CVE-2020-1699: Schwachstellen-Eintrag (NVD)
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.
Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-17 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
CVE-2022-44363 | Tenda i21 1.0.0.14 /goform/setSnmpInfo buffer overflow (EUVD-2022-47308)
A vulnerability was found in Tenda i21 1.0.0.14. It has been declared as critical. Affected by this issue is some unknown functionality of the file /goform/setSnmpInfo. The manipulation results in buffer overflow. This vulnerability is know
CVE-2022-44362 | Tenda i21 1.0.0.14 /goform/AddSysLogRule buffer overflow (EUVD-2022-47307)
A vulnerability was found in Tenda i21 1.0.0.14. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/AddSysLogRule. The manipulation leads to buffer overflow. This vulnerability
CVE-2022-44361 | ZZCMS 2022 admin/ad_list.php cross site scripting (EUVD-2022-47306)
A vulnerability labeled as problematic has been found in ZZCMS 2022. This impacts an unknown function of the file admin/ad_list.php. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2022-44361.
CVE-2022-44355 | SolarView Compact 7.0 /network_test.php cross site scripting (EUVD-2022-47300)
A vulnerability classified as problematic was found in SolarView Compact 7.0. Affected by this issue is some unknown functionality of the file /network_test.php. The manipulation results in cross site scripting. This vulnerability was named
CVE-2026-91102 | HP HPLIP up to 3.26.5 privileges management (Nessus ID 346884)
A vulnerability identified as critical has been detected in HP HPLIP up to 3.26.5. This vulnerability affects unknown code. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-91102. It is possi
CVE-2026-91098 | HP HPLIP up to 3.26.5 privilege escalation (Nessus ID 346883)
A vulnerability described as critical has been identified in HP HPLIP up to 3.26.5. This vulnerability affects unknown code. The manipulation results in privilege escalation. This vulnerability was named CVE-2026-91098. The attack may be pe
CVE-2026-91105 | HP HPLIP up to 3.26.5 privileges management (Nessus ID 346885)
A vulnerability was found in HP HPLIP up to 3.26.5. It has been classified as critical. Affected is an unknown function. This manipulation causes improper privilege management. This vulnerability is registered as CVE-2026-91105. Remote expl
CVE-2022-44351 | Zorlan Skycaiji 2.5.1 Mystore.php deserialization (Issue 46 / EUVD-2022-47296)
A vulnerability, which was classified as problematic, was found in Zorlan Skycaiji 2.5.1. This issue affects some unknown processing of the file /SkycaijiApp/admin/controller/Mystore.php. Executing a manipulation can lead to deserialization
CVE-2022-44354 | SolarView Compact 4.0/5.0 unrestricted upload (EUVD-2022-47299)
A vulnerability was found in SolarView Compact 4.0/5.0. It has been rated as problematic. This affects an unknown part. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2022-44354. The attacker
CVE-2022-44349 | NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 cross site scripting (EUVD-2022-47294)
A vulnerability has been found in NAVBLUE S.A.S N-Ops &amp; Crew 22.5-rc.50 and classified as problematic. The affected element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability was na
CVE-2022-44348 | Sanitization Management System 1.0 update_status.php ID sql injection (EUVD-2022-47293)
A vulnerability was found in Sanitization Management System 1.0. It has been classified as critical. Impacted is an unknown function of the file /php-sms/admin/orders/update_status.php. This manipulation of the argument ID causes sql inject
CVE-2022-44347 | Sanitization Management System 1.0 view_inquiry ID sql injection (EUVD-2022-47292)
A vulnerability was found in Sanitization Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php-sms/admin/?page=inquiries/view_inquiry. The manipulation of the argument ID results in s
CVE-2026-20707 | Intel Xeon Scalable Processors race condition (Nessus ID 346889)
A vulnerability described as critical has been identified in Intel Xeon Scalable Processors. The affected element is an unknown function. The manipulation results in race condition. This vulnerability was named CVE-2026-20707. The attack ne
CVE-2026-20901 | Intel Xeon Processors Firmware input validation (Nessus ID 346889)
A vulnerability categorized as problematic has been discovered in Intel Xeon Processors. Affected is an unknown function of the component Firmware. Executing a manipulation can lead to improper input validation. The identification of this v
CVE-2026-91097 | HP Linux Imaging and Printing Software up to 3.26.5 privileges management (Nessus ID 346887)
A vulnerability marked as critical has been reported in HP Linux Imaging and Printing Software up to 3.26.5. This affects an unknown part. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as
CVE-2026-20760 | Intel Processors Microcode privileges management (Nessus ID 346889)
A vulnerability categorized as very critical has been discovered in Intel Processors. The impacted element is an unknown function of the component Microcode. Executing a manipulation can lead to improper privilege management. This vulnerabi
CVE-2026-20713 | Intel Xeon processors control flow (Nessus ID 346889)
A vulnerability classified as problematic has been found in Intel Xeon processors. The impacted element is an unknown function. This manipulation causes incorrect control flow. The identification of this vulnerability is CVE-2026-20713. The
CVE-2026-20716 | Intel Processors access control (Nessus ID 346889)
A vulnerability classified as problematic was found in Intel Processors. This affects an unknown function. Such manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-20716. The attack can only be perfo
CVE-2022-44345 | Sanitization Management System 1.0 view_quote ID sql injection (EUVD-2022-47290)
A vulnerability has been found in Sanitization Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-sms/admin/?page=quotes/view_quote. The manipulation of the argument ID leads to sql in
CVE-2022-44343 | ZhongBangKeJi CRMEB 4.4.4 information disclosure (EUVD-2022-47288)
A vulnerability was found in ZhongBangKeJi CRMEB 4.4.4. It has been declared as problematic. The affected element is an unknown function. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2022-44343.
