Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2021-31166 | CriticalExploited | 99.9% | 11 May, 2021 | |
Tenda AC11 Router Stack Buffer Overflow Vulnerability CVE-2021-31755 | CriticalExploited | 86.5% | 07 May, 2021 | |
ASUS Routers Improper Authentication Vulnerability CVE-2021-32030 | CriticalExploited | 99.4% | 06 May, 2021 | |
Cisco HyperFlex HX Data Platform Command Injection Vulnerability CVE-2021-1498 | CriticalExploited | 100.0% | 06 May, 2021 | |
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability CVE-2021-1497 | CriticalExploited | 99.9% | 06 May, 2021 | |
Arcadyan Buffalo Firmware Path Traversal Vulnerability CVE-2021-20090 | CriticalExploited | 100.0% | 29 Apr, 2021 | |
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability CVE-2021-22205 | CriticalExploited | 99.7% | 23 Apr, 2021 | |
Ivanti Pulse Connect Secure Use-After-Free Vulnerability CVE-2021-22893 | CriticalExploited | 47.2% | 23 Apr, 2021 | |
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability CVE-2020-2509 | CriticalExploited | 34.0% | 17 Apr, 2021 | |
SonicWall Email Security Improper Privilege Management Vulnerability CVE-2021-20021 | CriticalExploited | 88.8% | 09 Apr, 2021 | |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability CVE-2021-1871 | CriticalExploited | 7.0% | 02 Apr, 2021 | |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability CVE-2021-1870 | CriticalExploited | 7.7% | 02 Apr, 2021 | |
F5 BIG-IP Traffic Management Microkernel Buffer Overflow CVE-2021-22991 | CriticalExploited | 62.4% | 31 Mar, 2021 | |
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 | CriticalExploited | 99.9% | 31 Mar, 2021 | |
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CVE-2021-22681 | CriticalExploited | 63.6% | 03 Mar, 2021 | |
Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-26855 | CriticalExploited | 100.0% | 03 Mar, 2021 | |
Veritas Backup Exec Agent Improper Authentication Vulnerability CVE-2021-27877 | CriticalExploited | 64.9% | 01 Mar, 2021 | |
VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 | CriticalExploited | 99.9% | 24 Feb, 2021 | |
Accellion FTA OS Command Injection Vulnerability CVE-2021-27104 | CriticalExploited | 56.7% | 16 Feb, 2021 | |
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability CVE-2021-27103 | CriticalExploited | 11.4% | 16 Feb, 2021 | |
Accellion FTA SQL Injection Vulnerability CVE-2021-27101 | CriticalExploited | 6.0% | 16 Feb, 2021 | |
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CVE-2021-22502 | CriticalExploited | 96.7% | 08 Feb, 2021 | |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability CVE-2021-20016 | CriticalExploited | 40.0% | 04 Feb, 2021 | |
QNAP Helpdesk Improper Access Control Vulnerability CVE-2020-2506 | CriticalExploited | 2.0% | 03 Feb, 2021 | |
D-Link DNS-320 Device Command Injection Vulnerability CVE-2020-25506 | CriticalExploited | 100.0% | 02 Feb, 2021 | |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability CVE-2020-29557 | CriticalExploited | 55.7% | 29 Jan, 2021 | |
ONLYOFFICE Docs Server Path Traversal Vulnerability CVE-2021-3199 | CriticalExploited | 30.2% | 26 Jan, 2021 | |
Unauthenticated remote code execution in Ignition CVE-2021-3129, GHSA-4qwp-7c67-jmcc | CriticalExploited | 99.9% | 12 Jan, 2021 | Packagist facade/ignition |
Google Chrome Use-After-Free Vulnerability CVE-2020-16017 | CriticalExploited | 2.7% | 08 Jan, 2021 | |
SolarWinds Orion Authentication Bypass Vulnerability CVE-2020-10148 | CriticalExploited | 92.0% | 29 Dec, 2020 | |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability CVE-2020-29583 | CriticalExploited | 90.2% | 22 Dec, 2020 | |
CyberoamOS (CROS) SQL Injection Vulnerability CVE-2020-29574 | CriticalExploited | 4.7% | 11 Dec, 2020 | |
Apache Struts Remote Code Execution Vulnerability CVE-2020-17530 | CriticalExploited | 96.3% | 11 Dec, 2020 | |
Multiple VMware Products Command Injection Vulnerability CVE-2020-4006 | CriticalExploited | 17.3% | 23 Nov, 2020 | |
Authentication bypass in Apache Airflow BIT-airflow-2020-13927, CVE-2020-13927, GHSA-hhx9-p69v-cx2j, PYSEC-2020-18 | CriticalExploited | 99.8% | 10 Nov, 2020 | PyPI apache-airflow |
SaltStack Salt Command Injection in netapi ssh client CVE-2020-16846, GHSA-qr38-h96j-2j3w, PYSEC-2020-104 | CriticalExploited | 99.6% | 06 Nov, 2020 | PyPI salt |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability CVE-2020-16010 | CriticalExploited | 6.4% | 03 Nov, 2020 | |
Google Chrome FreeType Heap Buffer Overflow Vulnerability CVE-2020-15999 | CriticalExploited | 63.9% | 03 Nov, 2020 | |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14750 | CriticalExploited | 99.2% | 02 Nov, 2020 | |
QNAP NAS File Station Command Injection Vulnerability CVE-2018-19949 | CriticalExploited | 30.2% | 28 Oct, 2020 | |
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14882 | CriticalExploited | 100.0% | 21 Oct, 2020 | |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability CVE-2020-14871 | CriticalExploited | 80.2% | 21 Oct, 2020 | |
VMware ESXi OpenSLP Use-After-Free Vulnerability CVE-2020-3992 | CriticalExploited | 83.0% | 20 Oct, 2020 | |
SonicWall SonicOS Buffer Overflow Vulnerability CVE-2020-5135 | CriticalExploited | 26.9% | 12 Oct, 2020 | |
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability CVE-2020-26919 | CriticalExploited | 57.5% | 09 Oct, 2020 | |
Sophos SG UTM Remote Code Execution Vulnerability CVE-2020-25223 | CriticalExploited | 96.8% | 25 Sep, 2020 | |
WordPress File Manager Plugin Remote Code Execution Vulnerability CVE-2020-25213 | CriticalExploited | 97.3% | 09 Sep, 2020 | |
Fuel CMS SQL Injection Vulnerability CVE-2020-17463 | CriticalExploited | 89.7% | 13 Aug, 2020 | |
vBulletin PHP Module Remote Code Execution Vulnerability CVE-2020-17496 | CriticalExploited | 87.5% | 12 Aug, 2020 | |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability CVE-2020-12812 | CriticalExploited | 45.4% | 24 Jul, 2020 |