Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Command Injection in libnmap CVE-2018-16461, GHSA-7g2w-6r25-2j7p | Critical | 3.9% | 30 Oct, 2018 | npm libnmap |
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CVE-2018-14558 | CriticalExploited | 8.5% | 30 Oct, 2018 | |
SaltStack Salt Remote command execution and incorrect access control when using salt-api CVE-2018-15751, GHSA-x549-r7m8-gv63, PYSEC-2018-30 | Critical | 4.9% | 24 Oct, 2018 | PyPI salt |
ThinkPHP SQLi Vulnerability CVE-2018-18546, GHSA-j7g8-3qqg-8cvm | Critical | 1.7% | 21 Oct, 2018 | Packagist topthink/framework |
ThinkPHP SQLi Vulnerability CVE-2018-18530, GHSA-7xfj-4jpg-58vf | Critical | 1.2% | 19 Oct, 2018 | Packagist topthink/framework |
ThinkPHP SQLi Vulnerability CVE-2018-18529, GHSA-78q9-24gv-g288 | Critical | 1.2% | 19 Oct, 2018 | Packagist topthink/framework |
Unrestricted Upload of File with Dangerous Type in blueimp-file-upload CVE-2018-9206, GHSA-4cj8-g9cp-v5wr | Critical | 97.3% | 11 Oct, 2018 | npm blueimp-file-upload |
Mercurial Out-of-bounds Read vulnerability CVE-2018-17983, GHSA-p575-cf9h-wv42, PYSEC-2018-91 | Critical | 2.0% | 04 Oct, 2018 | PyPI mercurial |
ThinkPHP SQL injection vulnerability CVE-2018-17566, GHSA-75fm-52mm-q5rm | Critical | 1.5% | 26 Sep, 2018 | Packagist topthink/framework |
Adobe ColdFusion Unrestricted File Upload Vulnerability CVE-2018-15961 | CriticalExploited | 100.0% | 25 Sep, 2018 | |
TCPDF vulnerable to attackers triggering deserialization of arbitrary data CVE-2018-17057, GHSA-5hw4-m7f3-hhx8 | Critical | 26.2% | 14 Sep, 2018 | Packagist fooman/tcpdf Packagist la-haute-societe/tcpdf Packagist spoonity/tcpdf Packagist tecnickcom/tcpdf |
Elefant CMS PHP Code Execution Vulnerability CVE-2018-16975, GHSA-x2w2-qgv6-8xrm | Critical | 3.7% | 12 Sep, 2018 | Packagist elefant/cms |
Elefant CMS Code Execution Vulnerability CVE-2018-16974, GHSA-77j2-7whr-6vpx | Critical | 3.6% | 12 Sep, 2018 | Packagist elefant/cms |
ps Enables OS Command Injection CVE-2018-16460, GHSA-cfhg-9x44-78h2 | Critical | 2.9% | 07 Sep, 2018 | npm ps |
ThinkPHP SQL Injection vulnerability CVE-2018-16385, GHSA-vcm7-88jx-3r39 | Critical | 2.2% | 03 Sep, 2018 | Packagist topthink/framework |
Command Injection in egg-scripts CVE-2018-3786, GHSA-c9j3-wqph-5xx9 | Critical | 12.3% | 24 Aug, 2018 | npm egg-scripts |
Elefant CMS Improper Input Validation CVE-2018-15601, GHSA-pcf7-5974-vjh4 | Critical | 1.6% | 21 Aug, 2018 | Packagist elefant/cms |
phpWhois arbitrary code execution via a crafted whois record CVE-2015-5243, GHSA-c95f-27gx-6vq9 | Critical | 6.2% | 20 Aug, 2018 | Packagist brightlocal/phpwhois Packagist david-garcia/phpwhois Packagist ivankristianto/phpwhois Packagist jsmitty12/phpwhois +5 more |
Cobbler Improper Validation of Security Tokens CVE-2018-1000226, GHSA-f88q-22g8-frcg, PYSEC-2026-315 | Critical | 12.6% | 20 Aug, 2018 | PyPI cobbler |
dojox vulnerable to unescaped string injection CVE-2018-15494, GHSA-84cm-x2q5-8225 | Critical | 2.5% | 18 Aug, 2018 | npm dojox |
Command Injection in git-dummy-commit CVE-2018-3785, GHSA-h3c2-x77c-7pvr | Critical | 4.0% | 17 Aug, 2018 | npm git-dummy-commit |
Code Injection in cryo CVE-2018-3784, GHSA-38f5-ghc2-fcmv | Critical | 3.3% | 17 Aug, 2018 | npm cryo |
Privilege Escalation due to Blind NoSQL Injection in flintcms CVE-2018-3783, GHSA-jhq3-57xh-6643 | Critical | 3.8% | 17 Aug, 2018 | npm flintcms |
Open Redirect in url-parse CVE-2018-3774, GHSA-pv4c-p2j5-38j4 | Critical | 3.8% | 12 Aug, 2018 | npm url-parse |
