Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Command Injection Vulnerability CVE-2021-21315, GHSA-2m8v-572m-ff2v | HighExploited | 90.7% | 16 Feb, 2021 | npm systeminformation |
Nagios XI OS Command Injection CVE-2021-25298 | HighExploited | 73.6% | 15 Feb, 2021 | |
Nagios XI OS Command Injection CVE-2021-25297 | HighExploited | 56.7% | 15 Feb, 2021 | |
Nagios XI OS Command Injection CVE-2021-25296 | HighExploited | 71.9% | 15 Feb, 2021 | |
SSRF in adminer CVE-2021-21311, GHSA-x5r2-hj5c-8jx6 | HighExploited | 98.5% | 11 Feb, 2021 | Packagist vrana/adminer |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability CVE-2021-21017 | HighExploited | 86.3% | 11 Feb, 2021 | |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability CVE-2021-23874 | HighExploited | 1.0% | 10 Feb, 2021 | |
Google Chromium V8 Heap Buffer Overflow Vulnerability CVE-2021-21148 | HighExploited | 20.0% | 09 Feb, 2021 | |
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CVE-2021-22502 | CriticalExploited | 96.7% | 08 Feb, 2021 | |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability CVE-2021-20016 | CriticalExploited | 40.0% | 04 Feb, 2021 | |
QNAP Helpdesk Improper Access Control Vulnerability CVE-2020-2506 | CriticalExploited | 2.0% | 03 Feb, 2021 | |
D-Link DNS-320 Device Command Injection Vulnerability CVE-2020-25506 | CriticalExploited | 100.0% | 02 Feb, 2021 | |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability CVE-2020-29557 | CriticalExploited | 55.7% | 29 Jan, 2021 | |
Sudo Heap-Based Buffer Overflow Vulnerability CVE-2021-3156 | HighExploited | 100.0% | 26 Jan, 2021 | |
ONLYOFFICE Docs Server Path Traversal Vulnerability CVE-2021-3199 | CriticalExploited | 30.2% | 26 Jan, 2021 | |
Directory Traversal in Archive_Tar BIT-drupal-2020-36193, CVE-2020-36193, GHSA-rpw6-9xfx-jvcx | HighExploited | 70.6% | 18 Jan, 2021 | Packagist pear/archive_tar |
Google Chrome Media Use-After-Free Vulnerability CVE-2020-6572 | HighExploited | 10.6% | 14 Jan, 2021 | |
Microsoft Defender Remote Code Execution Vulnerability CVE-2021-1647 | HighExploited | 39.7% | 12 Jan, 2021 | |
Unauthenticated remote code execution in Ignition CVE-2021-3129, GHSA-4qwp-7c67-jmcc | CriticalExploited | 99.9% | 12 Jan, 2021 | Packagist facade/ignition |
Google Chrome Use-After-Free Vulnerability CVE-2020-16017 | CriticalExploited | 2.7% | 08 Jan, 2021 | |
Google Chromium V8 Incorrect Implementation Vulnerabililty CVE-2020-16013 | HighExploited | 2.8% | 08 Jan, 2021 | |
Apache Flink Improper Access Control Vulnerability CVE-2020-17519 | HighExploited | 98.0% | 05 Jan, 2021 | |
SolarWinds Orion Authentication Bypass Vulnerability CVE-2020-10148 | CriticalExploited | 92.0% | 29 Dec, 2020 | |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2020-35730 | MediumExploited | 32.9% | 28 Dec, 2020 | |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability CVE-2020-29583 | CriticalExploited | 90.2% | 22 Dec, 2020 | |
CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 | CriticalExploited | 4.7% | 11 Dec, 2020 | |
Apache Struts Remote Code Execution Vulnerability CVE-2020-17530 | CriticalExploited | 96.3% | 11 Dec, 2020 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17144 | HighExploited | 36.5% | 10 Dec, 2020 | |
Apple Multiple Products Memory Initialization Vulnerability CVE-2020-27950 | MediumExploited | 16.5% | 08 Dec, 2020 | |
Apple Multiple Products Type Confusion Vulnerability CVE-2020-27932 | HighExploited | 10.3% | 08 Dec, 2020 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-27930 | HighExploited | 22.0% | 08 Dec, 2020 | |
Multiple VMware Products Command Injection Vulnerability CVE-2020-4006 | CriticalExploited | 17.3% | 23 Nov, 2020 | |
Multiple vulnerabilities through filename manipulation in Archive_Tar BIT-drupal-2020-28948, BIT-drupal-2020-28949, CVE-2020-28948, CVE-2020-28949, DRUPAL-CORE-2020-013, GHSA-75c5-f4gw-38r9, GHSA-jh5x-hfhg-78jq | HighExploited | 84.6% | 19 Nov, 2020 | Packagist drupal/core Packagist pear/archive_tar |
Drupal core Unrestricted Upload of File with Dangerous Type BIT-drupal-2020-13671, CVE-2020-13671, DRUPAL-CORE-2020-012, GHSA-68jc-v27h-vhmw | HighExploited | 36.2% | 18 Nov, 2020 | Packagist drupal/core Packagist drupal/drupal |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-17087 | HighExploited | 5.4% | 11 Nov, 2020 | |
Authentication bypass in Apache Airflow BIT-airflow-2020-13927, CVE-2020-13927, GHSA-hhx9-p69v-cx2j, PYSEC-2020-18 | CriticalExploited | 99.8% | 10 Nov, 2020 | PyPI apache-airflow |
SaltStack Salt Command Injection in netapi ssh client CVE-2020-16846, GHSA-qr38-h96j-2j3w, PYSEC-2020-104 | CriticalExploited | 99.6% | 06 Nov, 2020 | PyPI salt |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability CVE-2020-16010 | CriticalExploited | 6.4% | 03 Nov, 2020 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2020-16009 | HighExploited | 48.3% | 03 Nov, 2020 | |
Google Chrome FreeType Heap Buffer Overflow Vulnerability CVE-2020-15999 | CriticalExploited | 63.9% | 03 Nov, 2020 | |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14750 | CriticalExploited | 99.2% | 02 Nov, 2020 | |
QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19953 | MediumExploited | 30.5% | 28 Oct, 2020 | |
QNAP NAS File Station Command Injection Vulnerability CVE-2018-19949 | CriticalExploited | 30.2% | 28 Oct, 2020 | |
QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19943 | MediumExploited | 22.7% | 28 Oct, 2020 | |
Ivanti Pulse Connect Secure Code Execution Vulnerability CVE-2020-8260 | HighExploited | 96.5% | 28 Oct, 2020 | |
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability CVE-2020-3580 | MediumExploited | 85.6% | 21 Oct, 2020 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2020-14883 | HighExploited | 97.7% | 21 Oct, 2020 | |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14882 | CriticalExploited | 100.0% | 21 Oct, 2020 | |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability CVE-2020-14871 | CriticalExploited | 80.2% | 21 Oct, 2020 | |
Oracle Business Intelligence Enterprise Edition Path Transversal CVE-2020-14864 | HighExploited | 97.2% | 21 Oct, 2020 |