Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability CVE-2024-38217 | MediumExploited | 10.0% | 10 Sep, 2024 | |
Microsoft Windows Installer Improper Privilege Management Vulnerability CVE-2024-38014 | HighExploited | 6.3% | 10 Sep, 2024 | |
Veeam Backup and Replication Deserialization Vulnerability CVE-2024-40711 | CriticalExploited | 90.4% | 07 Sep, 2024 | |
Cisco Smart Licensing Utility Static Credential Vulnerability CVE-2024-20439 | CriticalExploited | 97.1% | 04 Sep, 2024 | |
Apache OFBiz Forced Browsing Vulnerability CVE-2024-45195 | HighExploited | 100.0% | 04 Sep, 2024 | |
Progress WhatsUp Gold SQL Injection Vulnerability CVE-2024-6670 | CriticalExploited | 92.9% | 29 Aug, 2024 | |
SonicWall SonicOS Improper Access Control Vulnerability CVE-2024-40766 | CriticalExploited | 18.4% | 23 Aug, 2024 | |
Versa Director Dangerous File Type Upload Vulnerability CVE-2024-39717 | HighExploited | 4.0% | 22 Aug, 2024 | |
SolarWinds Web Help Desk Hardcoded Credential Vulnerability CVE-2024-28987 | CriticalExploited | 93.3% | 21 Aug, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-7971 | CriticalExploited | 21.0% | 21 Aug, 2024 | |
Google Chromium V8 Inappropriate Implementation Vulnerability CVE-2024-7965 | HighExploited | 18.5% | 21 Aug, 2024 | |
Kingsoft WPS Office Path Traversal Vulnerability CVE-2024-7262 | CriticalExploited | 3.1% | 15 Aug, 2024 | |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2024-28986 | CriticalExploited | 84.6% | 13 Aug, 2024 | |
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability CVE-2024-7593 | CriticalExploited | 100.0% | 13 Aug, 2024 | |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38213 | MediumExploited | 13.6% | 13 Aug, 2024 | |
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability CVE-2024-38193 | HighExploited | 28.7% | 13 Aug, 2024 | |
Microsoft Project Remote Code Execution Vulnerability CVE-2024-38189 | HighExploited | 8.2% | 13 Aug, 2024 | |
Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38178 | HighExploited | 41.4% | 13 Aug, 2024 | |
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability CVE-2024-38107 | HighExploited | 1.6% | 13 Aug, 2024 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2024-38106 | HighExploited | 6.3% | 13 Aug, 2024 | |
Mitel SIP Phones Argument Injection Vulnerability CVE-2024-41710 | HighExploited | 41.6% | 12 Aug, 2024 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2024-27443 | MediumExploited | 24.6% | 12 Aug, 2024 | |
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2024-7694 | HighExploited | 1.8% | 12 Aug, 2024 | |
Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 | CriticalExploited | 91.9% | 12 Aug, 2024 | |
RoundCube Webmail Cross-Site Scripting Vulnerability CVE-2024-42009 | CriticalExploited | 82.9% | 05 Aug, 2024 | |
Apache OFBiz Incorrect Authorization Vulnerability CVE-2024-38856 | CriticalExploited | 99.4% | 05 Aug, 2024 | |
Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CVE-2023-45249 | CriticalExploited | 53.3% | 24 Jul, 2024 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 | HighExploited | 74.2% | 16 Jul, 2024 | |
Palo Alto Networks Expedition Missing Authentication Vulnerability CVE-2024-5910 | CriticalExploited | 91.7% | 10 Jul, 2024 | |
ServiceNow Incomplete List of Disallowed Inputs Vulnerability CVE-2024-5217 | CriticalExploited | 99.6% | 10 Jul, 2024 | |
ServiceNow Improper Input Validation Vulnerability CVE-2024-4879 | CriticalExploited | 100.0% | 10 Jul, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-38112 | HighExploited | 84.2% | 09 Jul, 2024 | |
Microsoft SharePoint Deserialization Vulnerability CVE-2024-38094 | HighExploited | 50.9% | 09 Jul, 2024 | |
Microsoft Windows Hyper-V Privilege Escalation Vulnerability CVE-2024-38080 | HighExploited | 7.1% | 09 Jul, 2024 | |
Twilio Authy Information Disclosure Vulnerability CVE-2024-39891 | MediumExploited | 1.7% | 02 Jul, 2024 | |
Apache HTTP Server Improper Escaping of Output Vulnerability CVE-2024-38475 | CriticalExploited | 100.0% | 01 Jul, 2024 | |
Cisco NX-OS Command Injection Vulnerability CVE-2024-20399 | MediumExploited | 4.3% | 01 Jul, 2024 | |
OSGeo GeoServer GeoTools Eval Injection Vulnerability CVE-2024-36401 | CriticalExploited | 99.8% | 01 Jul, 2024 | |
Progress WhatsUp Gold Path Traversal Vulnerability CVE-2024-4885 | CriticalExploited | 99.3% | 25 Jun, 2024 | |
VMware ESXi Authentication Bypass Vulnerability CVE-2024-37085 | HighExploited | 26.8% | 25 Jun, 2024 | |
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CVE-2024-37079 | CriticalExploited | 22.4% | 18 Jun, 2024 | |
GeoVision Devices OS Command Injection Vulnerability CVE-2024-6047 | CriticalExploited | 10.1% | 17 Jun, 2024 | |
Android Pixel Privilege Escalation Vulnerability CVE-2024-32896 | HighExploited | 3.0% | 13 Jun, 2024 | |
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability BIT-magento-2024-34102, CVE-2024-34102, GHSA-m8cj-3v68-3cxj | CriticalExploited | 100.0% | 13 Jun, 2024 | Packagist magento/community-edition |
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability CVE-2024-35250 | HighExploited | 25.2% | 11 Jun, 2024 | |
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability CVE-2024-30088 | HighExploited | 68.2% | 11 Jun, 2024 | |
Android Kernel Remote Code Execution Vulnerability CVE-2024-36971 | HighExploited | 2.7% | 10 Jun, 2024 | |
PHP-CGI OS Command Injection Vulnerability CVE-2024-4577 | CriticalExploited | 100.0% | 09 Jun, 2024 | |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability CVE-2024-4610 | HighExploited | 0.8% | 07 Jun, 2024 | |
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2024-37383 | MediumExploited | 74.0% | 07 Jun, 2024 |