CVE-2026-81479: Schwachstellen-Eintrag (NVD)
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
```Code``` unterstützt. Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-09-24 | 2026-10-08 |
|---|---|---|
| ≥90 % | 484 | 342 |
| ≥50 % | 1436 | 1061 |
| ≥10 % | 16 | 2 |
| <10 % | 30 | 562 |
CVE-2019-16943 | Oracle Retail Merchandising System 15.0.3/16.0.2/16.0.3 Inventory Movement deserialization (Nessus ID 236644)
A vulnerability was found in Oracle Retail Merchandising System 15.0.3/16.0.2/16.0.3. It has been classified as very critical. This issue affects some unknown processing of the component Inventory Movement. Performing a manipulation results
CVE-2019-16943 | Oracle Communications Billing/Revenue Management 7.5.0.23.0/12.0.0.3.0 Business Operation Center/Billing Care deserialization (Nessus ID 236644)
A vulnerability was found in Oracle Communications Billing and Revenue Management 7.5.0.23.0/12.0.0.3.0 and classified as very critical. This vulnerability affects unknown code of the component Business Operation Center/Billing Care. The ma
CVE-2019-16943 | Oracle Database 12.2.0.1/18c/19c TFA deserialization (Nessus ID 236644)
A vulnerability, which was classified as problematic, was found in Oracle Database 12.2.0.1/18c/19c. This impacts an unknown function of the component TFA. Such manipulation leads to deserialization. This vulnerability is referenced as CVE-
CVE-2019-16943 | Oracle WebCenter Sites 12.2.1.3.0/12.2.1.4.0 deserialization (Nessus ID 236644)
A vulnerability was found in Oracle WebCenter Sites 12.2.1.3.0/12.2.1.4.0. It has been declared as very critical. This affects an unknown part of the component Sites. The manipulation results in deserialization. This vulnerability is catalo
CVE-2019-16943 | Oracle WebCenter Portal 12.2.1.3.0/12.2.1.4.0 Security Framework deserialization (Nessus ID 236644)
A vulnerability was found in Oracle WebCenter Portal 12.2.1.3.0/12.2.1.4.0. It has been classified as very critical. Affected by this issue is some unknown functionality of the component Security Framework. The manipulation leads to deseria
CVE-2019-16943 | Oracle Banking Platform up to 2.9.0 Framework deserialization (Nessus ID 236644)
A vulnerability marked as very critical has been reported in Oracle Banking Platform up to 2.9.0. This impacts an unknown function of the component Framework. The manipulation leads to deserialization. This vulnerability is uniquely identif
CVE-2019-16943 | Oracle Global Lifecycle Management NextGen OUI Framework 12.2.1.3.0/12.2.1.4.0/13.9.4.2.2 Tools deserialization (Nessus ID 236644)
A vulnerability has been found in Oracle Global Lifecycle Management NextGen OUI Framework 12.2.1.3.0/12.2.1.4.0/13.9.4.2.2 and classified as very critical. Affected is an unknown function of the component Tools. Performing a manipulation r
CVE-2019-16943 | Oracle Primavera Gateway up to 19.12.0 Admin deserialization (Nessus ID 236644)
A vulnerability described as very critical has been identified in Oracle Primavera Gateway. Affected by this vulnerability is an unknown functionality of the component Admin. Executing a manipulation can lead to deserialization. This vulner
CVE-2019-16943 | Oracle Primavera Unifier up to 19.12 Infrastructure deserialization (Nessus ID 236644)
A vulnerability classified as very critical has been found in Oracle Primavera Unifier up to 19.12. Affected by this issue is some unknown functionality of the component Infrastructure. The manipulation leads to deserialization. This vulner
CVE-2019-16943 | Oracle Communications Calendar Server 8.0.0.2.0/8.0.0.3.0 Administration deserialization (Nessus ID 212407)
A vulnerability classified as very critical has been found in Oracle Communications Calendar Server 8.0.0.2.0/8.0.0.3.0. This vulnerability affects unknown code of the component Administration. The manipulation leads to deserialization. Thi
CVE-2019-16943 | Oracle Communications Evolved Communications Application Server SDP/SCF/URD deserialization (Nessus ID 212407)
A vulnerability was found in Oracle Communications Evolved Communications Application Server 7.1 and classified as very critical. This affects an unknown function of the component SDP/SCF/URD. Executing a manipulation can lead to deserializ
CVE-2026-106584 | OpenBSD OpenSSH up to 10.5 certificate validation (WID-SEC-2026-3785)
A vulnerability was found in OpenBSD OpenSSH up to 10.5. It has been declared as problematic. Impacted is an unknown function. The manipulation results in improper certificate validation. This vulnerability is reported as CVE-2026-106584. T
CVE-2026-106582 | OpenBSD OpenSSH up to 10.5 LZ77 Dictionary Coder input validation (WID-SEC-2026-3785)
