Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Android Kernel Race Condition Vulnerability CVE-2021-0920 | MediumExploited | 0.9% | 15 Dec, 2021 | |
Google Chromium Intents Improper Input Validation Vulnerability CVE-2021-38000 | MediumExploited | 4.9% | 23 Nov, 2021 | |
Microsoft Windows Installer Privilege Escalation Vulnerability CVE-2021-41379 | MediumExploited | 19.5% | 10 Nov, 2021 | |
Google Chromium Information Disclosure Vulnerability CVE-2021-37976 | MediumExploited | 19.9% | 08 Oct, 2021 | |
Samsung Mobile Devices Improper Input Validation Vulnerability CVE-2021-25489 | MediumExploited | 0.5% | 06 Oct, 2021 | |
SonicWall SMA100 Appliances OS Command Injection Vulnerability CVE-2021-20035 | MediumExploited | 4.4% | 27 Sep, 2021 | |
VMware vCenter Server Improper Access Control CVE-2021-22017 | MediumExploited | 49.2% | 23 Sep, 2021 | |
Apple macOS Unspecified Vulnerability CVE-2021-30657 | MediumExploited | 68.5% | 08 Sep, 2021 | |
Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2021-26086 | MediumExploited | 100.0% | 16 Aug, 2021 | |
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability CVE-2021-26085 | MediumExploited | 99.9% | 03 Aug, 2021 | |
Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2021-34448 | MediumExploited | 40.1% | 16 Jul, 2021 | |
Samsung Mobile Devices Race Condition Vulnerability CVE-2021-25395 | MediumExploited | 0.4% | 11 Jun, 2021 | |
Samsung Mobile Devices Race Condition Vulnerability CVE-2021-25394 | MediumExploited | 0.4% | 11 Jun, 2021 | |
OpenPLC ScadaBR Cross-site Scripting Vulnerability CVE-2021-26829 | MediumExploited | 48.0% | 11 Jun, 2021 | |
Microsoft Windows Kernel Information Disclosure Vulnerability CVE-2021-31955 | MediumExploited | 81.1% | 08 Jun, 2021 | |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability CVE-2021-31201 | MediumExploited | 2.6% | 08 Jun, 2021 | |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability CVE-2021-31199 | MediumExploited | 3.0% | 08 Jun, 2021 | |
Google Chromium PopupBlocker Security Bypass Vulnerability CVE-2021-30533 | MediumExploited | 16.7% | 07 Jun, 2021 | |
Arm Trusted Firmware Out-of-Bounds Write Vulnerability CVE-2021-27562 | MediumExploited | 3.1% | 25 May, 2021 | |
Microsoft Exchange Server Security Feature Bypass Vulnerability CVE-2021-31207 | MediumExploited | 99.8% | 11 May, 2021 | |
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability CVE-2021-1906 | MediumExploited | 0.5% | 07 May, 2021 | |
SonicWall Email Security Path Traversal Vulnerability CVE-2021-20023 | MediumExploited | 51.7% | 20 Apr, 2021 | |
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability CVE-2021-1879 | MediumExploited | 7.1% | 02 Apr, 2021 | |
Samsung Mobile Devices Improper Boundary Check Vulnerability CVE-2021-25372 | MediumExploited | 0.8% | 26 Mar, 2021 | |
Samsung Mobile Devices Unspecified Vulnerability CVE-2021-25371 | MediumExploited | 0.8% | 26 Mar, 2021 | |
Samsung Mobile Devices Memory Corruption Vulnerability CVE-2021-25370 | MediumExploited | 0.9% | 26 Mar, 2021 | |
Samsung Mobile Devices Improper Access Control Vulnerability CVE-2021-25369 | MediumExploited | 1.1% | 26 Mar, 2021 | |
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability CVE-2021-21973 | MediumExploited | 88.0% | 24 Feb, 2021 | |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2020-35730 | MediumExploited | 32.9% | 28 Dec, 2020 | |
Apple Multiple Products Memory Initialization Vulnerability CVE-2020-27950 | MediumExploited | 16.5% | 08 Dec, 2020 | |
QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19953 | MediumExploited | 30.5% | 28 Oct, 2020 | |
QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19943 | MediumExploited | 22.7% | 28 Oct, 2020 | |
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability CVE-2020-3580 | MediumExploited | 85.6% | 21 Oct, 2020 | |
Apple iOS, iPadOS, and macOS Input Validation Vulnerability CVE-2020-9934 | MediumExploited | 3.2% | 16 Oct, 2020 | |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability CVE-2020-0878 | MediumExploited | 2.7% | 11 Sep, 2020 | |
Microsoft Netlogon Privilege Escalation Vulnerability CVE-2020-1472 | MediumExploited | 99.4% | 17 Aug, 2020 | |
Fortinet FortiOS Default Configuration Vulnerability CVE-2019-5591 | MediumExploited | 18.6% | 14 Aug, 2020 | |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability CVE-2020-8196 | MediumExploited | 26.3% | 10 Jul, 2020 | |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability CVE-2020-8195 | MediumExploited | 33.0% | 10 Jul, 2020 | |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability CVE-2020-8193 | MediumExploited | 88.3% | 10 Jul, 2020 | |
Treck TCP/IP stack Out-of-Bounds Read Vulnerability CVE-2020-11899 | MediumExploited | 18.4% | 17 Jun, 2020 | |
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability CVE-2020-9819 | MediumExploited | 2.2% | 09 Jun, 2020 | |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2020-13965 | MediumExploited | 76.6% | 09 Jun, 2020 | |
IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 | MediumExploited | 68.5% | 07 May, 2020 | |
Potential XSS vulnerability in jQuery BIT-drupal-2020-11023, CVE-2020-11023, GHSA-jpcq-cgw6-v4j6 | MediumExploited | 84.9% | 29 Apr, 2020 | Maven org.webjars.npm:jquery NuGet jQuery Packagist components/jquery RubyGems jquery-rails +1 more |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability CVE-2020-3153 | MediumExploited | 28.3% | 19 Feb, 2020 | |
Google Chromium V8 Out-of-Bounds Write Vulnerability CVE-2019-5825 | MediumExploited | 55.9% | 25 Nov, 2019 | |
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability CVE-2019-6693 | MediumExploited | 6.6% | 21 Nov, 2019 | |
Use-After-Free in puppeteer CVE-2019-5786, GHSA-c2gp-86p4-5935 | MediumExploited | 61.1% | 27 Jun, 2019 | npm puppeteer |
Fortinet FortiOS and FortiProxy Out-of-bounds Write CVE-2018-13383 | MediumExploited | 32.5% | 29 May, 2019 |