Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability CVE-2015-2590 | CriticalExploited | 25.5% | 16 Jul, 2015 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2015-5123 | CriticalExploited | 18.8% | 14 Jul, 2015 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2015-5122 | CriticalExploited | 87.0% | 14 Jul, 2015 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2015-5119 | CriticalExploited | 98.6% | 08 Jul, 2015 | |
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CVE-2015-3113 | CriticalExploited | 99.8% | 23 Jun, 2015 | |
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability CVE-2015-4068 | CriticalExploited | 63.6% | 29 May, 2015 | |
ProFTPD Improper Access Control Vulnerability CVE-2015-3306 | CriticalExploited | 99.5% | 18 May, 2015 | |
Realtek SDK Improper Input Validation Vulnerability CVE-2014-8361 | CriticalExploited | 100.0% | 01 May, 2015 | |
Adobe Flash Player Memory Corruption Vulnerability CVE-2015-3043 | CriticalExploited | 73.9% | 14 Apr, 2015 | |
Microsoft HTTP.sys Remote Code Execution Vulnerability CVE-2015-1635 | CriticalExploited | 100.0% | 14 Apr, 2015 | |
Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command CVE-2014-9462, GHSA-3pmw-h7j4-rf54, PYSEC-2015-14 | Critical | 4.2% | 31 Mar, 2015 | PyPI mercurial |
Dulwich Arbitrary code execution via commit with directory path starting with .git CVE-2014-9706, GHSA-4j5j-58j7-6c3w, PYSEC-2015-34 | Critical | 5.0% | 31 Mar, 2015 | PyPI dulwich |
Dulwich Buffer Overflow when handling pack files CVE-2015-0838, GHSA-vjjf-3rvg-gv3v, PYSEC-2015-35 | Critical | 3.4% | 31 Mar, 2015 | PyPI dulwich |
dns-sync command injection vulnerability CVE-2014-9682, GHSA-q5pq-pgrv-fh89 | Critical | 2.8% | 28 Feb, 2015 | npm dns-sync |
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability CVE-2015-1427 | CriticalExploited | 99.9% | 17 Feb, 2015 | |
Adobe Flash Player Use-After-Free Vulnerability CVE-2015-0313 | CriticalExploited | 95.3% | 02 Feb, 2015 | |
Adobe Flash Player Remote Code Execution Vulnerability CVE-2015-0311 | CriticalExploited | 85.6% | 23 Jan, 2015 | |
Django-piston and Django-tastypie do not properly deserialize YAML data CVE-2011-4103, GHSA-pvhp-v9qp-xf5r, PYSEC-2014-24 | Critical | 2.4% | 27 Oct, 2014 | PyPI django-piston |
Django Tastypie Improper Deserialization of YAML Data CVE-2011-4104, GHSA-qgvw-qc2q-gv5q, PYSEC-2014-25 | Critical | 2.4% | 27 Oct, 2014 | PyPI django-tastypie |
python-gnupg vulnerable to shell injection CVE-2014-1929, GHSA-vcr5-xr9h-mvc5, PYSEC-2014-92 | Critical | 0.4% | 25 Oct, 2014 | PyPI python-gnupg |
Arbitrary JavaScript Execution in bassmaster CVE-2014-7205, GHSA-5j3g-jfq3-7jwx | Critical | 78.6% | 08 Oct, 2014 | npm bassmaster |
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability CVE-2014-6287 | CriticalExploited | 99.3% | 07 Oct, 2014 | |
Plone python code injection CVE-2012-5495, GHSA-w6pw-5gh5-4952, PYSEC-2014-37 | Critical | 1.7% | 30 Sep, 2014 | PyPI plone |
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-7169 | CriticalExploited | 99.9% | 25 Sep, 2014 | |
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-6271 | CriticalExploited | 100.0% | 24 Sep, 2014 | |
