Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Citrix Session Recording Improper Privilege Management Vulnerability CVE-2024-8068 | MediumExploited | 3.5% | 12 Nov, 2024 | |
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability CVE-2024-43451 | MediumExploited | 84.3% | 12 Nov, 2024 | |
Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-20481 | MediumExploited | 15.9% | 23 Oct, 2024 | |
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability CVE-2024-38217 | MediumExploited | 10.0% | 10 Sep, 2024 | |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38213 | MediumExploited | 13.6% | 13 Aug, 2024 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2024-27443 | MediumExploited | 24.6% | 12 Aug, 2024 | |
Twilio Authy Information Disclosure Vulnerability CVE-2024-39891 | MediumExploited | 1.7% | 02 Jul, 2024 | |
Cisco NX-OS Command Injection Vulnerability CVE-2024-20399 | MediumExploited | 4.3% | 01 Jul, 2024 | |
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2024-37383 | MediumExploited | 74.0% | 07 Jun, 2024 | |
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CVE-2023-50224 | MediumExploited | 20.0% | 03 May, 2024 | |
Cisco ASA and FTD Privilege Escalation Vulnerability CVE-2024-20359 | MediumExploited | 18.8% | 24 Apr, 2024 | |
Android Pixel Information Disclosure Vulnerability CVE-2024-29745 | MediumExploited | 0.5% | 05 Apr, 2024 | |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability CVE-2023-42916 | MediumExploited | 17.8% | 30 Nov, 2023 | |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability CVE-2023-5631 | MediumExploited | 76.3% | 18 Oct, 2023 | |
Microsoft Skype for Business Privilege Escalation Vulnerability CVE-2023-41763 | MediumExploited | 90.5% | 10 Oct, 2023 | |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CVE-2023-36584 | MediumExploited | 3.3% | 10 Oct, 2023 | |
Microsoft WordPad Information Disclosure Vulnerability CVE-2023-36563 | MediumExploited | 20.3% | 10 Oct, 2023 | |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability CVE-2023-4211 | MediumExploited | 1.1% | 01 Oct, 2023 | |
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability CVE-2023-20109 | MediumExploited | 2.5% | 27 Sep, 2023 | |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36851 | MediumExploited | 1.1% | 27 Sep, 2023 | |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability CVE-2023-43770 | MediumExploited | 63.7% | 22 Sep, 2023 | |
Apple Multiple Products Improper Certificate Validation Vulnerability CVE-2023-41991 | MediumExploited | 13.4% | 21 Sep, 2023 | |
Microsoft Word Information Disclosure Vulnerability CVE-2023-36761 | MediumExploited | 19.6% | 12 Sep, 2023 | |
Qlik Sense Path Traversal Vulnerability CVE-2023-41266 | MediumExploited | 84.8% | 29 Aug, 2023 | |
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36847 | MediumExploited | 83.5% | 17 Aug, 2023 | |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36846 | MediumExploited | 93.5% | 17 Aug, 2023 | |
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability CVE-2023-36844 | MediumExploited | 90.0% | 17 Aug, 2023 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2023-37580 | MediumExploited | 49.1% | 31 Jul, 2023 | |
Apple Multiple Products Kernel Unspecified Vulnerability CVE-2023-38606 | MediumExploited | 2.9% | 27 Jul, 2023 | |
Android Pixel Information Disclosure Vulnerability CVE-2023-21237 | MediumExploited | 0.3% | 28 Jun, 2023 | |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability CVE-2023-28204 | MediumExploited | 14.3% | 23 Jun, 2023 | |
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability CVE-2023-21492 | MediumExploited | 2.6% | 04 May, 2023 | |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2023-24880 | MediumExploited | 78.0% | 14 Mar, 2023 | |
Joomla! Improper Access Control Vulnerability CVE-2023-23752 | MediumExploited | 99.8% | 16 Feb, 2023 | |
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability CVE-2022-44698 | MediumExploited | 76.3% | 13 Dec, 2022 | |
Mitel MiVoice Connect Code Injection Vulnerability CVE-2022-41223 | MediumExploited | 10.7% | 22 Nov, 2022 | |
Mitel MiVoice Connect Command Injection Vulnerability CVE-2022-40765 | MediumExploited | 10.6% | 22 Nov, 2022 | |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CVE-2022-41091 | MediumExploited | 1.9% | 09 Nov, 2022 | |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CVE-2022-41049 | MediumExploited | 2.6% | 09 Nov, 2022 | |
Google Chromium Intents Insufficient Input Validation Vulnerability CVE-2022-2856 | MediumExploited | 4.6% | 26 Sep, 2022 | |
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability CVE-2022-39197 | MediumExploited | 46.7% | 22 Sep, 2022 | |
Apple macOS Out-of-Bounds Read Vulnerability CVE-2022-22674 | MediumExploited | 1.1% | 26 May, 2022 | |
Cisco IOS XR Open Port Vulnerability CVE-2022-20821 | MediumExploited | 11.5% | 26 May, 2022 | |
Microsoft Windows LSA Spoofing Vulnerability CVE-2022-26925 | MediumExploited | 10.5% | 10 May, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2022-27926 | MediumExploited | 17.6% | 21 Apr, 2022 | |
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability CVE-2022-28810 | MediumExploited | 71.0% | 18 Apr, 2022 | |
VMware vCenter Server Incorrect Default File Permissions Vulnerability CVE-2022-22948 | MediumExploited | 13.3% | 29 Mar, 2022 | |
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability CVE-2022-24682 | MediumExploited | 30.9% | 09 Feb, 2022 | |
Zabbix Frontend Improper Access Control Vulnerability CVE-2022-23134 | MediumExploited | 95.3% | 13 Jan, 2022 | |
SolarWinds Serv-U Improper Input Validation Vulnerability CVE-2021-35247 | MediumExploited | 3.5% | 10 Jan, 2022 |