Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Sophos Web Appliance Command Injection Vulnerability CVE-2023-1671 | CriticalExploited | 100.0% | 04 Apr, 2023 | |
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CVE-2022-43939 | CriticalExploited | 92.3% | 03 Apr, 2023 | |
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CVE-2022-42948 | CriticalExploited | 2.7% | 24 Mar, 2023 | |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-26359 | CriticalExploited | 17.0% | 23 Mar, 2023 | |
D-Link DIR-820 Router OS Command Injection Vulnerability CVE-2023-25280 | CriticalExploited | 97.9% | 16 Mar, 2023 | |
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability CVE-2023-28461 | CriticalExploited | 68.1% | 15 Mar, 2023 | |
Microsoft Office Outlook Privilege Escalation Vulnerability CVE-2023-23397 | CriticalExploited | 97.2% | 14 Mar, 2023 | |
IBM Aspera Faspex Code Execution Vulnerability CVE-2022-47986 | CriticalExploited | 100.0% | 17 Feb, 2023 | |
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability CVE-2023-25717 | CriticalExploited | 98.1% | 13 Feb, 2023 | |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-47966 | CriticalExploited | 99.8% | 18 Jan, 2023 | |
CWP Control Web Panel OS Command Injection Vulnerability CVE-2022-44877 | CriticalExploited | 100.0% | 05 Jan, 2023 | |
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability CVE-2022-42475 | CriticalExploited | 99.5% | 02 Jan, 2023 | |
Mozilla Firefox Use-After-Free Vulnerability CVE-2022-26486 | CriticalExploited | 2.4% | 22 Dec, 2022 | |
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability CVE-2022-27518 | CriticalExploited | 6.9% | 13 Dec, 2022 | |
Cacti Command Injection Vulnerability CVE-2022-46169 | CriticalExploited | 99.8% | 05 Dec, 2022 | |
Heap buffer overflow in GPU CVE-2022-4135, GHSA-995f-9x5r-2rcj | CriticalExploited | 31.9% | 25 Nov, 2022 | npm electron |
Netwrix Auditor Insecure Object Deserialization Vulnerability CVE-2022-31199 | CriticalExploited | 36.0% | 08 Nov, 2022 | |
D-Link DSL-2750B Devices Command Injection Vulnerability CVE-2016-20017 | CriticalExploited | 65.8% | 19 Oct, 2022 | |
Oracle E-Business Suite Unspecified Vulnerability CVE-2022-21587 | CriticalExploited | 98.3% | 18 Oct, 2022 | |
Fortinet Multiple Products Authentication Bypass Vulnerability CVE-2022-40684 | CriticalExploited | 100.0% | 18 Oct, 2022 | |
Google Chromium Mojo Insufficient Data Validation Vulnerability CVE-2022-3075 | CriticalExploited | 5.8% | 26 Sep, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CVE-2022-41352 | CriticalExploited | 95.5% | 26 Sep, 2022 | |
Sophos Firewall Code Injection Vulnerability CVE-2022-3236 | CriticalExploited | 98.9% | 23 Sep, 2022 | |
Teclib GLPI Remote Code Execution Vulnerability CVE-2022-35914 | CriticalExploited | 99.9% | 19 Sep, 2022 | |
QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 | CriticalExploited | 87.9% | 08 Sep, 2022 | |
D-Link Routers Buffer Overflow Vulnerability CVE-2022-37055 | CriticalExploited | 55.5% | 28 Aug, 2022 | |
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CVE-2022-37042 | CriticalExploited | 92.1% | 12 Aug, 2022 | |
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CVE-2022-26138 | CriticalExploited | 98.2% | 20 Jul, 2022 | |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-35405 | CriticalExploited | 99.9% | 19 Jul, 2022 | |
dotCMS Unrestricted Upload of File Vulnerability CVE-2022-26352 | CriticalExploited | 91.2% | 17 Jul, 2022 | |
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CVE-2022-26134 | CriticalExploited | 100.0% | 03 Jun, 2022 | |
SolarView Compact Command Injection Vulnerability CVE-2022-29303 | CriticalExploited | 98.0% | 12 May, 2022 | |
Zyxel Multiple Firewalls OS Command Injection Vulnerability CVE-2022-30525 | CriticalExploited | 99.9% | 12 May, 2022 | |
F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 | CriticalExploited | 100.0% | 05 May, 2022 | |
Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-24706 | CriticalExploited | 92.5% | 26 Apr, 2022 | |
Mitel MiVoice Connect Data Validation Vulnerability CVE-2022-29499 | CriticalExploited | 55.2% | 26 Apr, 2022 | |
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability CVE-2022-21445 | CriticalExploited | 62.5% | 19 Apr, 2022 | |
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability CVE-2022-29464 | CriticalExploited | 100.0% | 18 Apr, 2022 | |
OSGeo GeoServer JAI-EXT Code Injection Vulnerability CVE-2022-24816 | CriticalExploited | 99.9% | 13 Apr, 2022 | |
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability CVE-2022-22954 | CriticalExploited | 100.0% | 11 Apr, 2022 | |
Spring Framework JDK 9+ Remote Code Execution Vulnerability CVE-2022-22965 | CriticalExploited | 99.6% | 01 Apr, 2022 | |
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability CVE-2022-22963 | CriticalExploited | 99.9% | 01 Apr, 2022 | |
Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 | CriticalExploited | 19.5% | 29 Mar, 2022 | |
D-Link DIR-820L Remote Code Execution Vulnerability CVE-2022-26258 | CriticalExploited | 91.6% | 28 Mar, 2022 | |
Sophos Firewall Authentication Bypass Vulnerability CVE-2022-1040 | CriticalExploited | 99.8% | 25 Mar, 2022 | |
Apple Memory Corruption Vulnerability CVE-2022-22587 | CriticalExploited | 11.6% | 18 Mar, 2022 | |
Veeam Backup & Replication Remote Code Execution Vulnerability CVE-2022-26501 | CriticalExploited | 4.1% | 17 Mar, 2022 | |
MiCollab, MiVoice Business Express Access Control Vulnerability CVE-2022-26143 | CriticalExploited | 87.3% | 10 Mar, 2022 | |
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution CVE-2022-26318 | CriticalExploited | 78.2% | 04 Mar, 2022 | |
VMware Spring Cloud Gateway Code Injection Vulnerability CVE-2022-22947 | CriticalExploited | 98.3% | 03 Mar, 2022 |