Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2025-26399 | CriticalExploited | 90.1% | 23 Sep, 2025 | |
Libraesva Email Security Gateway Command Injection Vulnerability CVE-2025-59689 | MediumExploited | 1.9% | 19 Sep, 2025 | |
CWP Control Web Panel OS Command Injection Vulnerability CVE-2025-48703 | CriticalExploited | 99.7% | 19 Sep, 2025 | |
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CVE-2025-10035 | CriticalExploited | 99.8% | 18 Sep, 2025 | |
WatchGuard Firebox Out-of-Bounds Write Vulnerability CVE-2025-9242 | CriticalExploited | 92.2% | 17 Sep, 2025 | |
Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21043 | CriticalExploited | 2.2% | 12 Sep, 2025 | |
Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21042 | CriticalExploited | 35.6% | 12 Sep, 2025 | |
Magento Community Edition Improper Input Validation vulnerability CVE-2025-54236, GHSA-wh92-6q6g-px7j | CriticalExploited | 94.7% | 09 Sep, 2025 | Packagist magento/community-edition Packagist magento/project-community-edition |
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 | CriticalExploited | 3.3% | 05 Sep, 2025 | |
Android Runtime Use-After-Free Vulnerability CVE-2025-48543 | HighExploited | 0.6% | 04 Sep, 2025 | |
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability CVE-2025-53690 | CriticalExploited | 60.6% | 03 Sep, 2025 | |
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CVE-2025-9377 | HighExploited | 37.7% | 29 Aug, 2025 | |
Meta Platforms WhatsApp Incorrect Authorization Vulnerability CVE-2025-55177 | MediumExploited | 13.1% | 29 Aug, 2025 | |
Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 | CriticalExploited | 95.2% | 28 Aug, 2025 | |
Citrix NetScaler Memory Overflow Vulnerability CVE-2025-7775 | CriticalExploited | 20.7% | 26 Aug, 2025 | |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability CVE-2025-43300 | CriticalExploited | 65.2% | 21 Aug, 2025 | |
N-able N-Central Command Injection Vulnerability CVE-2025-8876 | CriticalExploited | 3.4% | 14 Aug, 2025 | |
N-able N-Central Insecure Deserialization Vulnerability CVE-2025-8875 | CriticalExploited | 1.9% | 14 Aug, 2025 | |
RARLAB WinRAR Path Traversal Vulnerability CVE-2025-8088 | HighExploited | 94.5% | 08 Aug, 2025 | |
Adobe Experience Manager Forms Code Execution Vulnerability CVE-2025-54253 | CriticalExploited | 88.8% | 05 Aug, 2025 | |
Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 | CriticalExploited | 25.4% | 05 Aug, 2025 | |
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability CVE-2025-6205 | CriticalExploited | 73.7% | 04 Aug, 2025 | |
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability CVE-2025-6204 | HighExploited | 79.6% | 04 Aug, 2025 | |
Apple Multiple Products Buffer Overflow Vulnerability CVE-2025-31277 | HighExploited | 1.7% | 30 Jul, 2025 | |
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability CVE-2025-38352 | HighExploited | 1.4% | 22 Jul, 2025 | |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2025-53770 | CriticalExploited | 100.0% | 20 Jul, 2025 | |
eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code CVE-2025-54313, GHSA-f29h-pxvx-f335 | HighExploited | 5.1% | 19 Jul, 2025 | npm @pkgr/core npm eslint-config-prettier npm eslint-plugin-prettier npm got-fetch +2 more |
CrushFTP Unprotected Alternate Channel Vulnerability CVE-2025-54309 | CriticalExploited | 93.5% | 18 Jul, 2025 | |
Livewire is vulnerable to remote command execution during component property update hydration CVE-2025-54068, GHSA-29cq-5w36-x7w3 | CriticalExploited | 96.3% | 17 Jul, 2025 | Packagist livewire/livewire |
Fortinet FortiWeb SQL Injection Vulnerability CVE-2025-25257 | CriticalExploited | 99.9% | 17 Jul, 2025 | |
Cisco Identity Services Engine Injection Vulnerability CVE-2025-20337 | CriticalExploited | 74.5% | 16 Jul, 2025 | |
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability CVE-2025-6558 | HighExploited | 10.9% | 15 Jul, 2025 | |
Wing FTP Server Information Disclosure Vulnerability CVE-2025-47813 | MediumExploited | 62.5% | 10 Jul, 2025 | |
Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability CVE-2025-47812 | CriticalExploited | 93.9% | 10 Jul, 2025 | |
Git Link Following Vulnerability CVE-2025-48384 | HighExploited | 4.4% | 08 Jul, 2025 | |
Microsoft SharePoint Improper Authentication Vulnerability CVE-2025-49706 | MediumExploited | 99.1% | 08 Jul, 2025 | |
Microsoft SharePoint Code Injection Vulnerability CVE-2025-49704 | HighExploited | 100.0% | 08 Jul, 2025 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2025-6554 | HighExploited | 14.1% | 30 Jun, 2025 | |
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 | HighExploited | 55.5% | 30 Jun, 2025 | |
Cisco Identity Services Engine Injection Vulnerability CVE-2025-20281 | CriticalExploited | 97.6% | 25 Jun, 2025 | |
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability CVE-2025-6543 | CriticalExploited | 10.4% | 25 Jun, 2025 | |
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability CVE-2025-32975 | CriticalExploited | 2.5% | 24 Jun, 2025 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability CVE-2025-48700 | MediumExploited | 1.7% | 23 Jun, 2025 | |
RARLAB WinRAR Path Traversal Vulnerability CVE-2025-6218 | HighExploited | 90.5% | 21 Jun, 2025 | |
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CVE-2025-5777 | CriticalExploited | 100.0% | 17 Jun, 2025 | |
Apple Multiple Products Unspecified Vulnerability CVE-2025-43200 | MediumExploited | 1.2% | 16 Jun, 2025 | |
Microsoft Windows SMB Client Improper Access Control Vulnerability CVE-2025-33073 | HighExploited | 82.7% | 10 Jun, 2025 | |
Microsoft Windows External Control of File Name or Path Vulnerability CVE-2025-33053 | HighExploited | 87.0% | 10 Jun, 2025 | |
IGEL OS Use of a Key Past its Expiration Date Vulnerability CVE-2025-47827 | MediumExploited | 4.9% | 05 Jun, 2025 | |
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-21479 | HighExploited | 0.8% | 03 Jun, 2025 |