Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
CyberPanel Incorrect Default Permissions Vulnerability CVE-2024-51567 | CriticalExploited | 84.4% | 29 Oct, 2024 | |
CyberPanel Incorrect Default Permissions Vulnerability CVE-2024-51378 | CriticalExploited | 94.7% | 29 Oct, 2024 | |
Cleo Multiple Products Unrestricted File Upload Vulnerability CVE-2024-50623 | CriticalExploited | 98.6% | 28 Oct, 2024 | |
Fortinet FortiManager Missing Authentication Vulnerability CVE-2024-47575 | CriticalExploited | 94.8% | 23 Oct, 2024 | |
Mitel MiCollab Path Traversal Vulnerability CVE-2024-41713 | CriticalExploited | 97.2% | 21 Oct, 2024 | |
ScienceLogic SL1 Unspecified Vulnerability CVE-2024-9537 | CriticalExploited | 3.8% | 18 Oct, 2024 | |
Palo Alto Networks Expedition SQL Injection Vulnerability CVE-2024-9465 | CriticalExploited | 99.6% | 09 Oct, 2024 | |
Palo Alto Networks Expedition OS Command Injection Vulnerability CVE-2024-9463 | CriticalExploited | 98.5% | 09 Oct, 2024 | |
Mozilla Firefox Use-After-Free Vulnerability CVE-2024-9680 | CriticalExploited | 23.2% | 09 Oct, 2024 | |
Microsoft Configuration Manager SQL Injection Vulnerability CVE-2024-43468 | CriticalExploited | 81.0% | 08 Oct, 2024 | |
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CVE-2024-45519 | CriticalExploited | 99.9% | 02 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CVE-2024-8963 | CriticalExploited | 98.6% | 19 Sep, 2024 | |
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability CVE-2024-8956 | CriticalExploited | 58.8% | 17 Sep, 2024 | |
VMware vCenter Server Privilege Escalation Vulnerability CVE-2024-38813 | CriticalExploited | 17.4% | 17 Sep, 2024 | |
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38812 | CriticalExploited | 54.6% | 17 Sep, 2024 | |
Veeam Backup and Replication Deserialization Vulnerability CVE-2024-40711 | CriticalExploited | 90.4% | 07 Sep, 2024 | |
Cisco Smart Licensing Utility Static Credential Vulnerability CVE-2024-20439 | CriticalExploited | 97.1% | 04 Sep, 2024 | |
Progress WhatsUp Gold SQL Injection Vulnerability CVE-2024-6670 | CriticalExploited | 92.9% | 29 Aug, 2024 | |
SonicWall SonicOS Improper Access Control Vulnerability CVE-2024-40766 | CriticalExploited | 18.4% | 23 Aug, 2024 | |
SolarWinds Web Help Desk Hardcoded Credential Vulnerability CVE-2024-28987 | CriticalExploited | 93.3% | 21 Aug, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-7971 | CriticalExploited | 21.0% | 21 Aug, 2024 | |
Kingsoft WPS Office Path Traversal Vulnerability CVE-2024-7262 | CriticalExploited | 3.1% | 15 Aug, 2024 | |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2024-28986 | CriticalExploited | 84.6% | 13 Aug, 2024 | |
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability CVE-2024-7593 | CriticalExploited | 100.0% | 13 Aug, 2024 | |
Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 | CriticalExploited | 91.9% | 12 Aug, 2024 | |
RoundCube Webmail Cross-Site Scripting Vulnerability CVE-2024-42009 | CriticalExploited | 82.9% | 05 Aug, 2024 | |
Apache OFBiz Incorrect Authorization Vulnerability CVE-2024-38856 | CriticalExploited | 99.4% | 05 Aug, 2024 | |
Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CVE-2023-45249 | CriticalExploited | 53.3% | 24 Jul, 2024 | |
Palo Alto Networks Expedition Missing Authentication Vulnerability CVE-2024-5910 | CriticalExploited | 91.7% | 10 Jul, 2024 | |
ServiceNow Incomplete List of Disallowed Inputs Vulnerability CVE-2024-5217 | CriticalExploited | 99.6% | 10 Jul, 2024 | |
ServiceNow Improper Input Validation Vulnerability CVE-2024-4879 | CriticalExploited | 100.0% | 10 Jul, 2024 | |
Apache HTTP Server Improper Escaping of Output Vulnerability CVE-2024-38475 | CriticalExploited | 100.0% | 01 Jul, 2024 | |
OSGeo GeoServer GeoTools Eval Injection Vulnerability CVE-2024-36401 | CriticalExploited | 99.8% | 01 Jul, 2024 | |
Progress WhatsUp Gold Path Traversal Vulnerability CVE-2024-4885 | CriticalExploited | 99.3% | 25 Jun, 2024 | |
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CVE-2024-37079 | CriticalExploited | 22.4% | 18 Jun, 2024 | |
GeoVision Devices OS Command Injection Vulnerability CVE-2024-6047 | CriticalExploited | 10.1% | 17 Jun, 2024 | |
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability BIT-magento-2024-34102, CVE-2024-34102, GHSA-m8cj-3v68-3cxj | CriticalExploited | 100.0% | 13 Jun, 2024 | Packagist magento/community-edition |
PHP-CGI OS Command Injection Vulnerability CVE-2024-4577 | CriticalExploited | 100.0% | 09 Jun, 2024 | |
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2024-23692 | CriticalExploited | 99.5% | 31 May, 2024 | |
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CVE-2024-4358 | CriticalExploited | 97.5% | 29 May, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-5274 | CriticalExploited | 7.7% | 28 May, 2024 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2024-4947 | CriticalExploited | 15.2% | 15 May, 2024 | |
Google Chromium Visuals Use-After-Free Vulnerability CVE-2024-4671 | CriticalExploited | 8.3% | 14 May, 2024 | |
Apache OFBiz Path Traversal Vulnerability CVE-2024-32113 | CriticalExploited | 99.9% | 08 May, 2024 | |
CrushFTP VFS Sandbox Escape Vulnerability CVE-2024-4040 | CriticalExploited | 99.5% | 22 Apr, 2024 | |
Apache HugeGraph-Server Improper Access Control Vulnerability CVE-2024-27348 | CriticalExploited | 99.2% | 22 Apr, 2024 | |
Palo Alto Networks PAN-OS Command Injection Vulnerability CVE-2024-3400 | CriticalExploited | 100.0% | 12 Apr, 2024 | |
D-Link Multiple NAS Devices Command Injection Vulnerability CVE-2024-3273 | CriticalExploited | 100.0% | 04 Apr, 2024 | |
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability CVE-2024-3272 | CriticalExploited | 98.1% | 04 Apr, 2024 | |
Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2023-48788 | CriticalExploited | 98.4% | 12 Mar, 2024 |