Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
JetBrains TeamCity Authentication Bypass Vulnerability CVE-2024-27198 | CriticalExploited | 99.9% | 04 Mar, 2024 | |
Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-1212 | CriticalExploited | 95.4% | 21 Feb, 2024 | |
ConnectWise ScreenConnect Authentication Bypass Vulnerability CVE-2024-1709 | CriticalExploited | 100.0% | 21 Feb, 2024 | |
Fortinet Multiple Products Format String Vulnerability CVE-2024-23113 | CriticalExploited | 61.7% | 15 Feb, 2024 | |
Microsoft Outlook Improper Input Validation Vulnerability CVE-2024-21413 | CriticalExploited | 94.7% | 13 Feb, 2024 | |
Microsoft Exchange Server Privilege Escalation Vulnerability CVE-2024-21410 | CriticalExploited | 12.7% | 13 Feb, 2024 | |
Fortinet FortiOS Out-of-Bound Write Vulnerability CVE-2024-21762 | CriticalExploited | 84.6% | 09 Feb, 2024 | |
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CVE-2024-23897 | CriticalExploited | 100.0% | 24 Jan, 2024 | |
D-Link DIR-859 Router Path Traversal Vulnerability CVE-2024-0769 | CriticalExploited | 82.7% | 21 Jan, 2024 | |
Atlassian Confluence Data Center and Server Template Injection Vulnerability CVE-2023-22527 | CriticalExploited | 100.0% | 16 Jan, 2024 | |
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CVE-2024-21887 | CriticalExploited | 100.0% | 12 Jan, 2024 | |
GitLab Community and Enterprise Editions Improper Access Control Vulnerability CVE-2023-7028 | CriticalExploited | 94.5% | 12 Jan, 2024 | |
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability CVE-2023-6448 | CriticalExploited | 2.1% | 05 Dec, 2023 | |
Google Skia Integer Overflow Vulnerability CVE-2023-6345 | CriticalExploited | 16.5% | 29 Nov, 2023 | |
ownCloud Improper Authentication Vulnerability CVE-2023-49105 | CriticalExploited | 43.2% | 21 Nov, 2023 | |
Qlik Sense HTTP Tunneling Vulnerability CVE-2023-48365 | CriticalExploited | 47.7% | 15 Nov, 2023 | |
SysAid Server Path Traversal Vulnerability CVE-2023-47246 | CriticalExploited | 98.9% | 10 Nov, 2023 | |
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability CVE-2023-22518 | CriticalExploited | 100.0% | 31 Oct, 2023 | |
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability CVE-2023-46604 | CriticalExploited | 100.0% | 27 Oct, 2023 | |
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CVE-2023-46747 | CriticalExploited | 96.7% | 26 Oct, 2023 | |
NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability CVE-2023-43208 | CriticalExploited | 85.4% | 26 Oct, 2023 | |
VMware vCenter Server Out-of-Bounds Write Vulnerability CVE-2023-34048 | CriticalExploited | 99.2% | 25 Oct, 2023 | |
Cisco IOS XE Web UI Privilege Escalation Vulnerability CVE-2023-20198 | CriticalExploited | 99.6% | 16 Oct, 2023 | |
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CVE-2023-22515 | CriticalExploited | 99.2% | 04 Oct, 2023 | |
JetBrains TeamCity Authentication Bypass Vulnerability CVE-2023-42793 | CriticalExploited | 100.0% | 19 Sep, 2023 | |
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability CVE-2023-20269 | CriticalExploited | 26.6% | 06 Sep, 2023 | |
Qlik Sense HTTP Tunneling Vulnerability CVE-2023-41265 | CriticalExploited | 88.2% | 29 Aug, 2023 | |
Ivanti Sentry Authentication Bypass Vulnerability CVE-2023-38035 | CriticalExploited | 100.0% | 21 Aug, 2023 | |
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability CVE-2023-36845 | CriticalExploited | 95.1% | 17 Aug, 2023 | |
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability CVE-2023-35082 | CriticalExploited | 100.0% | 15 Aug, 2023 | |
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability CVE-2023-35078 | CriticalExploited | 100.0% | 25 Jul, 2023 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-38203 | CriticalExploited | 97.1% | 20 Jul, 2023 | |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CVE-2023-3519 | CriticalExploited | 99.7% | 19 Jul, 2023 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-29300 | CriticalExploited | 100.0% | 12 Jul, 2023 | |
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability CVE-2023-24489 | CriticalExploited | 97.3% | 10 Jul, 2023 | |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability CVE-2023-34192 | CriticalExploited | 77.3% | 06 Jul, 2023 | |
Zyxel Multiple NAS Devices Command Injection Vulnerability CVE-2023-27992 | CriticalExploited | 82.3% | 19 Jun, 2023 | |
Microsoft SharePoint Server Privilege Escalation Vulnerability CVE-2023-29357 | CriticalExploited | 100.0% | 14 Jun, 2023 | |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability CVE-2023-27997 | CriticalExploited | 85.7% | 13 Jun, 2023 | |
Vmware Aria Operations for Networks Command Injection Vulnerability CVE-2023-20887 | CriticalExploited | 98.3% | 07 Jun, 2023 | |
Progress MOVEit Transfer SQL Injection Vulnerability CVE-2023-34362 | CriticalExploited | 99.9% | 02 Jun, 2023 | |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability CVE-2023-2868 | CriticalExploited | 86.8% | 24 May, 2023 | |
Apache RocketMQ Command Execution Vulnerability CVE-2023-33246 | CriticalExploited | 96.6% | 24 May, 2023 | |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability CVE-2023-33010 | CriticalExploited | 29.0% | 24 May, 2023 | |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability CVE-2023-33009 | CriticalExploited | 28.1% | 24 May, 2023 | |
Zyxel Multiple Firewalls OS Command Injection Vulnerability CVE-2023-28771 | CriticalExploited | 99.3% | 25 Apr, 2023 | |
Apache superset missing check for default SECRET_KEY BIT-superset-2023-27524, CVE-2023-27524, GHSA-5cx2-vq3h-x52c, PYSEC-2026-1161 | CriticalExploited | 98.1% | 24 Apr, 2023 | PyPI apache-superset |
PaperCut MF/NG Improper Access Control Vulnerability CVE-2023-27350 | CriticalExploited | 100.0% | 20 Apr, 2023 | |
Google Chrome Skia Integer Overflow Vulnerability CVE-2023-2136 | CriticalExploited | 5.8% | 19 Apr, 2023 | |
Novi Survey Insecure Deserialization Vulnerability CVE-2023-29492 | CriticalExploited | 2.7% | 11 Apr, 2023 |