Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CVE-2025-24201 | CriticalExploited | 3.8% | 11 Mar, 2025 | |
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability CVE-2025-26633 | HighExploited | 30.4% | 11 Mar, 2025 | |
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability CVE-2025-24993 | HighExploited | 2.2% | 11 Mar, 2025 | |
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability CVE-2025-24991 | MediumExploited | 2.0% | 11 Mar, 2025 | |
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability CVE-2025-24985 | HighExploited | 3.9% | 11 Mar, 2025 | |
Microsoft Windows NTFS Information Disclosure Vulnerability CVE-2025-24984 | MediumExploited | 2.0% | 11 Mar, 2025 | |
Microsoft Windows Win32k Use-After-Free Vulnerability CVE-2025-24983 | HighExploited | 1.9% | 11 Mar, 2025 | |
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability CVE-2025-24054 | MediumExploited | 62.3% | 11 Mar, 2025 | |
FreeType Out-of-Bounds Write Vulnerability CVE-2025-27363 | HighExploited | 27.8% | 11 Mar, 2025 | |
AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability CVE-2024-54085 | CriticalExploited | 60.7% | 11 Mar, 2025 | |
Apache Tomcat Path Equivalence Vulnerability CVE-2025-24813 | CriticalExploited | 99.9% | 10 Mar, 2025 | |
Edimax IC-7100 IP Camera OS Command Injection Vulnerability CVE-2025-1316 | CriticalExploited | 74.5% | 05 Mar, 2025 | |
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability CVE-2025-22226 | MediumExploited | 1.6% | 04 Mar, 2025 | |
VMware ESXi Arbitrary Write Vulnerability CVE-2025-22225 | HighExploited | 1.0% | 04 Mar, 2025 | |
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CVE-2025-22224 | HighExploited | 1.6% | 04 Mar, 2025 | |
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability CVE-2024-48248 | HighExploited | 94.4% | 04 Mar, 2025 | |
XWiki Platform Eval Injection Vulnerability CVE-2025-24893 | CriticalExploited | 100.0% | 20 Feb, 2025 | |
Microsoft Power Pages Improper Access Control Vulnerability CVE-2025-24989 | CriticalExploited | 1.6% | 19 Feb, 2025 | |
Palo Alto Networks PAN-OS File Read Vulnerability CVE-2025-0111 | HighExploited | 2.0% | 12 Feb, 2025 | |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2025-0108 | HighExploited | 98.1% | 12 Feb, 2025 | |
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability CVE-2025-21418 | HighExploited | 2.1% | 11 Feb, 2025 | |
Microsoft Windows Storage Link Following Vulnerability CVE-2025-21391 | HighExploited | 2.3% | 11 Feb, 2025 | |
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2025-24472 | HighExploited | 7.2% | 11 Feb, 2025 | |
Wazuh Server Deserialization of Untrusted Data Vulnerability CVE-2025-24016 | CriticalExploited | 93.8% | 10 Feb, 2025 | |
Apple iOS and iPadOS Incorrect Authorization Vulnerability CVE-2025-24200 | MediumExploited | 4.5% | 10 Feb, 2025 | |
Trimble Cityworks Deserialization Vulnerability CVE-2025-0994 | HighExploited | 31.1% | 06 Feb, 2025 | |
Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40891 | HighExploited | 22.9% | 04 Feb, 2025 | |
Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 | HighExploited | 20.7% | 04 Feb, 2025 | |
Digiever DS-2105 Pro Missing Authorization Vulnerability CVE-2023-52163 | HighExploited | 96.9% | 03 Feb, 2025 | |
Advantive VeraCore SQL Injection Vulnerability CVE-2025-25181 | HighExploited | 55.5% | 03 Feb, 2025 | |
Advantive VeraCore Unrestricted File Upload Vulnerability CVE-2024-57968 | HighExploited | 32.3% | 03 Feb, 2025 | |
Apple Multiple Products Use-After-Free Vulnerability CVE-2025-24085 | CriticalExploited | 17.5% | 27 Jan, 2025 | |
7-Zip Mark of the Web Bypass Vulnerability CVE-2025-0411 | HighExploited | 67.1% | 25 Jan, 2025 | |
SonicWall SMA1000 Appliances Deserialization Vulnerability CVE-2025-23006 | CriticalExploited | 23.4% | 23 Jan, 2025 | |
Craft CMS has a potential RCE with a compromised security key CVE-2025-23209, GHSA-x684-96hh-833x | HighExploited | 21.6% | 18 Jan, 2025 | Packagist craftcms/cms |
SimpleHelp Path Traversal Vulnerability CVE-2024-57728 | HighExploited | 64.5% | 15 Jan, 2025 | |
SimpleHelp Path Traversal Vulnerability CVE-2024-57727 | HighExploited | 96.8% | 15 Jan, 2025 | |
SimpleHelp Missing Authorization Vulnerability CVE-2024-57726 | CriticalExploited | 66.4% | 15 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability CVE-2025-21335 | HighExploited | 1.4% | 14 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability CVE-2025-21334 | HighExploited | 1.6% | 14 Jan, 2025 | |
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21333 | HighExploited | 10.1% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13161 | HighExploited | 89.8% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13160 | HighExploited | 91.0% | 14 Jan, 2025 | |
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13159 | HighExploited | 100.0% | 14 Jan, 2025 | |
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2024-55591 | CriticalExploited | 94.3% | 14 Jan, 2025 | |
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability CVE-2024-53704 | CriticalExploited | 95.3% | 09 Jan, 2025 | |
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CVE-2025-0282 | CriticalExploited | 100.0% | 08 Jan, 2025 | |
Aviatrix Controllers OS Command Injection Vulnerability CVE-2024-50603 | CriticalExploited | 98.5% | 08 Jan, 2025 | |
DrayTek Vigor Routers OS Command Injection Vulnerability CVE-2024-12987 | MediumExploited | 98.2% | 27 Dec, 2024 | |
Linux Kernel Out-of-Bounds Access Vulnerability CVE-2024-53197 | HighExploited | 4.1% | 27 Dec, 2024 |