Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SolarWinds Serv-U Path Traversal Vulnerability CVE-2024-28995 | HighExploited | 99.6% | 06 Jun, 2024 | |
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability CVE-2024-29824 | HighExploited | 99.9% | 31 May, 2024 | |
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2024-23692 | CriticalExploited | 99.5% | 31 May, 2024 | |
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CVE-2024-4358 | CriticalExploited | 97.5% | 29 May, 2024 | |
Check Point Quantum Security Gateways Information Disclosure Vulnerability CVE-2024-24919 | HighExploited | 100.0% | 28 May, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-5274 | CriticalExploited | 7.7% | 28 May, 2024 | |
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability CVE-2024-4978 | HighExploited | 26.9% | 23 May, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-4947 | CriticalExploited | 15.2% | 15 May, 2024 | |
Microsoft DWM Core Library Privilege Escalation Vulnerability CVE-2024-30051 | HighExploited | 5.7% | 14 May, 2024 | |
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2024-30040 | HighExploited | 3.9% | 14 May, 2024 | |
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability CVE-2024-4761 | HighExploited | 11.0% | 14 May, 2024 | |
Google Chromium Visuals Use-After-Free Vulnerability CVE-2024-4671 | CriticalExploited | 8.3% | 14 May, 2024 | |
Apache OFBiz Path Traversal Vulnerability CVE-2024-32113 | CriticalExploited | 99.9% | 08 May, 2024 | |
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CVE-2023-50224 | MediumExploited | 20.0% | 03 May, 2024 | |
Cisco ASA and FTD Privilege Escalation Vulnerability CVE-2024-20359 | MediumExploited | 18.8% | 24 Apr, 2024 | |
Cisco ASA and FTD Denial of Service Vulnerability CVE-2024-20353 | HighExploited | 69.8% | 24 Apr, 2024 | |
CrushFTP VFS Sandbox Escape Vulnerability CVE-2024-4040 | CriticalExploited | 99.5% | 22 Apr, 2024 | |
Apache HugeGraph-Server Improper Access Control Vulnerability CVE-2024-27348 | CriticalExploited | 99.2% | 22 Apr, 2024 | |
Palo Alto Networks PAN-OS Command Injection Vulnerability CVE-2024-3400 | CriticalExploited | 100.0% | 12 Apr, 2024 | |
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 | HighExploited | 45.2% | 09 Apr, 2024 | |
Android Pixel Privilege Escalation Vulnerability CVE-2024-29748 | HighExploited | 0.7% | 05 Apr, 2024 | |
Android Pixel Information Disclosure Vulnerability CVE-2024-29745 | MediumExploited | 0.5% | 05 Apr, 2024 | |
D-Link Multiple NAS Devices Command Injection Vulnerability CVE-2024-3273 | CriticalExploited | 100.0% | 04 Apr, 2024 | |
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability CVE-2024-3272 | CriticalExploited | 98.1% | 04 Apr, 2024 | |
Microsoft .NET Framework Information Disclosure Vulnerability CVE-2024-29059 | HighExploited | 98.6% | 23 Mar, 2024 | |
Adobe ColdFusion Improper Access Control Vulnerability CVE-2024-20767 | HighExploited | 98.5% | 18 Mar, 2024 | |
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability CVE-2024-26169 | HighExploited | 4.0% | 12 Mar, 2024 | |
Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2023-48788 | CriticalExploited | 98.4% | 12 Mar, 2024 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2024-23296 | HighExploited | 1.4% | 05 Mar, 2024 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2024-23225 | HighExploited | 1.5% | 05 Mar, 2024 | |
JetBrains TeamCity Relative Path Traversal Vulnerability CVE-2024-27199 | HighExploited | 100.0% | 04 Mar, 2024 | |
JetBrains TeamCity Authentication Bypass Vulnerability CVE-2024-27198 | CriticalExploited | 99.9% | 04 Mar, 2024 | |
Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-1212 | CriticalExploited | 95.4% | 21 Feb, 2024 | |
ConnectWise ScreenConnect Authentication Bypass Vulnerability CVE-2024-1709 | CriticalExploited | 100.0% | 21 Feb, 2024 | |
ConnectWise ScreenConnect Path Traversal Vulnerability CVE-2024-1708 | HighExploited | 95.4% | 21 Feb, 2024 | |
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability CVE-2024-20953 | HighExploited | 3.9% | 17 Feb, 2024 | |
Fortinet Multiple Products Format String Vulnerability CVE-2024-23113 | CriticalExploited | 61.7% | 15 Feb, 2024 | |
Microsoft Outlook Improper Input Validation Vulnerability CVE-2024-21413 | CriticalExploited | 94.7% | 13 Feb, 2024 | |
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability CVE-2024-21412 | HighExploited | 99.4% | 13 Feb, 2024 | |
Microsoft Exchange Server Privilege Escalation Vulnerability CVE-2024-21410 | CriticalExploited | 12.7% | 13 Feb, 2024 | |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-21351 | HighExploited | 27.8% | 13 Feb, 2024 | |
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CVE-2024-21338 | HighExploited | 59.8% | 13 Feb, 2024 | |
Fortinet FortiOS Out-of-Bound Write Vulnerability CVE-2024-21762 | CriticalExploited | 84.6% | 09 Feb, 2024 | |
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability CVE-2024-21893 | HighExploited | 100.0% | 31 Jan, 2024 | |
Linux Kernel Use-After-Free Vulnerability CVE-2024-1086 | HighExploited | 28.1% | 31 Jan, 2024 | |
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CVE-2024-23897 | CriticalExploited | 100.0% | 24 Jan, 2024 | |
Apple Multiple Products WebKit Type Confusion Vulnerability CVE-2024-23222 | HighExploited | 10.6% | 23 Jan, 2024 | |
D-Link DIR-859 Router Path Traversal Vulnerability CVE-2024-0769 | CriticalExploited | 82.7% | 21 Jan, 2024 | |
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CVE-2023-6549 | HighExploited | 57.6% | 17 Jan, 2024 | |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CVE-2023-6548 | HighExploited | 3.2% | 17 Jan, 2024 |