CVE-2022-44321 | PicoC 3.2.2 lex.c LexSkipComment heap-based overflow (Issue 37 / EUVD-2022-47266)
A vulnerability was found in PicoC 3.2.2. It has been classified as critical. Affected is the function LexSkipComment of the file lex.c. The manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2022-44321. T
CVE-2022-44320 | PicoC 3.2.2 expression.c ExpressionCoerceFP heap-based overflow (Issue 37 / EUVD-2022-47265)
A vulnerability marked as critical has been reported in PicoC 3.2.2. This affects the function ExpressionCoerceFP of the file expression.c. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-
CVE-2025-35973 | Intel Processors Kernel/Hypervisor privileges management (Nessus ID 346889)
A vulnerability was found in Intel Processors. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Kernel/Hypervisor. This manipulation causes improper privilege management. This vulnerabi
CVE-2026-20917 | Intel Processors Hypervisor/Kernel information disclosure (Nessus ID 346889)
A vulnerability was found in Intel Processors. It has been classified as problematic. This affects an unknown part of the component Hypervisor/Kernel. The manipulation leads to information disclosure. This vulnerability is traded as CVE-202
CVE-2025-31936 | Intel Xeon 6 processors SMM/TDX privileges management (Nessus ID 346889 / WID-SEC-2026-2772)
A vulnerability marked as problematic has been reported in Intel Xeon 6 processors. Impacted is an unknown function of the component SMM/TDX. The manipulation leads to improper privilege management. This vulnerability is uniquely identified
CVE-2025-31938 | Intel Xeon 6 Scalable processors TDX access control (Nessus ID 346889)
A vulnerability was found in Intel Xeon 6 Scalable processors. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component TDX. The manipulation results in improper access controls. This
CVE-2026-70351 | Microsoft WebP Image Extension prior 1.2.31.0 integer overflow (Nessus ID 346896)
A vulnerability marked as critical has been reported in Microsoft WebP Image Extension. Affected by this vulnerability is an unknown functionality. This manipulation causes integer overflow. This vulnerability appears as CVE-2026-70351. The
CVE-2026-15913 | Fortra GoAnywhere MFT up to 7.10.1 path traversal (EUVD-2026-75175 / Nessus ID 346899)
A vulnerability classified as problematic was found in Fortra GoAnywhere MFT up to 7.10.1. This affects an unknown part. The manipulation results in path traversal. This vulnerability was named CVE-2026-15913. The attack may be performed fr
CVE-2026-84386 | Fortinet FortiClientWindows up to 7.2.15/7.4.7 access control (Nessus ID 346901)
A vulnerability marked as problematic has been reported in Fortinet FortiClientWindows up to 7.2.15/7.4.7. This affects an unknown function. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-84
CVE-2022-44319 | PicoC 3.2.2 cstdlib/string.c StdioBasePrintf heap-based overflow (Issue 37 / EUVD-2022-47264)
A vulnerability was found in PicoC 3.2.2 and classified as critical. This impacts the function StdioBasePrintf in the library cstdlib/string.c. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked a
CVE-2022-44318 | PicoC 3.2.2 cstdlib/string.c StringStrcat heap-based overflow (Issue 37 / EUVD-2022-47263)
A vulnerability has been found in PicoC 3.2.2 and classified as critical. This affects the function StringStrcat in the library cstdlib/string.c. Performing a manipulation results in heap-based buffer overflow. This vulnerability is identif
CVE-2022-44316 | PicoC 3.2.2 lex.c LexGetStringConstant heap-based overflow (Issue 37 / EUVD-2022-47261)
A vulnerability, which was classified as critical, has been found in PicoC 3.2.2. The affected element is the function LexGetStringConstant of the file lex.c. This manipulation causes heap-based buffer overflow. The identification of this v
CVE-2022-44317 | PicoC 3.2.2 cstdlib/stdio.c StdioOutPutc heap-based overflow (Issue 37 / EUVD-2022-47262)
A vulnerability, which was classified as critical, was found in PicoC 3.2.2. The impacted element is the function StdioOutPutc in the library cstdlib/stdio.c. Such manipulation leads to heap-based buffer overflow. This vulnerability is refe
CVE-2026-89813 | Linux Kernel up to 7.2.4 KIQ ring drm/amdgpu amdgpu_device_pre_asic_reset race condition (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 7.2.4 and classified as critical. Affected by this issue is the function amdgpu_device_pre_asic_reset of the file drm/amdgpu of the component KIQ ring. Such manipulation leads to race conditio