Adobe Reader and Acrobat Sandbox Bypass Vulnerability CVE-2014-0546 | CriticalExploited | 22.3% | 12 Aug, 2014 | |
TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash CVE-2014-3945, GHSA-h7wf-jg4f-x2wc | Critical | 1.6% | 03 Jun, 2014 | Packagist typo3/cms |
API Admin Auth Weakness in tomato CVE-2013-7379, GHSA-9vxc-g2jx-qj3p | Critical | 2.5% | 16 May, 2014 | npm tomato |
Django Vulnerable to Cache Poisoning CVE-2014-1418, GHSA-q7q2-qf2q-rw3w, PYSEC-2014-19 | Critical | 2.6% | 16 May, 2014 | PyPI Django PyPI django |
Pillow command injection CVE-2014-3007, GHSA-8m9x-pxwq-j236, PYSEC-2014-87 | Critical | 10.4% | 27 Apr, 2014 | PyPI pillow |
Microsoft Internet Explorer Memory Corruption Vulnerability CVE-2014-1776 | CriticalExploited | 82.7% | 27 Apr, 2014 | |
InduSoft Web Studio NTWebServer Directory Traversal Vulnerability CVE-2014-0780 | CriticalExploited | 74.7% | 25 Apr, 2014 | |
Code Injection in Django CVE-2014-0472, GHSA-rvq6-mrpv-m6rm, PYSEC-2014-1 | Critical | 5.8% | 23 Apr, 2014 | PyPI Django PyPI django |
Python Swift client is vulnerable to Missing SSL Certificate Check CVE-2013-6396, GHSA-p3xv-97g8-4wmj, PYSEC-2014-12 | Critical | 0.7% | 18 Feb, 2014 | PyPI python-swiftclient |
Heap Based Buffer Overflow in libyaml CVE-2013-6393, GHSA-m75h-cghq-c8h5 | Critical | 7.4% | 06 Feb, 2014 | npm libyaml |
Adobe Flash Player Integer Underflow Vulnerablity CVE-2014-0497 | CriticalExploited | 99.9% | 05 Feb, 2014 | |
EC-CUBE vulnerable to authorization bypass CVE-2014-0808, GHSA-j2hg-w4p4-6rvm | Critical | 2.2% | 22 Jan, 2014 | Packagist ec-cube/ec-cube |
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize CVE-2013-6288, GHSA-7m7g-jq4m-98w5 | Critical | 2.2% | 28 Oct, 2013 | Packagist apache-solr-for-typo3/solr |
graphite-web is vulnerable to Remote Code Execution via renderLocalView function CVE-2013-5093, GHSA-m923-w2gj-v43g, PYSEC-2013-3 | Critical | 38.7% | 27 Sep, 2013 | PyPI graphite-web |
graphite-web is vulnerable to Remote Code Execution CVE-2013-5942, GHSA-ch3j-w953-hfcm, PYSEC-2013-34 | Critical | 2.1% | 27 Sep, 2013 | PyPI graphite-web |
HP Multiple Products Remote Code Execution Vulnerability CVE-2013-4810 | CriticalExploited | 79.5% | 16 Sep, 2013 | |
Adobe Reader and Acrobat Memory Corruption Vulnerability CVE-2013-3346 | CriticalExploited | 78.9% | 30 Aug, 2013 | |
Apache Struts Improper Input Validation Vulnerability CVE-2013-2251 | CriticalExploited | 100.0% | 20 Jul, 2013 | |
Deserialization Code Execution in js-yaml CVE-2013-4660, GHSA-xxvw-45rp-3mj2 | Critical | 17.3% | 28 Jun, 2013 | npm js-yaml |
Oracle Java SE Unspecified Vulnerability CVE-2013-2465 | CriticalExploited | 98.8% | 18 Jun, 2013 | |
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability CVE-2013-2729 | CriticalExploited | 66.6% | 16 May, 2013 | |
Zend Framework XXE Vulnerability CVE-2012-3363, GHSA-7pg4-5233-82jv | Critical | 49.3% | 13 Feb, 2013 | Packagist zendframework/zendframework1 |
Adobe ColdFusion Authentication Bypass Vulnerability CVE-2013-0632 | CriticalExploited | 93.1% | 17 Jan, 2013 | |
Oracle JRE Remote Code Execution Vulnerability CVE-2013-0422 | CriticalExploited | 97.1% | 10 Jan, 2013 | |
Adobe ColdFusion Authentication Bypass Vulnerability CVE-2013-0625 | CriticalExploited | 93.8% | 09 Jan, 2013 |