Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Dulwich RCE Vulnerability CVE-2017-16228, GHSA-cwwh-4382-6fwr, PYSEC-2017-12 | Critical | 3.7% | 29 Oct, 2017 | PyPI dulwich |
SaltStack Salt Directory traversal vulnerability in minion id validation CVE-2017-14695, GHSA-j6gj-pg62-x8j6, PYSEC-2017-36 | Critical | 3.2% | 24 Oct, 2017 | PyPI salt |
Potential Command Injection in printer CVE-2014-3741, GHSA-5c8j-xr24-2665 | Critical | 3.8% | 23 Oct, 2017 | npm printer |
Mercurial is vulnerable to shell injection attack CVE-2017-1000116, GHSA-3qmg-c9vc-r47j, PYSEC-2017-89 | Critical | 6.4% | 05 Oct, 2017 | PyPI mercurial |
Red Hat JBoss Application Server Remote Code Execution Vulnerability CVE-2017-12149 | CriticalExploited | 90.7% | 04 Oct, 2017 | |
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability CVE-2017-12240 | CriticalExploited | 13.8% | 29 Sep, 2017 | |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability CVE-2015-1187 | CriticalExploited | 82.7% | 21 Sep, 2017 | |
CodeIgniter and Kohana vulnerable to PHP Object Injection CVE-2014-8684, GHSA-w9ph-q4h9-rwq6 | Critical | 72.2% | 19 Sep, 2017 | Packagist codeigniter/framework Packagist kohana/core |
Dolibarr SQL injection vulnerability in don/list.php CVE-2017-14242, GHSA-jjgq-jq8g-24w4 | Critical | 1.3% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL injection vulnerability in admin/menus/edit.php CVE-2017-14238, GHSA-qm8m-7626-762h | Critical | 1.3% | 11 Sep, 2017 | Packagist dolibarr/dolibarr |
Incorrect persistent NameID generation in SimpleSAMLphp CVE-2017-12873, GHSA-gp2m-7cfp-h6gf | Critical | 1.7% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module CVE-2017-12868, GHSA-j96g-47x2-46hv | Critical | 2.1% | 01 Sep, 2017 | Packagist simplesamlphp/simplesamlphp |
baserCMS SQL Injection vulnerability CVE-2017-10842, GHSA-jc94-wp59-pq4f | Critical | 1.8% | 29 Aug, 2017 | Packagist baserproject/basercms |
python-kerberos vulnerable to KDC spoofing attacks CVE-2015-3206, GHSA-mffc-9gx5-99g3, PYSEC-2017-49, PYSEC-2017-66 | Critical | 2.4% | 25 Aug, 2017 | PyPI kerberos PyPI pykerberos |
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CVE-2017-11357 | CriticalExploited | 77.7% | 23 Aug, 2017 | |
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability CVE-2017-11317 | CriticalExploited | 84.2% | 23 Aug, 2017 | |
SaltStack Salt Directory traversal vulnerability in minion id validation CVE-2017-12791, GHSA-xxvj-8g5m-4qgw, PYSEC-2017-151, PYSEC-2017-35 | Critical | 4.7% | 23 Aug, 2017 | PyPI salt |
Codiad Vulnerable to Shell Command Injection CVE-2017-11366, GHSA-jccv-3h4x-35mv | Critical | 7.5% | 21 Aug, 2017 | Packagist codiad/codiad |
salt password information leaked in debug logs CVE-2015-6941, GHSA-cxm4-7qcw-267r, PYSEC-2017-71 | Critical | 2.8% | 09 Aug, 2017 | PyPI salt |
Citrix Multiple Products Remote Code Execution Vulnerability CVE-2017-6316 | CriticalExploited | 73.0% | 20 Jul, 2017 | |
Akeneo PIM vulnerable to shell injection in the mass edition CVE-2017-1000009, GHSA-q8cr-xphm-7gfv | Critical | 3.9% | 17 Jul, 2017 | Packagist akeneo/pim-community-dev |
Session Fixation in ipsilon CVE-2016-8638, GHSA-376m-3rm2-9jm6, PYSEC-2026-360 | Critical | 2.1% | 12 Jul, 2017 | PyPI ipsilon |
Apache Struts 1 Improper Input Validation Vulnerability CVE-2017-9791 | CriticalExploited | 98.9% | 10 Jul, 2017 | |
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability CVE-2017-9248 | CriticalExploited | 75.1% | 03 Jul, 2017 | |