Cobbler has Exposed Dangerous Method or Function CVE-2018-10931, GHSA-8787-63px-3m23, PYSEC-2026-313 | Critical | 68.1% | 09 Aug, 2018 | PyPI cobbler |
Drupal PECL YAML parser unsafe object handling CVE-2017-6920, GHSA-9c24-g32g-35rj | Critical | 20.2% | 06 Aug, 2018 | Packagist drupal/core Packagist drupal/drupal |
NUUO NVRmini Devices OS Command Injection Vulnerability CVE-2018-14933 | CriticalExploited | 94.8% | 04 Aug, 2018 | |
MikroTik Router OS Directory Traversal Vulnerability CVE-2018-14847 | CriticalExploited | 96.0% | 02 Aug, 2018 | |
SQL Injection in pycsw CVE-2016-8640, GHSA-hg4c-rgvm-964g, PYSEC-2018-98 | Critical | 2.3% | 01 Aug, 2018 | PyPI pycsw |
Ansible fails to properly sanitize fact variables sent from the Ansible controller CVE-2016-8628, GHSA-jg4f-jqm5-4mgq, PYSEC-2018-38 | Critical | 3.2% | 31 Jul, 2018 | PyPI ansible |
Command Injection in whereis CVE-2018-3772, GHSA-wjr4-2jgw-hmv8 | Critical | 2.8% | 30 Jul, 2018 | npm whereis |
Mitmweb in mitmproxy allows DNS Rebinding attacks CVE-2018-14505, GHSA-6m53-c78q-7qmg, PYSEC-2018-56 | Critical | 3.3% | 22 Jul, 2018 | PyPI mitmproxy |
Ansible fails to properly mark lookup-plugin results as unsafe CVE-2017-7481, GHSA-w578-j992-554x, PYSEC-2018-41 | Critical | 4.8% | 19 Jul, 2018 | PyPI ansible |
PHPOffice Common Improper Restriction of XML External Entity Reference CVE-2018-14065, GHSA-2853-hf2g-9843 | Critical | 2.2% | 15 Jul, 2018 | Packagist phpoffice/common |
Malicious Package in eslint-scope GHSA-hxxf-q3w9-4xgw | Critical | Not scored | 12 Jul, 2018 | npm eslint-config-eslint npm eslint-scope |
Codiad remote code execution vulnerability CVE-2018-14009, GHSA-584h-jhxh-pxp2 | Critical | 38.0% | 12 Jul, 2018 | Packagist codiad/codiad |
Sensitive Data Exposure in msrcrypto CVE-2018-8319, GHSA-qg3g-2mgh-33j8 | Critical | 7.7% | 11 Jul, 2018 | npm msrcrypto |
Command Injection in macaddress CVE-2018-13797, GHSA-pp57-mqmh-44h7 | Critical | 6.7% | 10 Jul, 2018 | npm macaddress |
Insufficient Entropy in cryptiles CVE-2018-1000620, GHSA-rq8g-5pc5-wrhr | Critical | 1.7% | 09 Jul, 2018 | npm cryptiles |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13450, GHSA-24q2-6x37-cgcx | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13449, GHSA-g5mq-v9hf-958h | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13448, GHSA-m5rg-g6f9-8wpw | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in product/card.php CVE-2018-13447, GHSA-jjqq-m998-53jf | Critical | 1.9% | 08 Jul, 2018 | Packagist dolibarr/dolibarr |
Mercurial mishandles integer addition and subtraction CVE-2018-13347, GHSA-3mjj-mr4f-qxmx, PYSEC-2018-89 | Critical | 2.7% | 06 Jul, 2018 | PyPI mercurial |
Denial of Service in memjs CVE-2018-3767, GHSA-cx8m-8xmx-q8v3 | Critical | 1.5% | 05 Jul, 2018 | npm memjs |
Prototype Pollution in async merge-object CVE-2018-3753, GHSA-fp82-2h99-3fpp | Critical | 1.4% | 03 Jul, 2018 | npm merge-object |
Prototype Pollution in merge-options CVE-2018-3752, GHSA-qw93-45r3-p66p | Critical | 1.4% | 03 Jul, 2018 | npm merge-options |
Prototype Pollution in merge-recursive CVE-2018-3751, GHSA-cvxm-f295-x957 | Critical | 1.4% | 03 Jul, 2018 | npm merge-recursive |
Prototype Pollution in deep-extend CVE-2018-3750, GHSA-hr2v-3952-633q | Critical | 2.1% | 03 Jul, 2018 | npm deep-extend |
Improper Input Validation in Deap CVE-2018-3749, GHSA-xg47-r67p-vhv5 | Critical | 1.4% | 03 Jul, 2018 | npm deap |