Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Moodle SQL injection via user preferences CVE-2017-2641, GHSA-xhq3-455r-xv44 | Critical | 14.5% | 26 Mar, 2017 | Packagist moodle/moodle |
OpenStack Nova logs sensitive context from notification exceptions CVE-2017-7214, GHSA-f4g4-cj8f-3cr9, PYSEC-2026-432 | Critical | 2.3% | 21 Mar, 2017 | PyPI nova |
Cisco IOS and IOS XE Remote Code Execution Vulnerability CVE-2017-3881 | CriticalExploited | 99.0% | 17 Mar, 2017 | |
Apache Struts Remote Code Execution Vulnerability CVE-2017-5638 | CriticalExploited | 100.0% | 11 Mar, 2017 | |
PySAML2 XML external entity attack CVE-2016-10127, GHSA-m269-wj6g-c459, PYSEC-2017-67 | Critical | 2.6% | 03 Mar, 2017 | PyPI pysaml2 |
NETGEAR DGN2200 Remote Code Execution Vulnerability CVE-2017-6077 | CriticalExploited | 68.7% | 22 Feb, 2017 | |
SimpleSAMLphp SAML2 spoof SAML responses CVE-2016-9814, GHSA-r8v4-7vwj-983x | Critical | 2.4% | 17 Feb, 2017 | Packagist simplesamlphp/saml2 |
Zend Framework Allows SQL Injection CVE-2016-6233, GHSA-p9hp-3gpv-52w3 | Critical | 2.0% | 17 Feb, 2017 | Packagist zendframework/zendframework Packagist zendframework/zendframework1 |
Zend Framework Allows SQL Injection CVE-2016-4861, GHSA-xfjq-w3cw-h5fq | Critical | 4.1% | 17 Feb, 2017 | Packagist zendframework/zendframework |
Buffer Overflow in pycrypto CVE-2013-7459, GHSA-cq27-v7xp-c356, PYSEC-2017-94 | Critical | 9.6% | 15 Feb, 2017 | PyPI pycrypto |
Froxlor guessable password reset token CVE-2016-5100, GHSA-qj6h-m7xc-r2v3 | Critical | 1.9% | 13 Feb, 2017 | Packagist froxlor/froxlor |
Code Execution Through IIFE in serialize-to-js CVE-2017-5954, GHSA-mm62-wxc8-cf7m | Critical | 4.5% | 10 Feb, 2017 | npm serialize-to-js |
Code Execution through IIFE in node-serialize CVE-2017-5941, GHSA-q4v7-4rhw-9hqm | Critical | 61.0% | 09 Feb, 2017 | npm node-serialize |
Symfony Authentication Bypass CVE-2016-2403, GHSA-wvj5-r78r-hhfq | Critical | 4.3% | 07 Feb, 2017 | Packagist symfony/security Packagist symfony/security-core Packagist symfony/symfony |
Salt allows deleted minions to read or write to minions with the same id CVE-2016-9639, GHSA-hvmj-356c-gpf4, PYSEC-2017-34 | Critical | 2.6% | 07 Feb, 2017 | PyPI salt |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 | CriticalExploited | 83.3% | 30 Jan, 2017 | |
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js CVE-2015-8857, GHSA-34r7-q49f-h37c | Critical | 3.6% | 23 Jan, 2017 | RubyGems uglifier npm uglify-js |
python-jose failure to use a constant time comparison for HMAC keys CVE-2016-7036, GHSA-w799-prg3-cx77, PYSEC-2017-28 | Critical | 2.2% | 23 Jan, 2017 | PyPI python-jose |
Subrion CMS PHP Object Injection CVE-2017-5543, GHSA-4j79-4m6q-77vf | Critical | 2.0% | 20 Jan, 2017 | Packagist intelliants/subrion |
CodeIgniter arbitrary code execution CVE-2016-10131, GHSA-2pcj-76hj-xqhm | Critical | 3.1% | 12 Jan, 2017 | Packagist bcit-ci/codeigniter |
Swift Mailer mail transport Command Injection CVE-2016-10074, GHSA-pr44-4jfr-286m | Critical | 43.8% | 30 Dec, 2016 | Packagist swiftmailer/swiftmailer |
Remote code execution in PHPMailer CVE-2016-10045, GHSA-4pc3-96mx-wwc8 | Critical | 97.7% | 30 Dec, 2016 | Packagist phpmailer/phpmailer |
zend-mail remote code execution via Sendmail adapter CVE-2016-10034, GHSA-r9mw-gwx9-v3h5 | Critical | 38.4% | 30 Dec, 2016 | Packagist zendframework/zend-mail |
Remote code execution in PHPMailer CVE-2016-10033, GHSA-5f37-gxvh-23v6 | CriticalExploited | 99.7% | 30 Dec, 2016 | Packagist phpmailer/phpmailer |
phpMyAdmin CSRF Vulnerability CVE-2016-9866, GHSA-jvxx-8xxf-5495 | Critical | 1.0% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
