Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Exim Out-of-bounds Write Vulnerability CVE-2019-16928 | CriticalExploited | 41.6% | 27 Sep, 2019 | |
D-Link Multiple Routers Command Injection Vulnerability CVE-2019-16920 | CriticalExploited | 100.0% | 27 Sep, 2019 | |
vBulletin PHP Module Remote Code Execution Vulnerability CVE-2019-16759 | CriticalExploited | 99.7% | 24 Sep, 2019 | |
D-Link DNS-320 Remote Code Execution Vulnerability CVE-2019-16057 | CriticalExploited | 86.5% | 16 Sep, 2019 | |
SIMalliance Toolbox Browser Command Injection Vulnerability CVE-2019-16256 | CriticalExploited | 4.9% | 12 Sep, 2019 | |
Webmin Command Injection Vulnerability CVE-2019-15107 | CriticalExploited | 99.7% | 16 Aug, 2019 | |
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CVE-2019-0344 | CriticalExploited | 7.5% | 14 Aug, 2019 | |
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability CVE-2019-11581 | CriticalExploited | 84.6% | 09 Aug, 2019 | |
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability CVE-2019-11708 | CriticalExploited | 55.9% | 23 Jul, 2019 | |
Citrix SD-WAN and NetScaler SQL Injection Vulnerability CVE-2019-12989 | CriticalExploited | 95.0% | 16 Jul, 2019 | |
Nice Linear eMerge E3-Series OS Command Injection Vulnerability CVE-2019-7256 | CriticalExploited | 97.1% | 02 Jul, 2019 | |
Ubiquiti AirOS Command Injection Vulnerability CVE-2010-5330 | CriticalExploited | 40.2% | 11 Jun, 2019 | |
Exim Mail Transfer Agent (MTA) Improper Input Validation CVE-2019-10149 | CriticalExploited | 100.0% | 05 Jun, 2019 | |
Fortinet FortiOS SSL VPN Path Traversal Vulnerability CVE-2018-13379 | CriticalExploited | 100.0% | 04 Jun, 2019 | |
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability CVE-2019-11580 | CriticalExploited | 95.4% | 03 Jun, 2019 | |
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9874 | CriticalExploited | 83.7% | 31 May, 2019 | |
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CVE-2019-9670 | CriticalExploited | 100.0% | 29 May, 2019 | |
Schneider Electric U.motion Builder SQL Injection Vulnerability CVE-2018-7841 | CriticalExploited | 72.5% | 22 May, 2019 | |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability CVE-2019-11634 | CriticalExploited | 8.1% | 22 May, 2019 | |
Microsoft Remote Desktop Services Remote Code Execution Vulnerability CVE-2019-0708 | CriticalExploited | 100.0% | 16 May, 2019 | |
LG N1A1 NAS Remote Command Execution Vulnerability CVE-2018-14839 | CriticalExploited | 89.2% | 14 May, 2019 | |
WhatsApp VOIP Stack Buffer Overflow Vulnerability CVE-2019-3568 | CriticalExploited | 30.1% | 14 May, 2019 | |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability CVE-2019-11510 | CriticalExploited | 100.0% | 08 May, 2019 | |
Zyxel P660HN-T1A Routers Command Injection Vulnerability CVE-2017-18368 | CriticalExploited | 94.5% | 02 May, 2019 | |
Crestron Multiple Products Command Injection Vulnerability CVE-2019-3929 | CriticalExploited | 99.0% | 30 Apr, 2019 | |
Oracle WebLogic Server, Injection CVE-2019-2725 | CriticalExploited | 100.0% | 26 Apr, 2019 | |
Kentico Xperience Deserialization of Untrusted Data Vulnerability CVE-2019-10068 | CriticalExploited | 95.1% | 26 Mar, 2019 | |
Kibana Arbitrary Code Execution CVE-2019-7609 | CriticalExploited | 95.3% | 25 Mar, 2019 | |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability CVE-2019-3396 | CriticalExploited | 99.9% | 25 Mar, 2019 | |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability CVE-2019-7238 | CriticalExploited | 76.6% | 21 Mar, 2019 | |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability CVE-2019-1003030 | CriticalExploited | 97.1% | 08 Mar, 2019 | |
Jenkins Script Security Plugin Sandbox Bypass Vulnerability CVE-2019-1003029 | CriticalExploited | 74.4% | 08 Mar, 2019 | |
Microsoft SharePoint Remote Code Execution Vulnerability CVE-2019-0604 | CriticalExploited | 99.9% | 05 Mar, 2019 | |
Kaseya VSA Remote Code Execution Vulnerability CVE-2018-20753 | CriticalExploited | 29.6% | 05 Feb, 2019 | |
Kaseya VSA SQL Injection Vulnerability CVE-2017-18362 | CriticalExploited | 86.8% | 05 Feb, 2019 | |
GIGABYTE Multiple Products Privilege Escalation Vulnerability CVE-2018-19323 | CriticalExploited | 8.4% | 21 Dec, 2018 | |
ThinkPHP "noneCms" Remote Code Execution Vulnerability CVE-2018-20062 | CriticalExploited | 99.5% | 11 Dec, 2018 | |
Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability CVE-2018-1000861 | CriticalExploited | 98.3% | 10 Dec, 2018 | |
Paessler PRTG Network Monitor Local File Inclusion Vulnerability CVE-2018-19410 | CriticalExploited | 97.9% | 21 Nov, 2018 | |
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability CVE-2018-14667 | CriticalExploited | 74.2% | 06 Nov, 2018 | |
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CVE-2018-14558 | CriticalExploited | 8.5% | 30 Oct, 2018 | |
Adobe ColdFusion Unrestricted File Upload Vulnerability CVE-2018-15961 | CriticalExploited | 100.0% | 25 Sep, 2018 | |
NUUO NVRmini Devices OS Command Injection Vulnerability CVE-2018-14933 | CriticalExploited | 94.8% | 04 Aug, 2018 | |
MikroTik Router OS Directory Traversal Vulnerability CVE-2018-14847 | CriticalExploited | 96.0% | 02 Aug, 2018 | |
Quest KACE System Management Appliance Remote Command Execution Vulnerability CVE-2018-11138 | CriticalExploited | 91.7% | 31 May, 2018 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2018-4939 | CriticalExploited | 61.8% | 19 May, 2018 | |
Dasan GPON Routers Command Injection Vulnerability CVE-2018-10562 | CriticalExploited | 99.9% | 04 May, 2018 | |
Dasan GPON Routers Authentication Bypass Vulnerability CVE-2018-10561 | CriticalExploited | 92.8% | 04 May, 2018 | |
Drupal Core Remote Code Execution Vulnerability CVE-2018-7602, DRUPAL-CORE-2018-004, GHSA-297x-j9pm-xjgg | CriticalExploited | 99.2% | 25 Apr, 2018 | Packagist drupal/core Packagist drupal/drupal |
Oracle WebLogic Server Unspecified Vulnerability CVE-2018-2628 | CriticalExploited | 100.0% | 19 Apr, 2018 |