CVE-2026-89812 | Linux Kernel MES ring amdgpu_device_pre_asic_reset infinite loop (WID-SEC-2026-3438)
A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function amdgpu_device_pre_asic_reset of the component MES ring. This manipulation causes infinite loop. This vulnerability is
CVE-2026-89811 | Linux Kernel up to 6.18.50/7.2.4/7.3-rc1 amdkfd/MES Queue Management amdkfd evict_process_queues_cpsch/suspend_queues race condition (WID-SEC-2026-3438)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.50/7.2.4/7.3-rc1. This impacts the function evict_process_queues_cpsch/suspend_queues of the file drivers/gpu/drm/amd/amdkfd of the component
CVE-2026-89810 | Linux Kernel up to 6.18.50/7.2.4 amdkfd drm/amdkfd svm_migrate_copy_to_ram allocation of resources (WID-SEC-2026-3438)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.50/7.2.4. Impacted is the function svm_migrate_copy_to_ram of the file drm/amdkfd of the component amdkfd. The manipulation results in allocation of
CVE-2026-89808 | Linux Kernel up to 6.18.50/7.2.4 amdkfd svm_migrate_copy_memory_gart uninitialized variable (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.18.50/7.2.4. It has been rated as very critical. This issue affects the function svm_migrate_copy_memory_gart of the file drivers/gpu/drm/amd/amdkfd of the component amdkfd. The manipulation
CVE-2026-89809 | Linux Kernel up to 7.2.4/7.3-rc1 amdkfd mqds pqm_debugfs_mqds pqn null pointer dereference (WID-SEC-2026-3438)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.2.4/7.3-rc1. Affected is the function pqm_debugfs_mqds of the file /sys/kernel/debug/kfd/mqds of the component amdkfd. The manipulation of the argument
CVE-2026-89807 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 amdkfd amdkfd.c create_queue_cpsch/create_queue_nocpsch null pointer dereference (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.12.109/6.18.50/7.2.4. It has been declared as problematic. This vulnerability affects the function create_queue_cpsch/create_queue_nocpsch of the file drivers/gpu/drm/amd/amdkfd/amdkfd.c of
CVE-2026-89806 | Linux Kernel up to 6.18.50/7.2.4/7.3-rc1 Sysfb drm/sysfb integer overflow (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.18.50/7.2.4/7.3-rc1. It has been classified as very critical. This affects an unknown part of the file drm/sysfb of the component Sysfb. Performing a manipulation results in integer overflow
CVE-2022-44315 | PicoC 3.2.2 expression.c ExpressionAssign heap-based overflow (Issue 37 / EUVD-2022-47260)
A vulnerability classified as critical was found in PicoC 3.2.2. Impacted is the function ExpressionAssign of the file expression.c. The manipulation results in heap-based buffer overflow. This vulnerability was named CVE-2022-44315. The at
CVE-2022-44314 | PicoC 3.2.2 cstdlib/string.c StringStrncpy heap-based overflow (Issue 37 / EUVD-2022-47259)
A vulnerability classified as critical has been found in PicoC 3.2.2. This issue affects the function StringStrncpy in the library cstdlib/string.c. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identi
CVE-2022-44313 | PicoC 3.2.2 expression.c ExpressionCoerceUnsignedInteger heap-based overflow (Issue 37 / EUVD-2022-47258)
A vulnerability labeled as critical has been found in PicoC 3.2.2. Affected by this issue is the function ExpressionCoerceUnsignedInteger of the file expression.c. Such manipulation leads to heap-based buffer overflow. This vulnerability is
CVE-2022-44312 | PicoC 3.2.2 expression.c ExpressionCoerceInteger heap-based overflow (Issue 37 / EUVD-2022-47257)
A vulnerability identified as critical has been detected in PicoC 3.2.2. Affected by this vulnerability is the function ExpressionCoerceInteger of the file expression.c. This manipulation causes heap-based buffer overflow. This vulnerabilit
CVE-2022-44311 | html2xhtml 1.3 HTML File procesador.c elm_close out-of-bounds (Issue 19 / EUVD-2022-47256)
A vulnerability categorized as problematic has been discovered in html2xhtml 1.3. Affected is the function elm_close of the file procesador.c of the component HTML File Handler. The manipulation results in out-of-bounds read. This vulnerabi
CVE-2022-44299 | SiteServerCMS 7.1.3 information disclosure (Issue 3491 / EUVD-2022-47246)