A vulnerability was found in OpenBSD OpenSSH up to 10.5 and classified as problematic. This affects an unknown function of the component LZ77 Dictionary Coder. The manipulation results in improper input validation. This vulnerability is rep
CVE-2026-106555 | OpenBSD OpenSSH up to 10.5 GSSAPIAuthentication state issue (WID-SEC-2026-3785)
A vulnerability has been found in OpenBSD OpenSSH up to 10.5 and classified as very critical. The impacted element is an unknown function of the component GSSAPIAuthentication. The manipulation leads to state issue. This vulnerability is do
CVE-2022-45892 | Planet eStream cross site scripting (EUVD-2022-48739)
A vulnerability categorized as problematic has been discovered in Planet eStream. Affected is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2022-45892. The attack may be performed
CVE-2022-45890 | Planet eStream cross site scripting (EUVD-2022-48737)
A vulnerability identified as problematic has been detected in Planet eStream. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-202
CVE-2022-45889 | Planet eStream sql injection (EUVD-2022-48736)
A vulnerability was found in Planet eStream. It has been rated as critical. This impacts an unknown function. This manipulation causes sql injection. This vulnerability is tracked as CVE-2022-45889. The attack is only possible within the lo
CVE-2022-45877 | OpenHarmony up to 3.1.4 PIN Code cleartext transmission (EUVD-2022-48728)
A vulnerability has been found in OpenHarmony up to 3.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component PIN Code Handler. Performing a manipulation results in cleartext transmissi
CVE-2019-9948 | Python up to 2.7.16 File Scheme passwd') 7pk security (RHSA-2019:1700 / ID 172341)
A vulnerability, which was classified as critical, has been found in Python up to 2.7.16. Affected by this issue is some unknown functionality in the library urllib.urlopen('local_file:/etc/passwd') of the component File Scheme Ha
CVE-2019-9947 | Python up to 2.7.16/3.7.2 urllib2 urllib.request.urlopen Query String crlf injection (RHSA-2019:1260 / Nessus ID 237346)
A vulnerability classified as critical was found in Python up to 2.7.16/3.7.2. Affected by this vulnerability is an unknown functionality in the library urllib.request.urlopen of the component urllib2. The manipulation as part of Query Stri
CVE-2019-16943 | Oracle JD Edwards EnterpriseOne Orchestrator 9.2 E1 IOT Orchestrator Security deserialization (Nessus ID 212407)
A vulnerability was found in Oracle JD Edwards EnterpriseOne Orchestrator 9.2. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component E1 IOT Orchestrator Security. The manipulation
CVE-2019-16943 | Oracle JD Edwards EnterpriseOne Tools 9.2 Monitoring/Diagnostics SEC deserialization (Nessus ID 212407)
A vulnerability categorized as very critical has been discovered in Oracle JD Edwards EnterpriseOne Tools 9.2. This affects an unknown part of the component Monitoring/Diagnostics SEC. Such manipulation leads to deserialization. This vulner
CVE-2019-16943 | FasterXML jackson-databind up to 2.9.10 JSON Endpoint deserialization (RHSA-2020:0159 / Nessus ID 212407)
A vulnerability classified as critical has been found in FasterXML jackson-databind up to 2.9.10. Impacted is an unknown function of the component JSON Endpoint. Performing a manipulation results in deserialization. This vulnerability is kn
CVE-2019-16935 | Python up to 2.7.16/3.6.9/3.7.4 XML-RPC Server Lib/DocXMLRPCServer.py server_title cross site scripting (USN-4151-1)
A vulnerability was found in Python up to 2.7.16/3.6.9/3.7.4 and classified as problematic. Affected by this vulnerability is the function server_title in the library Lib/DocXMLRPCServer.py of the component XML-RPC Server. The manipulation
CVE-2019-16056 | Oracle PeopleSoft Enterprise PeopleTools 8.57/8.58 Porting input validation
A vulnerability has been found in Oracle PeopleSoft Enterprise PeopleTools 8.57/8.58 and classified as critical. Affected is an unknown function of the component Porting. The manipulation leads to improper input validation. This vulnerabili
CVE-2019-16056 | Oracle Communications Operations Monitor 3.4/4.1/4.2/4.3 VSP implementing webserver input validation
A vulnerability classified as critical was found in Oracle Communications Operations Monitor 3.4/4.1/4.2/4.3. Impacted is an unknown function of the component VSP implementing webserver. The manipulation results in improper input validation
CVE-2019-16056 | Python up to 2.7.16/3.5.7/3.6.9/3.7.4 Email input validation (RHSA-2019:3725)
A vulnerability classified as critical has been found in Python up to 2.7.16/3.5.7/3.6.9/3.7.4. This issue affects some unknown processing of the component Email Module. This manipulation causes improper input validation. This vulnerability
