File Upload CVE-2019-16700, GHSA-5pww-3mfc-g8vr | Critical | 2.5% | 16 Oct, 2019 | Packagist slub/slub-events |