A vulnerability was found in SiteServerCMS 7.1.3 and classified as problematic. This affects an unknown part. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2022-44299. The attac
CVE-2022-44298 | SiteServer CMS 7.1.3 sql injection (Issue 3492 / EUVD-2022-47245)
A vulnerability labeled as critical has been found in SiteServer CMS 7.1.3. Impacted is an unknown function. The manipulation results in sql injection. This vulnerability is reported as CVE-2022-44298. The attacker must have access to the l
CVE-2022-44297 | SiteServer CMS 7.1.3 sql injection (Issue 3490 / EUVD-2022-47244)
A vulnerability was found in SiteServer CMS 7.1.3. It has been classified as critical. The impacted element is an unknown function. Performing a manipulation results in sql injection. This vulnerability is reported as CVE-2022-44297. The at
CVE-2022-44296 | oretnom23 Sanitization Management System 1.0 manage_remark.php ID sql injection (EUVD-2022-47243)
A vulnerability classified as critical has been found in oretnom23 Sanitization Management System 1.0. The affected element is an unknown function of the file /php-sms/admin/quotes/manage_remark.php. Performing a manipulation of the argumen
CVE-2022-44295 | oretnom23 Sanitization Management System 1.0 assign_team.php ID sql injection (EUVD-2022-47242)
A vulnerability described as critical has been identified in oretnom23 Sanitization Management System 1.0. Impacted is an unknown function of the file /php-sms/admin/orders/assign_team.php. Such manipulation of the argument ID leads to sql
How to Protect Your Linux System from Flatpak Security Issues (2026)
Flatpak 1.18.1 patched 10 security vulnerabilities including a critical sandbox escape (CVE-2026-34078). This guide walks you through checking your Flatpak version, updating on Ubuntu, Fedora, and Arch Linux, auditing app permissions with F
CVE-2026-93386 | Google Chrome up to 153.0.8010.47 WebAppInstalls information disclosure (EUVD-2026-82490)
A vulnerability was found in Google Chrome. It has been rated as problematic. This impacts an unknown function of the component WebAppInstalls. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-9
CVE-2026-93426 | SigNoz up to 0.141.x Query Range API sql injection (EUVD-2026-82493)
A vulnerability was found in SigNoz up to 0.141.x and classified as critical. This issue affects some unknown processing of the component Query Range API. Such manipulation leads to sql injection. This vulnerability is referenced as CVE-202
CVE-2026-73638 | Imager up to 1.034 tiff_load_ifd out-of-bounds (EUVD-2026-82491)
A vulnerability, which was classified as problematic, was found in Imager up to 1.034. This affects the function tiff_load_ifd. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-73638. The attack may be p
CVE-2026-73639 | Imager 1.003 PNG read_direct8 buffer overflow (EUVD-2026-82492)
A vulnerability, which was classified as problematic, has been found in Imager 1.003. Affected by this issue is the function read_direct8 of the component PNG. The manipulation leads to buffer overflow. This vulnerability is uniquely identi
CVE-2026-16750 | Stylemix Motors Plugin up to 1.4.120 on WordPress mvl_ajax_dealer_load_cars improper authorization (EUVD-2026-82494)
A vulnerability classified as problematic was found in Stylemix Motors Plugin up to 1.4.120 on WordPress. This impacts the function mvl_ajax_dealer_load_cars. Executing a manipulation can lead to improper authorization. This vulnerability a
CVE-2026-16582 | melograno Booking for Appointments and Events Calendar Plugin improper authorization (EUVD-2026-82495)
A vulnerability described as problematic has been identified in melograno Booking for Appointments and Events Calendar Plugin up to 2.4.5 on WordPress. The impacted element is an unknown function. Such manipulation of the argument package-r
CVE-2026-14311 | melograno Booking for Appointments and Events Calendar Plugin /users/customers/ improper authorization (EUVD-2026-82496)
A vulnerability classified as critical has been found in melograno Booking for Appointments and Events Calendar Plugin up to 2.4.4 on WordPress. This affects an unknown function of the file /users/customers/. Performing a manipulation resul
CVE-2023-4751 | vim up to 9.0.1247 heap-based overflow
A vulnerability was found in vim and classified as critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is registered as CVE-2023-4751. The attac