Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Nagios XI OS Command Injection CVE-2021-25296 | HighExploited | 71.9% | 15 Feb, 2021 | |
SSRF in adminer CVE-2021-21311, GHSA-x5r2-hj5c-8jx6 | HighExploited | 98.5% | 11 Feb, 2021 | Packagist vrana/adminer |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability CVE-2021-21017 | HighExploited | 86.3% | 11 Feb, 2021 | |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability CVE-2021-23874 | HighExploited | 1.0% | 10 Feb, 2021 | |
Google Chromium V8 Heap Buffer Overflow Vulnerability CVE-2021-21148 | HighExploited | 20.0% | 09 Feb, 2021 | |
Sudo Heap-Based Buffer Overflow Vulnerability CVE-2021-3156 | HighExploited | 100.0% | 26 Jan, 2021 | |
Directory Traversal in Archive_Tar BIT-drupal-2020-36193, CVE-2020-36193, GHSA-rpw6-9xfx-jvcx | HighExploited | 70.6% | 18 Jan, 2021 | Packagist pear/archive_tar |
Google Chrome Media Use-After-Free Vulnerability CVE-2020-6572 | HighExploited | 10.6% | 14 Jan, 2021 | |
Microsoft Defender Remote Code Execution Vulnerability CVE-2021-1647 | HighExploited | 39.7% | 12 Jan, 2021 | |
Google Chromium V8 Incorrect Implementation Vulnerabililty CVE-2020-16013 | HighExploited | 2.8% | 08 Jan, 2021 | |
Apache Flink Improper Access Control Vulnerability CVE-2020-17519 | HighExploited | 97.8% | 05 Jan, 2021 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17144 | HighExploited | 36.5% | 10 Dec, 2020 | |
Apple Multiple Products Type Confusion Vulnerability CVE-2020-27932 | HighExploited | 10.3% | 08 Dec, 2020 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-27930 | HighExploited | 22.0% | 08 Dec, 2020 | |
Multiple vulnerabilities through filename manipulation in Archive_Tar BIT-drupal-2020-28948, BIT-drupal-2020-28949, CVE-2020-28948, CVE-2020-28949, DRUPAL-CORE-2020-013, GHSA-75c5-f4gw-38r9, GHSA-jh5x-hfhg-78jq | HighExploited | 84.6% | 19 Nov, 2020 | Packagist drupal/core Packagist pear/archive_tar |
Drupal core Unrestricted Upload of File with Dangerous Type BIT-drupal-2020-13671, CVE-2020-13671, DRUPAL-CORE-2020-012, GHSA-68jc-v27h-vhmw | HighExploited | 36.2% | 18 Nov, 2020 | Packagist drupal/core Packagist drupal/drupal |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-17087 | HighExploited | 5.4% | 11 Nov, 2020 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2020-16009 | HighExploited | 48.3% | 03 Nov, 2020 | |
Ivanti Pulse Connect Secure Code Execution Vulnerability CVE-2020-8260 | HighExploited | 96.5% | 28 Oct, 2020 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2020-14883 | HighExploited | 97.7% | 21 Oct, 2020 | |
Oracle Business Intelligence Enterprise Edition Path Transversal CVE-2020-14864 | HighExploited | 97.2% | 21 Oct, 2020 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-9907 | HighExploited | 3.2% | 16 Oct, 2020 | |
Ivanti Pulse Connect Secure Code Execution Vulnerability CVE-2020-8243 | HighExploited | 90.8% | 30 Sep, 2020 | |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability CVE-2020-3569 | HighExploited | 3.3% | 23 Sep, 2020 | |
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CVE-2020-25079 | HighExploited | 54.0% | 02 Sep, 2020 | |
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CVE-2020-25078 | HighExploited | 97.5% | 02 Sep, 2020 | |
Trend Micro Multiple Products Improper Access Control Vulnerability CVE-2020-24557 | HighExploited | 2.7% | 01 Sep, 2020 | |
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2020-24363 | HighExploited | 22.2% | 31 Aug, 2020 | |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability CVE-2020-3566 | HighExploited | 3.7% | 29 Aug, 2020 | |
Adobe Acrobat Use-After-Free Vulnerability CVE-2020-9715 | HighExploited | 33.5% | 19 Aug, 2020 | |
Microsoft Windows Spoofing Vulnerability CVE-2020-1464 | HighExploited | 38.9% | 17 Aug, 2020 | |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2020-1380 | HighExploited | 24.2% | 17 Aug, 2020 | |
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability CVE-2020-3433 | HighExploited | 10.0% | 17 Aug, 2020 | |
Pulse Connect Secure Code Injection Vulnerability CVE-2020-8218 | HighExploited | 32.3% | 30 Jul, 2020 | |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability CVE-2020-3452 | HighExploited | 100.0% | 22 Jul, 2020 | |
Remote code execution (RCE) in Apache Airflow BIT-airflow-2020-11978, CVE-2020-11978, GHSA-rvmq-4x66-q7j3, PYSEC-2020-14 | HighExploited | 99.2% | 17 Jul, 2020 | PyPI apache-airflow |
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability CVE-2020-1147 | HighExploited | 94.0% | 14 Jul, 2020 | |
D-Link DIR-610 Devices Remote Command Execution CVE-2020-9377 | HighExploited | 21.9% | 09 Jul, 2020 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-0986 | HighExploited | 16.4% | 09 Jun, 2020 | |
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability CVE-2020-9818 | HighExploited | 2.3% | 09 Jun, 2020 | |
Apple Multiple Products Code Execution Vulnerability CVE-2020-9859 | HighExploited | 0.8% | 05 Jun, 2020 | |
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability CVE-2020-5410 | HighExploited | 95.6% | 02 Jun, 2020 | |
Pi-Hole AdminLTE Remote Code Execution Vulnerability CVE-2020-8816 | HighExploited | 78.3% | 29 May, 2020 | |
Apache Kylin OS Command Injection Vulnerability CVE-2020-1956 | HighExploited | 97.4% | 22 May, 2020 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2020-1054 | HighExploited | 53.9% | 21 May, 2020 | |
Plex Media Server Remote Code Execution Vulnerability CVE-2020-5741 | HighExploited | 72.9% | 08 May, 2020 | |
Cisco ASA and FTD Information Disclosure Vulnerability CVE-2020-3259 | HighExploited | 71.5% | 06 May, 2020 | |
SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103 | HighExploited | 86.2% | 30 Apr, 2020 | PyPI salt |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6820 | HighExploited | 7.1% | 24 Apr, 2020 | |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6819 | HighExploited | 3.0% | 24 Apr, 2020 |