Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability CVE-2019-0863 | HighExploited | 5.2% | 16 May, 2019 | |
Microsoft Remote Desktop Services Remote Code Execution Vulnerability CVE-2019-0708 | CriticalExploited | 100.0% | 16 May, 2019 | |
LG N1A1 NAS Remote Command Execution Vulnerability CVE-2018-14839 | CriticalExploited | 89.2% | 14 May, 2019 | |
WhatsApp VOIP Stack Buffer Overflow Vulnerability CVE-2019-3568 | CriticalExploited | 30.1% | 14 May, 2019 | |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability CVE-2019-11510 | CriticalExploited | 100.0% | 08 May, 2019 | |
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2018-4063 | HighExploited | 27.3% | 06 May, 2019 | |
Zyxel P660HN-T1A Routers Command Injection Vulnerability CVE-2017-18368 | CriticalExploited | 94.5% | 02 May, 2019 | |
Crestron Multiple Products Command Injection Vulnerability CVE-2019-3929 | CriticalExploited | 99.0% | 30 Apr, 2019 | |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability CVE-2019-9621 | HighExploited | 81.0% | 30 Apr, 2019 | |
Oracle WebLogic Server, Injection CVE-2019-2725 | CriticalExploited | 100.0% | 26 Apr, 2019 | |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability CVE-2019-11539 | HighExploited | 98.5% | 26 Apr, 2019 | |
Oracle BI Publisher Unauthorized Access Vulnerability CVE-2019-2616 | HighExploited | 92.2% | 23 Apr, 2019 | |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability CVE-2019-3398 | HighExploited | 97.0% | 18 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0859 | HighExploited | 4.2% | 09 Apr, 2019 | |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability CVE-2019-0841 | HighExploited | 41.4% | 09 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0803 | HighExploited | 45.2% | 09 Apr, 2019 | |
Microsoft Internet Explorer Type Confusion Vulnerability CVE-2019-0752 | HighExploited | 81.7% | 09 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0808 | HighExploited | 53.0% | 09 Apr, 2019 | |
Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-0797 | HighExploited | 1.9% | 09 Apr, 2019 | |
Microsoft Windows SMB Information Disclosure Vulnerability CVE-2019-0703 | MediumExploited | 9.4% | 09 Apr, 2019 | |
Apache HTTP Server Privilege Escalation Vulnerability CVE-2019-0211 | HighExploited | 65.0% | 08 Apr, 2019 | |
Reolink Multiple IP Cameras OS Command Injection Vulnerability CVE-2019-11001 | HighExploited | 37.5% | 08 Apr, 2019 | |
Apple Multiple Products Memory Corruption Vulnerability CVE-2018-4344 | HighExploited | 2.4% | 03 Apr, 2019 | |
Rails Ruby on Rails Path Traversal Vulnerability CVE-2019-5418 | HighExploited | 98.5% | 27 Mar, 2019 | |
Kentico Xperience Deserialization of Untrusted Data Vulnerability CVE-2019-10068 | CriticalExploited | 95.1% | 26 Mar, 2019 | |
Kibana Arbitrary Code Execution CVE-2019-7609 | CriticalExploited | 95.3% | 25 Mar, 2019 | |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability CVE-2019-3396 | CriticalExploited | 99.9% | 25 Mar, 2019 | |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability CVE-2019-9978 | MediumExploited | 72.9% | 24 Mar, 2019 | |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability CVE-2019-7238 | CriticalExploited | 76.6% | 21 Mar, 2019 | |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability CVE-2019-1003030 | CriticalExploited | 97.1% | 08 Mar, 2019 | |
Jenkins Script Security Plugin Sandbox Bypass Vulnerability CVE-2019-1003029 | CriticalExploited | 74.4% | 08 Mar, 2019 | |
TIBCO JasperReports Library Directory Traversal Vulnerability CVE-2018-18809 | MediumExploited | 79.1% | 07 Mar, 2019 | |
Microsoft Internet Explorer Information Disclosure Vulnerability CVE-2019-0676 | MediumExploited | 8.1% | 05 Mar, 2019 | |
Microsoft SharePoint Remote Code Execution Vulnerability CVE-2019-0604 | CriticalExploited | 99.9% | 05 Mar, 2019 | |
Apple iOS and macOS Group Facetime Vulnerability CVE-2019-6223 | HighExploited | 2.6% | 05 Mar, 2019 | |
ThinkPHP Remote Code Execution Vulnerability CVE-2019-9082 | HighExploited | 97.4% | 24 Feb, 2019 | |
Drupal Core Remote Code Execution Vulnerability CVE-2019-6340, DRUPAL-CORE-2019-003, GHSA-3gx6-h57h-rm27 | HighExploited | 92.0% | 20 Feb, 2019 | Packagist drupal/core Packagist drupal/drupal |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability CVE-2019-8394 | MediumExploited | 63.3% | 17 Feb, 2019 | |
WinRAR Absolute Path Traversal Vulnerability CVE-2018-20250 | HighExploited | 96.0% | 05 Feb, 2019 | |
Kaseya VSA Remote Code Execution Vulnerability CVE-2018-20753 | CriticalExploited | 29.6% | 05 Feb, 2019 | |
Kaseya VSA SQL Injection Vulnerability CVE-2017-18362 | CriticalExploited | 86.8% | 05 Feb, 2019 | |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability CVE-2019-1653 | HighExploited | 99.9% | 24 Jan, 2019 | |
Cisco Small Business Routers Improper Input Validation Vulnerability CVE-2019-1652 | HighExploited | 95.9% | 24 Jan, 2019 | |
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability CVE-2018-13374 | MediumExploited | 38.1% | 22 Jan, 2019 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2018-15982 | HighExploited | 89.6% | 18 Jan, 2019 | |
Microsoft Windows Privilege Escalation Vulnerability CVE-2019-0543 | HighExploited | 4.7% | 08 Jan, 2019 | |
Microsoft MSHTML Remote Code Execution Vulnerability CVE-2019-0541 | HighExploited | 53.2% | 08 Jan, 2019 | |
GIGABYTE Multiple Products Privilege Escalation Vulnerability CVE-2018-19323 | CriticalExploited | 8.4% | 21 Dec, 2018 | |
GIGABYTE Multiple Products Code Execution Vulnerability CVE-2018-19322 | HighExploited | 1.8% | 21 Dec, 2018 | |
GIGABYTE Multiple Products Privilege Escalation Vulnerability CVE-2018-19321 | HighExploited | 3.7% | 21 Dec, 2018 |