Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
VMware Tanzu Spring Data Commons Property Binder Vulnerability CVE-2018-1273 | CriticalExploited | 97.0% | 11 Apr, 2018 | |
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability CVE-2018-0171 | CriticalExploited | 99.5% | 28 Mar, 2018 | |
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability CVE-2018-0151 | CriticalExploited | 14.2% | 28 Mar, 2018 | |
Drupal Core Remote Code Execution Vulnerability CVE-2018-7600, DRUPAL-CORE-2018-002, GHSA-7fh9-933g-885p | CriticalExploited | 100.0% | 28 Mar, 2018 | Packagist drupal/core Packagist drupal/drupal |
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CVE-2018-7445 | CriticalExploited | 65.8% | 19 Mar, 2018 | |
Cisco Secure Access Control System Java Deserialization Vulnerability CVE-2018-0147 | CriticalExploited | 18.2% | 08 Mar, 2018 | |
D-Link Multiple Routers OS Command Injection Vulnerability CVE-2018-6530 | CriticalExploited | 96.7% | 06 Mar, 2018 | |
Exim Buffer Overflow Vulnerability CVE-2018-6789 | CriticalExploited | 82.1% | 08 Feb, 2018 | |
Cisco VPN Routers Remote Code Execution Vulnerability CVE-2018-0125 | CriticalExploited | 55.2% | 08 Feb, 2018 | |
Jenkins Remote Code Execution Vulnerability CVE-2017-1000353 | CriticalExploited | 99.7% | 29 Jan, 2018 | |
Primetek Primefaces Remote Code Execution Vulnerability CVE-2017-1000486 | CriticalExploited | 94.1% | 03 Jan, 2018 | |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CVE-2017-15944 | CriticalExploited | 98.3% | 11 Dec, 2017 | |
Red Hat JBoss Application Server Remote Code Execution Vulnerability CVE-2017-12149 | CriticalExploited | 90.7% | 04 Oct, 2017 | |
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability CVE-2017-12240 | CriticalExploited | 13.8% | 29 Sep, 2017 | |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability CVE-2015-1187 | CriticalExploited | 82.9% | 21 Sep, 2017 | |
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CVE-2017-11357 | CriticalExploited | 77.7% | 23 Aug, 2017 | |
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability CVE-2017-11317 | CriticalExploited | 84.2% | 23 Aug, 2017 | |
Citrix Multiple Products Remote Code Execution Vulnerability CVE-2017-6316 | CriticalExploited | 73.0% | 20 Jul, 2017 | |
Apache Struts 1 Improper Input Validation Vulnerability CVE-2017-9791 | CriticalExploited | 98.9% | 10 Jul, 2017 | |
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability CVE-2017-9248 | CriticalExploited | 75.1% | 03 Jul, 2017 | |
Code Injection in PHPUnit CVE-2017-9841, GHSA-r7c9-c69m-rph8 | CriticalExploited | 100.0% | 27 Jun, 2017 | Packagist phpunit/phpunit |
Microsoft Windows Search Remote Code Execution Vulnerability CVE-2017-8543 | CriticalExploited | 74.4% | 15 Jun, 2017 | |
SKYSEA Client View Improper Authentication Vulnerability CVE-2016-7836 | CriticalExploited | 19.2% | 09 Jun, 2017 | |
Samba Remote Code Execution Vulnerability CVE-2017-7494 | CriticalExploited | 99.4% | 30 May, 2017 | |
NETGEAR Multiple Devices Buffer Overflow Vulnerability CVE-2017-6862 | CriticalExploited | 45.7% | 26 May, 2017 | |
Hikvision Multiple Products Improper Authentication Vulnerability CVE-2017-7921 | CriticalExploited | 100.0% | 06 May, 2017 | |
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability CVE-2017-5689 | CriticalExploited | 92.2% | 02 May, 2017 | |
Adobe ColdFusion Deserialization Vulnerability CVE-2017-3066 | CriticalExploited | 90.6% | 27 Apr, 2017 | |
NETGEAR Multiple WAP Devices Command Injection Vulnerability CVE-2016-1555 | CriticalExploited | 98.3% | 21 Apr, 2017 | |
Apache Tomcat Remote Code Execution Vulnerability CVE-2016-8735 | CriticalExploited | 90.3% | 06 Apr, 2017 | |
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability CVE-2014-3931 | CriticalExploited | 29.0% | 31 Mar, 2017 | |
Microsoft Windows Server Buffer Overflow Vulnerability CVE-2017-7269 | CriticalExploited | 99.8% | 27 Mar, 2017 | |
Cisco IOS and IOS XE Remote Code Execution Vulnerability CVE-2017-3881 | CriticalExploited | 99.0% | 17 Mar, 2017 | |
Apache Struts Remote Code Execution Vulnerability CVE-2017-5638 | CriticalExploited | 100.0% | 11 Mar, 2017 | |
NETGEAR DGN2200 Remote Code Execution Vulnerability CVE-2017-6077 | CriticalExploited | 68.7% | 22 Feb, 2017 | |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 | CriticalExploited | 83.3% | 30 Jan, 2017 | |
Remote code execution in PHPMailer CVE-2016-10033, GHSA-5f37-gxvh-23v6 | CriticalExploited | 99.7% | 30 Dec, 2016 | Packagist phpmailer/phpmailer |
Adobe Flash Player Remote Code Execution Vulnerability CVE-2016-4171 | CriticalExploited | 20.1% | 16 Jun, 2016 | |
Apache Shiro Code Execution Vulnerability CVE-2016-4437 | CriticalExploited | 93.0% | 07 Jun, 2016 | |
Apache ActiveMQ Improper Input Validation Vulnerability CVE-2016-3088 | CriticalExploited | 98.5% | 01 Jun, 2016 | |
SAP NetWeaver Remote Code Execution Vulnerability CVE-2010-5326 | CriticalExploited | 17.8% | 13 May, 2016 | |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2016-4117 | CriticalExploited | 94.3% | 11 May, 2016 | |
Oracle Java SE and JRockit Unspecified Vulnerability CVE-2016-3427 | CriticalExploited | 92.3% | 21 Apr, 2016 | |
Adobe Flash Player Arbitrary Code Execution Vulnerability CVE-2016-1019 | CriticalExploited | 22.3% | 07 Apr, 2016 | |
SAP NetWeaver SQL Injection Vulnerability CVE-2016-2386 | CriticalExploited | 71.5% | 16 Feb, 2016 | |
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 | CriticalExploited | 97.8% | 02 Jan, 2016 | |
Juniper ScreenOS Improper Authentication Vulnerability CVE-2015-7755 | CriticalExploited | 61.1% | 19 Dec, 2015 | |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability CVE-2015-4852 | CriticalExploited | 95.0% | 18 Nov, 2015 | |
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability CVE-2015-2590 | CriticalExploited | 25.5% | 16 Jul, 2015 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2015-5123 | CriticalExploited | 18.8% | 14 Jul, 2015 |