Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apache Kylin OS Command Injection Vulnerability CVE-2020-1956 | HighExploited | 97.4% | 22 May, 2020 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2020-1054 | HighExploited | 53.9% | 21 May, 2020 | |
Plex Media Server Remote Code Execution Vulnerability CVE-2020-5741 | HighExploited | 72.9% | 08 May, 2020 | |
IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 | MediumExploited | 68.5% | 07 May, 2020 | |
IBM Data Risk Manager Remote Code Execution Vulnerability CVE-2020-4428 | CriticalExploited | 61.7% | 07 May, 2020 | |
IBM Data Risk Manager Security Bypass Vulnerability CVE-2020-4427 | CriticalExploited | 70.0% | 07 May, 2020 | |
Cisco ASA and FTD Information Disclosure Vulnerability CVE-2020-3259 | HighExploited | 71.5% | 06 May, 2020 | |
Roundcube Webmail Remote Code Execution Vulnerability CVE-2020-12641 | CriticalExploited | 84.4% | 04 May, 2020 | |
Juniper Junos OS Path Traversal Vulnerability CVE-2020-1631 | CriticalExploited | 4.9% | 04 May, 2020 | |
SaltStack Salt Unauthenticated Remote Code Execution CVE-2020-11651, GHSA-pjhf-vpx3-33r3, PYSEC-2020-102 | CriticalExploited | 96.6% | 30 Apr, 2020 | PyPI salt |
SaltStack Salt is vulnerable Arbitrary Directory Access CVE-2020-11652, GHSA-vp49-2g4r-m3x3, PYSEC-2020-103 | HighExploited | 86.2% | 30 Apr, 2020 | PyPI salt |
Potential XSS vulnerability in jQuery BIT-drupal-2020-11023, CVE-2020-11023, GHSA-jpcq-cgw6-v4j6 | MediumExploited | 84.9% | 29 Apr, 2020 | Maven org.webjars.npm:jquery NuGet jQuery Packagist components/jquery RubyGems jquery-rails +1 more |
Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 | CriticalExploited | 42.4% | 27 Apr, 2020 | |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6820 | HighExploited | 7.1% | 24 Apr, 2020 | |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability CVE-2020-6819 | HighExploited | 3.0% | 24 Apr, 2020 | |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability CVE-2020-3161 | CriticalExploited | 83.9% | 15 Apr, 2020 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2020-1027 | HighExploited | 4.7% | 15 Apr, 2020 | |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability CVE-2020-1020 | HighExploited | 65.0% | 15 Apr, 2020 | |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability CVE-2020-0968 | HighExploited | 30.7% | 15 Apr, 2020 | |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability CVE-2020-0938 | HighExploited | 69.0% | 15 Apr, 2020 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2020-2883 | CriticalExploited | 94.6% | 15 Apr, 2020 | |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability CVE-2020-11738 | HighExploited | 97.8% | 13 Apr, 2020 | |
VMware vCenter Server Information Disclosure Vulnerability CVE-2020-3952 | CriticalExploited | 90.4% | 10 Apr, 2020 | |
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability CVE-2020-5735 | HighExploited | 36.2% | 08 Apr, 2020 | |
Sonatype Nexus Repository Remote Code Execution Vulnerability CVE-2020-10199 | HighExploited | 99.1% | 01 Apr, 2020 | |
Grandstream Networks UCM6200 Series SQL Injection Vulnerability CVE-2020-5722 | CriticalExploited | 84.3% | 23 Mar, 2020 | |
Liferay Portal Deserialization of Untrusted Data Vulnerability CVE-2020-7961 | CriticalExploited | 99.9% | 20 Mar, 2020 | |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability CVE-2020-8599 | CriticalExploited | 11.9% | 18 Mar, 2020 | |
Trend Micro Multiple Products Content Validation Escape Vulnerability CVE-2020-8468 | HighExploited | 6.2% | 18 Mar, 2020 | |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability CVE-2020-8467 | HighExploited | 10.9% | 18 Mar, 2020 | |
VMware Multiple Products Privilege Escalation Vulnerability CVE-2020-3950 | HighExploited | 7.3% | 17 Mar, 2020 | |
Unraid Authentication Bypass Vulnerability CVE-2020-5849 | HighExploited | 93.2% | 16 Mar, 2020 | |
Unraid Remote Code Execution Vulnerability CVE-2020-5847 | CriticalExploited | 95.8% | 16 Mar, 2020 | |
Microsoft SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 | CriticalExploited | 99.8% | 12 Mar, 2020 | |
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability CVE-2020-0787 | HighExploited | 42.5% | 12 Mar, 2020 | |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability CVE-2020-10181 | CriticalExploited | 14.9% | 11 Mar, 2020 | |
SAP Solution Manager Missing Authentication for Critical Function Vulnerability CVE-2020-6207 | CriticalExploited | 98.1% | 10 Mar, 2020 | |
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability CVE-2020-0069 | HighExploited | 1.4% | 10 Mar, 2020 | |
Android Kernel Out-of-Bounds Write Vulnerability CVE-2020-0041 | HighExploited | 3.2% | 10 Mar, 2020 | |
D-Link DCS-930L Devices OS Command Injection Vulnerability CVE-2016-11021 | HighExploited | 69.6% | 09 Mar, 2020 | |
rConfig OS Command Injection Vulnerability CVE-2020-10221 | HighExploited | 77.1% | 08 Mar, 2020 | |
Zoho ManageEngine Desktop Central File Upload Vulnerability CVE-2020-10189 | CriticalExploited | 99.9% | 06 Mar, 2020 | |
D-Link DWL-2600AP Access Point Command Injection Vulnerability CVE-2019-20500 | HighExploited | 96.7% | 05 Mar, 2020 | |
Zyxel Multiple NAS Devices OS Command Injection Vulnerability CVE-2020-9054 | CriticalExploited | 100.0% | 04 Mar, 2020 | |
Mozilla Firefox And Thunderbird Type Confusion Vulnerability CVE-2019-17026 | HighExploited | 46.3% | 02 Mar, 2020 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2020-6418 | HighExploited | 78.8% | 27 Feb, 2020 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2020-3837 | HighExploited | 14.8% | 27 Feb, 2020 | |
Apache Tomcat Improper Privilege Management Vulnerability CVE-2020-1938 | CriticalExploited | 99.3% | 24 Feb, 2020 | |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability CVE-2020-3153 | MediumExploited | 28.3% | 19 Feb, 2020 | |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability CVE-2020-7796 | CriticalExploited | 93.6% | 18 Feb, 2020 |