Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Android Pixel Information Disclosure Vulnerability CVE-2023-21237 | MediumExploited | 0.3% | 28 Jun, 2023 | |
Apple Multiple Products WebKit Type Confusion Vulnerability CVE-2023-32439 | HighExploited | 24.0% | 23 Jun, 2023 | |
Apple Multiple Products WebKit Memory Corruption Vulnerability CVE-2023-32435 | HighExploited | 23.0% | 23 Jun, 2023 | |
Apple Multiple Products Integer Overflow Vulnerability CVE-2023-32434 | HighExploited | 51.5% | 23 Jun, 2023 | |
Apple Multiple Products WebKit Sandbox Escape Vulnerability CVE-2023-32409 | HighExploited | 16.5% | 23 Jun, 2023 | |
Apple Multiple Products WebKit Use-After-Free Vulnerability CVE-2023-32373 | HighExploited | 12.2% | 23 Jun, 2023 | |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability CVE-2023-28204 | MediumExploited | 14.3% | 23 Jun, 2023 | |
PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability CVE-2023-2533 | HighExploited | 28.8% | 20 Jun, 2023 | |
Zyxel Multiple NAS Devices Command Injection Vulnerability CVE-2023-27992 | CriticalExploited | 82.3% | 19 Jun, 2023 | |
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability CVE-2023-29360 | HighExploited | 21.6% | 14 Jun, 2023 | |
Microsoft SharePoint Server Privilege Escalation Vulnerability CVE-2023-29357 | CriticalExploited | 100.0% | 14 Jun, 2023 | |
VMware Tools Authentication Bypass Vulnerability CVE-2023-20867 | LowExploited | 13.6% | 13 Jun, 2023 | |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability CVE-2023-27997 | CriticalExploited | 85.7% | 13 Jun, 2023 | |
Vmware Aria Operations for Networks Command Injection Vulnerability CVE-2023-20887 | CriticalExploited | 98.3% | 07 Jun, 2023 | |
TP-Link Multiple Routers Command Injection Vulnerability CVE-2023-33538 | HighExploited | 41.6% | 07 Jun, 2023 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2023-3079 | HighExploited | 37.9% | 05 Jun, 2023 | |
Progress MOVEit Transfer SQL Injection Vulnerability CVE-2023-34362 | CriticalExploited | 99.9% | 02 Jun, 2023 | |
Ignite Realtime Openfire Path Traversal Vulnerability CVE-2023-32315 | HighExploited | 100.0% | 26 May, 2023 | |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability CVE-2023-2868 | CriticalExploited | 86.8% | 24 May, 2023 | |
Apache RocketMQ Command Execution Vulnerability CVE-2023-33246 | CriticalExploited | 96.6% | 24 May, 2023 | |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability CVE-2023-33010 | CriticalExploited | 29.0% | 24 May, 2023 | |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability CVE-2023-33009 | CriticalExploited | 28.1% | 24 May, 2023 | |
Microsoft Win32K Privilege Escalation Vulnerability CVE-2023-29336 | HighExploited | 41.2% | 09 May, 2023 | |
Microsoft SharePoint Server Code Injection Vulnerability CVE-2023-24955 | HighExploited | 85.0% | 09 May, 2023 | |
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability CVE-2023-21492 | MediumExploited | 2.6% | 04 May, 2023 | |
Service Location Protocol (SLP) Denial-of-Service Vulnerability CVE-2023-29552 | HighExploited | 64.0% | 25 Apr, 2023 | |
Zyxel Multiple Firewalls OS Command Injection Vulnerability CVE-2023-28771 | CriticalExploited | 99.3% | 25 Apr, 2023 | |
Apache superset missing check for default SECRET_KEY BIT-superset-2023-27524, CVE-2023-27524, GHSA-5cx2-vq3h-x52c, PYSEC-2026-1161 | CriticalExploited | 98.1% | 24 Apr, 2023 | PyPI apache-superset |
PaperCut NG/MF Improper Authentication Vulnerability CVE-2023-27351 | HighExploited | 78.1% | 20 Apr, 2023 | |
PaperCut MF/NG Improper Access Control Vulnerability CVE-2023-27350 | CriticalExploited | 100.0% | 20 Apr, 2023 | |
Strapi leaking sensitive user information by filtering on private fields CVE-2023-22894, GHSA-jjqf-j4w7-92w8 | HighExploited | 4.1% | 19 Apr, 2023 | npm @strapi/strapi |
Google Chrome Skia Integer Overflow Vulnerability CVE-2023-2136 | CriticalExploited | 5.8% | 19 Apr, 2023 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2023-2033 | HighExploited | 40.8% | 14 Apr, 2023 | |
Cisco Small Business RV Series Routers Command Injection Vulnerability CVE-2023-20118 | HighExploited | 54.1% | 13 Apr, 2023 | |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CVE-2023-28252 | HighExploited | 48.9% | 11 Apr, 2023 | |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability CVE-2023-28229 | HighExploited | 1.7% | 11 Apr, 2023 | |
Novi Survey Insecure Deserialization Vulnerability CVE-2023-29492 | CriticalExploited | 2.7% | 11 Apr, 2023 | |
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability CVE-2023-28206 | HighExploited | 23.2% | 10 Apr, 2023 | |
Apple Multiple Products WebKit Use-After-Free Vulnerability CVE-2023-28205 | HighExploited | 27.1% | 10 Apr, 2023 | |
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability CVE-2023-26083 | LowExploited | 1.2% | 06 Apr, 2023 | |
Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 | CriticalExploited | 100.0% | 04 Apr, 2023 | |
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CVE-2022-43939 | CriticalExploited | 92.3% | 03 Apr, 2023 | |
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability CVE-2022-43769 | HighExploited | 97.7% | 03 Apr, 2023 | |
Android Framework Privilege Escalation Vulnerability CVE-2023-20963 | HighExploited | 1.5% | 24 Mar, 2023 | |
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CVE-2022-42948 | CriticalExploited | 2.7% | 24 Mar, 2023 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-26360 | HighExploited | 97.3% | 23 Mar, 2023 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-26359 | CriticalExploited | 17.0% | 23 Mar, 2023 | |
MinIO Security Feature Bypass Vulnerability CVE-2023-28434 | HighExploited | 7.9% | 22 Mar, 2023 | |
MinIO Information Disclosure Vulnerability CVE-2023-28432 | HighExploited | 84.0% | 22 Mar, 2023 | |
Linux Kernel Improper Ownership Management Vulnerability CVE-2023-0386 | HighExploited | 7.9% | 22 Mar, 2023 |