Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Advantive VeraCore SQL Injection Vulnerability CVE-2025-25181 | HighExploited | 55.5% | 03 Feb, 2025 | |
Advantive VeraCore Unrestricted File Upload Vulnerability CVE-2024-57968 | HighExploited | 32.3% | 03 Feb, 2025 | |
7-Zip Mark of the Web Bypass Vulnerability CVE-2025-0411 | HighExploited | 67.1% | 25 Jan, 2025 | |
Craft CMS has a potential RCE with a compromised security key CVE-2025-23209, GHSA-x684-96hh-833x | HighExploited | 21.6% | 18 Jan, 2025 | Packagist craftcms/cms |
SimpleHelp Path Traversal Vulnerability CVE-2024-57728 | HighExploited | 64.5% | 15 Jan, 2025 | |
SimpleHelp Path Traversal Vulnerability CVE-2024-57727 | HighExploited | 96.8% | 15 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability CVE-2025-21335 | HighExploited | 1.4% | 14 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability CVE-2025-21334 | HighExploited | 1.6% | 14 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21333 | HighExploited | 10.1% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13161 | HighExploited | 89.8% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13160 | HighExploited | 91.0% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13159 | HighExploited | 100.0% | 14 Jan, 2025 | |
Linux Kernel Out-of-Bounds Access Vulnerability CVE-2024-53197 | HighExploited | 4.1% | 27 Dec, 2024 | |
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability CVE-2024-3393 | HighExploited | 29.1% | 27 Dec, 2024 | |
Linux Kernel Out-of-Bounds Read Vulnerability CVE-2024-53150 | HighExploited | 1.4% | 24 Dec, 2024 | |
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability CVE-2024-12686 | HighExploited | 32.2% | 18 Dec, 2024 | |
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability CVE-2024-49138 | HighExploited | 26.2% | 12 Dec, 2024 | |
Linux Kernel Out-of-Bounds Write Vulnerability CVE-2024-53104 | HighExploited | 3.4% | 02 Dec, 2024 | |
Apple Multiple Products Code Execution Vulnerability CVE-2024-44308 | HighExploited | 9.9% | 20 Nov, 2024 | |
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability CVE-2024-21287 | HighExploited | 1.7% | 18 Nov, 2024 | |
Android Framework Privilege Escalation Vulnerability CVE-2024-43093 | HighExploited | 0.7% | 13 Nov, 2024 | |
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability CVE-2024-49039 | HighExploited | 14.2% | 12 Nov, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43573 | HighExploited | 46.1% | 08 Oct, 2024 | |
Microsoft Windows Management Console Remote Code Execution Vulnerability CVE-2024-43572 | HighExploited | 66.7% | 08 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability CVE-2024-9380 | HighExploited | 58.3% | 08 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability CVE-2024-9379 | HighExploited | 44.3% | 08 Oct, 2024 | |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2024-43047 | HighExploited | 0.7% | 07 Oct, 2024 | |
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8957 | HighExploited | 79.8% | 17 Sep, 2024 | |
Ivanti Cloud Services Appliance OS Command Injection Vulnerability CVE-2024-8190 | HighExploited | 88.5% | 10 Sep, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 | HighExploited | 54.5% | 10 Sep, 2024 | |
Microsoft Publisher Protection Mechanism Failure Vulnerability CVE-2024-38226 | HighExploited | 2.7% | 10 Sep, 2024 | |
Microsoft Windows Installer Improper Privilege Management Vulnerability CVE-2024-38014 | HighExploited | 6.3% | 10 Sep, 2024 | |
Apache OFBiz Forced Browsing Vulnerability CVE-2024-45195 | HighExploited | 100.0% | 04 Sep, 2024 | |
Versa Director Dangerous File Type Upload Vulnerability CVE-2024-39717 | HighExploited | 4.0% | 22 Aug, 2024 | |
Google Chromium V8 Inappropriate Implementation Vulnerability CVE-2024-7965 | HighExploited | 18.5% | 21 Aug, 2024 | |
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability CVE-2024-38193 | HighExploited | 28.7% | 13 Aug, 2024 | |
Microsoft Project Remote Code Execution Vulnerability CVE-2024-38189 | HighExploited | 8.2% | 13 Aug, 2024 | |
Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38178 | HighExploited | 41.4% | 13 Aug, 2024 | |
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability CVE-2024-38107 | HighExploited | 1.6% | 13 Aug, 2024 | |
Microsoft Windows Kernel Privilege Escalation Vulnerability CVE-2024-38106 | HighExploited | 6.3% | 13 Aug, 2024 | |
Mitel SIP Phones Argument Injection Vulnerability CVE-2024-41710 | HighExploited | 41.6% | 12 Aug, 2024 | |
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2024-7694 | HighExploited | 1.8% | 12 Aug, 2024 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 | HighExploited | 74.2% | 16 Jul, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-38112 | HighExploited | 84.2% | 09 Jul, 2024 | |
Microsoft SharePoint Deserialization Vulnerability CVE-2024-38094 | HighExploited | 50.9% | 09 Jul, 2024 | |
Microsoft Windows Hyper-V Privilege Escalation Vulnerability CVE-2024-38080 | HighExploited | 7.1% | 09 Jul, 2024 | |
VMware ESXi Authentication Bypass Vulnerability CVE-2024-37085 | HighExploited | 26.8% | 25 Jun, 2024 | |
Android Pixel Privilege Escalation Vulnerability CVE-2024-32896 | HighExploited | 3.0% | 13 Jun, 2024 | |
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability CVE-2024-35250 | HighExploited | 25.2% | 11 Jun, 2024 | |
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability CVE-2024-30088 | HighExploited | 68.2% | 11 Jun, 2024 |