Code Injection in PHPUnit CVE-2017-9841, GHSA-r7c9-c69m-rph8 | CriticalExploited | 100.0% | 27 Jun, 2017 | Packagist phpunit/phpunit |
Microsoft Windows Search Remote Code Execution Vulnerability CVE-2017-8543 | CriticalExploited | 74.2% | 15 Jun, 2017 | |
Loaded Databook of Tablib prone to python insertion resulting in command execution CVE-2017-2810, GHSA-gcr6-rf47-jrgf, PYSEC-2017-95 | Critical | 4.9% | 14 Jun, 2017 | PyPI tablib |
SKYSEA Client View Improper Authentication Vulnerability CVE-2016-7836 | CriticalExploited | 19.2% | 09 Jun, 2017 | |
TeamPass SQL injection in users.queries.php CVE-2017-9436, GHSA-cm26-gp8j-w6xf | Critical | 1.0% | 05 Jun, 2017 | Packagist nilsteampassnet/teampass |
Dolibarr ERP and CRM SQLi CVE-2017-9435, GHSA-v3m8-7h3p-6j5m | Critical | 1.5% | 05 Jun, 2017 | Packagist dolibarr/dolibarr |
Samba Remote Code Execution Vulnerability CVE-2017-7494 | CriticalExploited | 99.4% | 30 May, 2017 | |
NETGEAR Multiple Devices Buffer Overflow Vulnerability CVE-2017-6862 | CriticalExploited | 45.7% | 26 May, 2017 | |
keycloak-connect and keycloak-js improperly handle invalid tokens CVE-2017-7474, GHSA-mw35-24gh-f82w | Critical | 2.5% | 12 May, 2017 | npm keycloak-connect npm keycloak-js |
Dolibarr ERP and CRM Insecure Encryption CVE-2017-7888, GHSA-98vc-98q7-57qf | Critical | 1.1% | 10 May, 2017 | Packagist dolibarr/dolibarr |
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter CVE-2017-7886, GHSA-gw37-vmvw-f833 | Critical | 1.7% | 10 May, 2017 | Packagist dolibarr/dolibarr |
GeniXCMS Arbitrary User Password Reset Vulnerability CVE-2017-8827, GHSA-wm7g-rmgg-9837 | Critical | 1.6% | 08 May, 2017 | Packagist genix/cms |
Hikvision Multiple Products Improper Authentication Vulnerability CVE-2017-7921 | CriticalExploited | 100.0% | 06 May, 2017 | |
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability CVE-2017-5689 | CriticalExploited | 92.2% | 02 May, 2017 | |
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c. CVE-2017-8359, PYSEC-2017-101 | Critical | 3.1% | 30 Apr, 2017 | PyPI grpcio |
Adobe ColdFusion Deserialization Vulnerability CVE-2017-3066 | CriticalExploited | 90.6% | 27 Apr, 2017 | |
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. CVE-2016-6903, PYSEC-2017-154 | Critical | 5.0% | 24 Apr, 2017 | PyPI limited-shell |
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. CVE-2016-6902, PYSEC-2017-153 | Critical | 5.5% | 24 Apr, 2017 | PyPI limited-shell |
Shopware RCE Vulnerability CVE-2016-3109, GHSA-cj2f-96jq-phpp | Critical | 28.1% | 21 Apr, 2017 | Packagist shopware/shopware |
NETGEAR Multiple WAP Devices Command Injection Vulnerability CVE-2016-1555 | CriticalExploited | 98.3% | 21 Apr, 2017 | |
TeamPass vulnerable to SQL Injection CVE-2015-7564, GHSA-r64j-5w3w-fp49 | Critical | 3.4% | 12 Apr, 2017 | Packagist nilsteampassnet/teampass |
web2py is vulnerable to password brute-force attack CVE-2016-10321, GHSA-gv85-wgxc-vc56, PYSEC-2026-569 | Critical | 2.6% | 10 Apr, 2017 | PyPI web2py |
Cross-Site Scripting in swagger-ui CVE-2016-5682, GHSA-p239-93f7-h6xf | Critical | 1.0% | 10 Apr, 2017 | npm swagger-ui |
Apache Tomcat Remote Code Execution Vulnerability CVE-2016-8735 | CriticalExploited | 90.3% | 06 Apr, 2017 | |
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CVE-2014-3931 | CriticalExploited | 29.0% | 31 Mar, 2017 | |
Microsoft Windows Server Buffer Overflow Vulnerability CVE-2017-7269 | CriticalExploited | 99.8% | 27 Mar, 2017 |