phpMyAdmin Authentication Bypass CVE-2016-6629, GHSA-567r-vqj7-5cw7 | Critical | 3.2% | 11 Dec, 2016 | Packagist phpmyadmin/phpmyadmin |
Django user with hardcoded password created when running tests on Oracle CVE-2016-9013, GHSA-mv8g-fhh6-6267, PYSEC-2016-17 | Critical | 5.2% | 09 Dec, 2016 | PyPI Django PyPI django |
Django DNS Rebinding Vulnerability CVE-2016-9014, GHSA-3f2c-jm6v-cr35, PYSEC-2016-18 | Critical | 6.1% | 09 Dec, 2016 | PyPI Django PyPI django |
ADOdb Library SQL Injection CVE-2016-7405, GHSA-3fj4-q72x-x2g9 | Critical | 3.0% | 03 Oct, 2016 | Packagist adodb/adodb-php |
OpenStack Murano Code Execution CVE-2016-4972, GHSA-87r7-q54j-f9qg, PYSEC-2016-22, PYSEC-2026-429, PYSEC-2026-430 | Critical | 3.2% | 26 Sep, 2016 | PyPI murano PyPI murano-dashboard PyPI python-muranoclient |
phpMyAdmin Code Injection vulnerability CVE-2016-5734, GHSA-rv57-479x-x4qv | Critical | 80.9% | 03 Jul, 2016 | Packagist phpmyadmin/phpmyadmin |
OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism CVE-2015-8914, GHSA-3vj4-cvjp-482h, PYSEC-2026-431 | Critical | 4.3% | 17 Jun, 2016 | PyPI neutron |
Adobe Flash Player Remote Code Execution Vulnerability CVE-2016-4171 | CriticalExploited | 20.1% | 16 Jun, 2016 | |
Apache Shiro Code Execution Vulnerability CVE-2016-4437 | CriticalExploited | 93.0% | 07 Jun, 2016 | |
Zend Framework SQL injection vector using null byte for PDO CVE-2015-7695, GHSA-2hvh-c5c2-vj85 | Critical | 2.9% | 07 Jun, 2016 | Packagist zendframework/zendframework1 |
Apache ActiveMQ Improper Input Validation Vulnerability CVE-2016-3088 | CriticalExploited | 98.5% | 01 Jun, 2016 | |
SAP NetWeaver Remote Code Execution Vulnerability CVE-2010-5326 | CriticalExploited | 17.8% | 13 May, 2016 | |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2016-4117 | CriticalExploited | 94.3% | 11 May, 2016 | |
Oracle Java SE and JRockit Unspecified Vulnerability CVE-2016-3427 | CriticalExploited | 92.3% | 21 Apr, 2016 | |
Pillow Integer overflow in ImagingResampleHorizontal CVE-2016-4009, GHSA-hvr8-466p-75rh, PYSEC-2016-7 | Critical | 7.9% | 13 Apr, 2016 | PyPI pillow |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2016-1019 | CriticalExploited | 22.3% | 07 Apr, 2016 | |
SAP NetWeaver SQL Injection Vulnerability CVE-2016-2386 | CriticalExploited | 71.5% | 16 Feb, 2016 | |
Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component CVE-2016-1505, GHSA-84cw-mxhv-qvv4, PYSEC-2026-512 | Critical | 2.6% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
Radicale vulnerable to arbitrary file read or write CVE-2015-8747, GHSA-fgqv-96v9-w23m, PYSEC-2016-36 | Critical | 3.0% | 03 Feb, 2016 | PyPI Radicale PyPI radicale |
Command Injection in Pygments CVE-2015-8557, GHSA-fff8-4w9p-7v76, PYSEC-2016-32 | Critical | 6.7% | 08 Jan, 2016 | PyPI Pygments PyPI pygments |
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 | CriticalExploited | 97.8% | 02 Jan, 2016 | |
Juniper ScreenOS Improper Authentication Vulnerability CVE-2015-7755 | CriticalExploited | 61.1% | 19 Dec, 2015 | |
Injection vulnerability that affects ironic-discoverd CVE-2015-5306, GHSA-x64g-wjmw-w328, PYSEC-2015-28, PYSEC-2026-505 | Critical | 1.6% | 25 Nov, 2015 | PyPI ironic-inspector PyPI python-ironic-inspector-client |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability CVE-2015-4852 | CriticalExploited | 95.0% | 18 Nov, 2015 | |
Improper Input Validation in Jupyter Notebook CVE-2015-7337, GHSA-92mr-v722-f48m, PYSEC-2015-25, PYSEC-2015-27 | Critical | 2.5% | 29 Sep, 2015 | PyPI ipython PyPI notebook |