Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Debian-specific Redis Server Lua Sandbox Escape Vulnerability CVE-2022-0543 | CriticalExploited | 99.4% | 18 Feb, 2022 | |
D-Link Multiple Routers Remote Code Execution Vulnerability CVE-2021-45382 | CriticalExploited | 97.8% | 17 Feb, 2022 | |
Magento improper input validation vulnerability BIT-magento-2022-24086, CVE-2022-24086, GHSA-f8fv-f786-9933 | CriticalExploited | 99.2% | 16 Feb, 2022 | Packagist magento/community-edition |
Apache APISIX Authentication Bypass Vulnerability CVE-2022-24112 | CriticalExploited | 96.1% | 11 Feb, 2022 | |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20700 | CriticalExploited | 5.7% | 10 Feb, 2022 | |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20699 | CriticalExploited | 72.5% | 10 Feb, 2022 | |
SAP Multiple Products HTTP Request Smuggling Vulnerability CVE-2022-22536 | CriticalExploited | 97.9% | 09 Feb, 2022 | |
Oracle Fusion Middleware Unspecified Vulnerability CVE-2021-35587 | CriticalExploited | 96.3% | 19 Jan, 2022 | |
NUUO NVRmini2 Devices Missing Authentication Vulnerability CVE-2022-23227 | CriticalExploited | 48.5% | 14 Jan, 2022 | |
Zabbix Frontend Authentication Bypass Vulnerability CVE-2022-23131 | CriticalExploited | 95.7% | 13 Jan, 2022 | |
Apache Log4j2 Deserialization of Untrusted Data Vulnerability CVE-2021-45046 | CriticalExploited | 100.0% | 14 Dec, 2021 | |
Zoho Desktop Central Authentication Bypass Vulnerability CVE-2021-44515 | CriticalExploited | 99.9% | 12 Dec, 2021 | |
Apache Log4j2 Remote Code Execution Vulnerability CVE-2021-44228 | CriticalExploited | 100.0% | 10 Dec, 2021 | |
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CVE-2021-44529 | CriticalExploited | 99.1% | 08 Dec, 2021 | |
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability CVE-2021-20038 | CriticalExploited | 99.9% | 08 Dec, 2021 | |
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability CVE-2021-23758 | CriticalExploited | 82.6% | 03 Dec, 2021 | |
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CVE-2021-44077 | CriticalExploited | 93.3% | 29 Nov, 2021 | |
Roundcube Webmail SQL Injection Vulnerability CVE-2021-44026 | CriticalExploited | 69.9% | 19 Nov, 2021 | |
Sitecore XP Remote Command Execution Vulnerability CVE-2021-42237 | CriticalExploited | 97.6% | 05 Nov, 2021 | |
BQE BillQuick Web Suite SQL Injection Vulnerability CVE-2021-42258 | CriticalExploited | 75.2% | 22 Oct, 2021 | |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability CVE-2021-27561 | CriticalExploited | 82.9% | 15 Oct, 2021 | |
Google Chromium Portals Use-After-Free Vulnerability CVE-2021-37973 | CriticalExploited | 11.7% | 08 Oct, 2021 | |
Google Chromium Indexed DB API Use-After-Free Vulnerability CVE-2021-30633 | CriticalExploited | 33.2% | 08 Oct, 2021 | |
Apache HTTP Server Path Traversal Vulnerability CVE-2021-42013 | CriticalExploited | 100.0% | 07 Oct, 2021 | |
Apache HTTP Server Path Traversal Vulnerability CVE-2021-41773 | CriticalExploited | 100.0% | 05 Oct, 2021 | |
Citrix ShareFile Improper Access Control Vulnerability CVE-2021-22941 | CriticalExploited | 53.6% | 23 Sep, 2021 | |
VMware vCenter Server File Upload Vulnerability CVE-2021-22005 | CriticalExploited | 100.0% | 23 Sep, 2021 | |
Hikvision Improper Input Validation CVE-2021-36260 | CriticalExploited | 99.9% | 22 Sep, 2021 | |
Apache HTTP Server-Side Request Forgery (SSRF) CVE-2021-40438 | CriticalExploited | 100.0% | 16 Sep, 2021 | |
Dahua IP Camera Authentication Bypass Vulnerability CVE-2021-33045 | CriticalExploited | 99.6% | 15 Sep, 2021 | |
Dahua IP Camera Authentication Bypass Vulnerability CVE-2021-33044 | CriticalExploited | 100.0% | 15 Sep, 2021 | |
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability CVE-2021-38647 | CriticalExploited | 99.9% | 15 Sep, 2021 | |
Aviatrix Controller Unrestricted Upload of File CVE-2021-40870 | CriticalExploited | 93.0% | 13 Sep, 2021 | |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability CVE-2021-40539 | CriticalExploited | 99.0% | 07 Sep, 2021 | |
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability CVE-2021-37415 | CriticalExploited | 99.8% | 01 Sep, 2021 | |
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability CVE-2021-26084 | CriticalExploited | 100.0% | 30 Aug, 2021 | |
Account Takeover in Octobercms CVE-2021-32648, GHSA-mxr5-mc97-63rc | CriticalExploited | 90.4% | 26 Aug, 2021 | Packagist october/system |
Realtek AP-Router SDK Buffer Overflow Vulnerability CVE-2021-35395 | CriticalExploited | 98.1% | 16 Aug, 2021 | |
Realtek Jungle SDK Remote Code Execution Vulnerability CVE-2021-35394 | CriticalExploited | 99.9% | 16 Aug, 2021 | |
Sunhillo SureLine OS Command Injection Vulnerablity CVE-2021-36380 | CriticalExploited | 97.8% | 13 Aug, 2021 | |
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability CVE-2021-20028 | CriticalExploited | 30.1% | 04 Aug, 2021 | |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability CVE-2021-35464 | CriticalExploited | 100.0% | 22 Jul, 2021 | |
SolarWinds Serv-U Remote Code Execution Vulnerability CVE-2021-35211 | CriticalExploited | 91.2% | 14 Jul, 2021 | |
Microsoft Exchange Server Privilege Escalation Vulnerability CVE-2021-34523 | CriticalExploited | 100.0% | 14 Jul, 2021 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-34473 | CriticalExploited | 100.0% | 14 Jul, 2021 | |
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability CVE-2021-30116 | CriticalExploited | 85.7% | 09 Jul, 2021 | |
GitLab Server-Side Request Forgery (SSRF) Vulnerability CVE-2021-22175 | CriticalExploited | 53.4% | 11 Jun, 2021 | |
Checkbox Survey Deserialization of Untrusted Data Vulnerability CVE-2021-27852 | CriticalExploited | 30.3% | 27 May, 2021 | |
VMware vCenter Server Improper Input Validation Vulnerability CVE-2021-21985 | CriticalExploited | 100.0% | 26 May, 2021 | |
QNAP NAS Improper Authorization Vulnerability CVE-2021-28799 | CriticalExploited | 78.3% | 13 May, 2021 |