CVE-2019-10160 | Python up to 3.8.0b1 Security Regression URL credentials management (RHSA-2019:1587 / ID 157999)
A vulnerability has been found in Python up to 3.8.0b1 and classified as problematic. Affected by this issue is some unknown functionality of the component Security Regression Handler. The manipulation as part of URL leads to credentials ma
CVE-2018-20852 | Oracle Communications Operations Monitor up to 4.3.0 VSP Webserver input validation
A vulnerability was found in Oracle Communications Operations Monitor 3.4.0/4.0.0/4.1.0/4.2.0/4.3.0. It has been classified as critical. This issue affects some unknown processing of the component VSP Webserver. Performing a manipulation re
CVE-2018-20852 | Python up to 3.7.2 Domain Validator Lib/http/cookiejar.py http.cookiejar.DefaultPolicy.domain_return_ok Hostname Cookie input validation (RHSA-2019:3725)
A vulnerability, which was classified as critical, has been found in Python up to 3.7.2. The affected element is the function http.cookiejar.DefaultPolicy.domain_return_ok in the library Lib/http/cookiejar.py of the component Domain Validat
CVE-2026-76488 | Cisco Application Policy Infrastructure Controller up to 6.1(2g) Export Policies access control (EUVD-2026-94469)
A vulnerability identified as problematic has been detected in Cisco Application Policy Infrastructure Controller. Affected is an unknown function of the component Export Policies. Performing a manipulation results in improper access contro
CVE-2026-76459 | Cisco NX-OS Software out-of-bounds write (EUVD-2026-94462)
A vulnerability was found in Cisco NX-OS Software, NX-OS System Software in ACI Mode and Unified Computing System. It has been rated as very critical. This affects an unknown function. This manipulation causes out-of-bounds write. This vuln
CVE-2026-87667 | Brocade Fabric OS up to 9.2.2c/10.0.0a1 Configuration Management Command-Line Utility argument injection (EUVD-2026-94695)
A vulnerability was found in Brocade Fabric OS up to 9.2.2c/10.0.0a1. It has been declared as problematic. The impacted element is an unknown function of the component Configuration Management Command-Line Utility. Executing a manipulation
CVE-2026-107448 | Wizards of the Coast Magic The Gathering Arena 2026.59.30.12801.127931.6 Home Screen Carousel Application.OpenURL input validation (EUVD-2026-94696)
A vulnerability was found in Wizards of the Coast Magic The Gathering Arena 2026.59.30.12801.127931.6. It has been classified as problematic. The affected element is the function Application.OpenURL of the component Home Screen Carousel. Pe
CVE-2026-87660 | Brocade Fabric OS up to 9.2.2c/10.0.0a1 Diagnostic Kernel privileges management (EUVD-2026-94697)
A vulnerability was found in Brocade Fabric OS up to 9.2.2c/10.0.0a1 and classified as problematic. Impacted is an unknown function of the component Diagnostic Kernel Module. Such manipulation leads to improper privilege management. This vu
Fehler im Schlüsselwechsel öffnet Dateizugriff auf MikroTik-Geräten
Über den SSH-Dienst von RouterOS können nicht angemeldete Angreifer Befehle absetzen und Dateien anlegen oder überschreiben. Diese und weitere Schwachstellen werden ausgenutzt. Patches stehen bereit. (Bild: Gemini / Vogel IT-Medien GmbH / K
CVE-2026-104044 | Red Hat Enterprise Linux/OpenShift Container Platform Kerberos denial of service (EUVD-2026-92914)
A vulnerability labeled as critical has been found in Red Hat Enterprise Linux and OpenShift Container Platform. This vulnerability affects unknown code of the component Kerberos. Executing a manipulation can lead to denial of service. This
CVE-2026-105611 | chillzhuang SpringBlade up to 5.0.1 User Detail Endpoint RoleController.java id improper authorization (Issue 42 / EUVD-2026-92936)
A vulnerability marked as problematic has been reported in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of t
CVE-2026-105571 | PickMall Lilishop up to 4.2.4 Mobile Binding bindMobile username improper authorization (Issue 148 / EUVD-2026-92918)
A vulnerability classified as critical has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argu
CVE-2026-105705 | SourceCodester Drug Recommendation System 1.0 Admin/add_drug.php cross site scripting (EUVD-2026-92948)
A vulnerability marked as problematic has been reported in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. This vulne
CVE-2022-45874 | Huawei Aslan Children Watch improper authorization (EUVD-2022-48726)
A vulnerability was found in Huawei Aslan Children Watch. It has been rated as critical. The impacted element is an unknown function. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2022-45874.
