Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Fortinet Multiple Products Authentication Bypass Vulnerability CVE-2022-40684 | CriticalExploited | 100.0% | 18 Oct, 2022 | |
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability CVE-2022-41033 | HighExploited | 1.9% | 11 Oct, 2022 | |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability CVE-2022-38028 | HighExploited | 14.9% | 11 Oct, 2022 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2022-41082 | HighExploited | 100.0% | 03 Oct, 2022 | |
Microsoft Exchange Server Server-Side Request Forgery Vulnerability CVE-2022-41040 | HighExploited | 100.0% | 03 Oct, 2022 | |
Cisco SD-WAN Path Traversal Vulnerability CVE-2022-20775 | HighExploited | 12.5% | 30 Sep, 2022 | |
Google Chromium Mojo Insufficient Data Validation Vulnerability CVE-2022-3075 | CriticalExploited | 5.8% | 26 Sep, 2022 | |
Google Chromium Network Service Use-After-Free Vulnerability CVE-2022-3038 | HighExploited | 24.9% | 26 Sep, 2022 | |
Google Chromium Intents Insufficient Input Validation Vulnerability CVE-2022-2856 | MediumExploited | 4.6% | 26 Sep, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CVE-2022-41352 | CriticalExploited | 95.5% | 26 Sep, 2022 | |
Sophos Firewall Code Injection Vulnerability CVE-2022-3236 | CriticalExploited | 98.9% | 23 Sep, 2022 | |
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability CVE-2022-39197 | MediumExploited | 47.9% | 22 Sep, 2022 | |
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability CVE-2022-32917 | HighExploited | 5.6% | 20 Sep, 2022 | |
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 | HighExploited | 3.4% | 19 Sep, 2022 | |
Teclib GLPI Remote Code Execution Vulnerability CVE-2022-35914 | CriticalExploited | 99.9% | 19 Sep, 2022 | |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability CVE-2022-37969 | HighExploited | 28.5% | 13 Sep, 2022 | |
QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 | CriticalExploited | 87.9% | 08 Sep, 2022 | |
D-Link Routers Buffer Overflow Vulnerability CVE-2022-37055 | CriticalExploited | 55.5% | 28 Aug, 2022 | |
ZK Framework AuUploader Unspecified Vulnerability CVE-2022-36537 | HighExploited | 95.4% | 26 Aug, 2022 | |
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability CVE-2022-36804 | HighExploited | 99.1% | 25 Aug, 2022 | |
Apple iOS and macOS Out-of-Bounds Write Vulnerability CVE-2022-32894 | HighExploited | 3.3% | 24 Aug, 2022 | |
Apple iOS and macOS Out-of-Bounds Write Vulnerability CVE-2022-32893 | HighExploited | 9.9% | 24 Aug, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CVE-2022-37042 | CriticalExploited | 92.1% | 12 Aug, 2022 | |
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability CVE-2022-0028 | HighExploited | 2.7% | 10 Aug, 2022 | |
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CVE-2022-34713 | HighExploited | 67.8% | 09 Aug, 2022 | |
WebRTC Heap Buffer Overflow Vulnerability CVE-2022-2294 | HighExploited | 70.8% | 28 Jul, 2022 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2022-1364 | HighExploited | 13.9% | 26 Jul, 2022 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2022-1096 | HighExploited | 24.7% | 23 Jul, 2022 | |
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CVE-2022-26138 | CriticalExploited | 98.2% | 20 Jul, 2022 | |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-35405 | CriticalExploited | 99.9% | 19 Jul, 2022 | |
Apache Spark UI can allow impersonation if ACLs enabled BIT-spark-2022-33891, CVE-2022-33891, GHSA-4x9r-j582-cgr8, PYSEC-2022-236 | HighExploited | 93.2% | 18 Jul, 2022 | Maven org.apache.spark:spark-parent_2.12 PyPI pyspark |
dotCMS Unrestricted Upload of File Vulnerability CVE-2022-26352 | CriticalExploited | 91.2% | 17 Jul, 2022 | |
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability CVE-2022-22047 | HighExploited | 18.8% | 12 Jul, 2022 | |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2022-22071 | HighExploited | 0.4% | 14 Jun, 2022 | |
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CVE-2022-26134 | CriticalExploited | 100.0% | 03 Jun, 2022 | |
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CVE-2022-30190 | HighExploited | 99.2% | 01 Jun, 2022 | |
Apple macOS Out-of-Bounds Write Vulnerability CVE-2022-22675 | HighExploited | 12.5% | 26 May, 2022 | |
Apple macOS Out-of-Bounds Read Vulnerability CVE-2022-22674 | MediumExploited | 1.1% | 26 May, 2022 | |
Cisco IOS XR Open Port Vulnerability CVE-2022-20821 | MediumExploited | 11.5% | 26 May, 2022 | |
SolarView Compact Command Injection Vulnerability CVE-2022-29303 | CriticalExploited | 98.0% | 12 May, 2022 | |
Zyxel Multiple Firewalls OS Command Injection Vulnerability CVE-2022-30525 | CriticalExploited | 99.9% | 12 May, 2022 | |
Microsoft Windows LSA Spoofing Vulnerability CVE-2022-26925 | MediumExploited | 10.5% | 10 May, 2022 | |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability CVE-2022-26923 | HighExploited | 83.5% | 10 May, 2022 | |
RARLAB UnRAR Directory Traversal Vulnerability CVE-2022-30333 | HighExploited | 99.2% | 09 May, 2022 | |
F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 | CriticalExploited | 100.0% | 05 May, 2022 | |
Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-24706 | CriticalExploited | 92.5% | 26 Apr, 2022 | |
Mitel MiVoice Connect Data Validation Vulnerability CVE-2022-29499 | CriticalExploited | 55.2% | 26 Apr, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2022-27926 | MediumExploited | 17.6% | 21 Apr, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CVE-2022-27925 | HighExploited | 98.7% | 21 Apr, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability CVE-2022-27924 | HighExploited | 93.9% | 21 Apr, 2022 |