Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability CVE-2024-3393 | HighExploited | 29.1% | 27 Dec, 2024 | |
Linux Kernel Out-of-Bounds Read Vulnerability CVE-2024-53150 | HighExploited | 1.4% | 24 Dec, 2024 | |
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability CVE-2024-12686 | HighExploited | 32.2% | 18 Dec, 2024 | |
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled CVE-2024-56145, GHSA-2p6p-9rc9-62j9 | CriticalExploited | 97.4% | 18 Dec, 2024 | Packagist craftcms/cms |
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability CVE-2024-12356 | CriticalExploited | 87.3% | 17 Dec, 2024 | |
Cleo Multiple Products Unauthenticated File Upload Vulnerability CVE-2024-55956 | CriticalExploited | 94.0% | 13 Dec, 2024 | |
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability CVE-2024-49138 | HighExploited | 26.2% | 12 Dec, 2024 | |
Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550 | LowExploited | 38.2% | 10 Dec, 2024 | |
Linux Kernel Out-of-Bounds Write Vulnerability CVE-2024-53104 | HighExploited | 3.4% | 02 Dec, 2024 | |
Zyxel Multiple Firewalls Path Traversal Vulnerability CVE-2024-11667 | CriticalExploited | 2.9% | 27 Nov, 2024 | |
Microsoft Partner Center Improper Access Control Vulnerability CVE-2024-49035 | CriticalExploited | 1.3% | 26 Nov, 2024 | |
ProjectSend Improper Authentication Vulnerability CVE-2024-11680 | CriticalExploited | 91.8% | 26 Nov, 2024 | |
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-44309 | MediumExploited | 21.9% | 20 Nov, 2024 | |
Apple Multiple Products Code Execution Vulnerability CVE-2024-44308 | HighExploited | 9.9% | 20 Nov, 2024 | |
Linux Kernel Use of Uninitialized Resource Vulnerability CVE-2024-50302 | MediumExploited | 0.8% | 19 Nov, 2024 | |
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability CVE-2024-21287 | HighExploited | 1.7% | 18 Nov, 2024 | |
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability CVE-2024-9474 | MediumExploited | 93.8% | 18 Nov, 2024 | |
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-0012 | CriticalExploited | 99.8% | 18 Nov, 2024 | |
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability CVE-2024-11182 | MediumExploited | 33.3% | 15 Nov, 2024 | |
GeoVision Devices OS Command Injection Vulnerability CVE-2024-11120 | CriticalExploited | 28.4% | 15 Nov, 2024 | |
Android Framework Privilege Escalation Vulnerability CVE-2024-43093 | HighExploited | 0.7% | 13 Nov, 2024 | |
Citrix Session Recording Deserialization of Untrusted Data Vulnerability CVE-2024-8069 | MediumExploited | 21.1% | 12 Nov, 2024 | |
Citrix Session Recording Improper Privilege Management Vulnerability CVE-2024-8068 | MediumExploited | 3.5% | 12 Nov, 2024 | |
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability CVE-2024-49039 | HighExploited | 14.2% | 12 Nov, 2024 | |
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability CVE-2024-43451 | MediumExploited | 84.3% | 12 Nov, 2024 | |
CyberPanel Incorrect Default Permissions Vulnerability CVE-2024-51567 | CriticalExploited | 84.4% | 29 Oct, 2024 | |
CyberPanel Incorrect Default Permissions Vulnerability CVE-2024-51378 | CriticalExploited | 94.7% | 29 Oct, 2024 | |
Cleo Multiple Products Unrestricted File Upload Vulnerability CVE-2024-50623 | CriticalExploited | 98.6% | 28 Oct, 2024 | |
Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-20481 | MediumExploited | 15.9% | 23 Oct, 2024 | |
Fortinet FortiManager Missing Authentication Vulnerability CVE-2024-47575 | CriticalExploited | 94.8% | 23 Oct, 2024 | |
Mitel MiCollab Path Traversal Vulnerability CVE-2024-41713 | CriticalExploited | 97.2% | 21 Oct, 2024 | |
ScienceLogic SL1 Unspecified Vulnerability CVE-2024-9537 | CriticalExploited | 3.8% | 18 Oct, 2024 | |
Palo Alto Networks Expedition SQL Injection Vulnerability CVE-2024-9465 | CriticalExploited | 99.6% | 09 Oct, 2024 | |
Palo Alto Networks Expedition OS Command Injection Vulnerability CVE-2024-9463 | CriticalExploited | 98.5% | 09 Oct, 2024 | |
Mozilla Firefox Use-After-Free Vulnerability CVE-2024-9680 | CriticalExploited | 23.2% | 09 Oct, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43573 | HighExploited | 46.1% | 08 Oct, 2024 | |
Microsoft Windows Management Console Remote Code Execution Vulnerability CVE-2024-43572 | HighExploited | 66.7% | 08 Oct, 2024 | |
Microsoft Configuration Manager SQL Injection Vulnerability CVE-2024-43468 | CriticalExploited | 81.0% | 08 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability CVE-2024-9380 | HighExploited | 58.3% | 08 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability CVE-2024-9379 | HighExploited | 44.3% | 08 Oct, 2024 | |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2024-43047 | HighExploited | 0.7% | 07 Oct, 2024 | |
Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability CVE-2024-45519 | CriticalExploited | 99.9% | 02 Oct, 2024 | |
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CVE-2024-8963 | CriticalExploited | 98.6% | 19 Sep, 2024 | |
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8957 | HighExploited | 79.8% | 17 Sep, 2024 | |
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability CVE-2024-8956 | CriticalExploited | 58.8% | 17 Sep, 2024 | |
VMware vCenter Server Privilege Escalation Vulnerability CVE-2024-38813 | CriticalExploited | 17.4% | 17 Sep, 2024 | |
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38812 | CriticalExploited | 54.6% | 17 Sep, 2024 | |
Ivanti Cloud Services Appliance OS Command Injection Vulnerability CVE-2024-8190 | HighExploited | 88.5% | 10 Sep, 2024 | |
Microsoft Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 | HighExploited | 54.5% | 10 Sep, 2024 | |
Microsoft Publisher Protection Mechanism Failure Vulnerability CVE-2024-38226 | HighExploited | 2.7% | 10 Sep, 2024 |