CVE-2022-45873 | systemd 250/251 shared/elf-util.c parse_elf_object deadlock (EUVD-2022-48725)
A vulnerability was found in systemd 250/251. It has been rated as problematic. This vulnerability affects the function parse_elf_object of the file shared/elf-util.c. Performing a manipulation results in deadlock. This vulnerability is kno
CVE-2022-45872 | iTerm2 up to 3.4.17 DECRQSS Response privilege escalation (EUVD-2022-48724)
A vulnerability was found in iTerm2 up to 3.4.17. It has been classified as problematic. This issue affects some unknown processing of the component DECRQSS Response Handler. Performing a manipulation results in privilege escalation. This v
CVE-2022-45871 | F-Secure Atlant fsicapd denial of service (EUVD-2022-48723)
A vulnerability described as problematic has been identified in F-Secure Atlant. Affected by this issue is some unknown functionality of the component fsicapd. Executing a manipulation can lead to denial of service. This vulnerability appea
CVE-2022-45867 | MyBB up to 1.8.32 Admin CP Languages pathname traversal (GHSA-cpfv-6f8w-759r / EUVD-2022-48720)
A vulnerability has been found in MyBB up to 1.8.32 and classified as critical. Affected by this issue is some unknown functionality of the component Admin CP Languages Module. This manipulation causes pathname traversal. The identification
CVE-2026-106553 | OpenBSD OpenSSH up to 10.5 GSSAPIAuthentication information disclosure (WID-SEC-2026-3785)
A vulnerability, which was classified as problematic, was found in OpenBSD OpenSSH up to 10.5. The affected element is an unknown function of the component GSSAPIAuthentication. Executing a manipulation can lead to information disclosure. T
CVE-2026-106552 | OpenBSD OpenSSH up to 10.5 sftp path traversal (WID-SEC-2026-3785)
A vulnerability classified as problematic has been found in OpenBSD OpenSSH up to 10.5. This vulnerability affects unknown code of the component sftp. This manipulation causes path traversal. This vulnerability is tracked as CVE-2026-106552
CVE-2026-56952 | Google Android default_msg_handlers.c platform_msg_handler_init permission (WID-SEC-2026-3786)
A vulnerability classified as critical was found in Google Android. This affects the function platform_msg_handler_init of the file default_msg_handlers.c. Executing a manipulation can lead to permission issues. This vulnerability is regist
CVE-2026-56936 | Google Android Wacom HID Driver wacom_sys.c wacom_hid_set_device_mode out-of-bounds write (WID-SEC-2026-3786)
A vulnerability described as very critical has been identified in Google Android. The affected element is the function wacom_hid_set_device_mode of the file wacom_sys.c of the component Wacom HID Driver. Such manipulation leads to out-of-bo
CVE-2026-56906 | Google Android eventpoll eventpoll.c ep_free use after free (WID-SEC-2026-3786)
A vulnerability classified as very critical has been found in Google Android. The impacted element is the function ep_free of the file eventpoll.c of the component eventpoll. Performing a manipulation results in use after free. This vulnera
CVE-2022-45866 | qpress up to 11.3 qp File pathname traversal (EUVD-2022-48719 / Nessus ID 211150)
A vulnerability, which was classified as critical, was found in qpress up to 11.3. Affected by this issue is some unknown functionality of the component qp File Handler. The manipulation results in pathname traversal. This vulnerability is
CVE-2022-45854 | Zyxel NWA110AX prior 6.50(ABTG.0)C0 VLAN Frame unusual condition (EUVD-2022-48708)
A vulnerability identified as problematic has been detected in Zyxel NWA110AX. Impacted is an unknown function of the component VLAN Frame Handler. The manipulation leads to improper check for unusual conditions. This vulnerability is liste
CVE-2022-45796 | Sharp MFP nw_interface.html command injection (EUVD-2022-48652)
A vulnerability, which was classified as critical, was found in Sharp MFP. This impacts an unknown function of the file nw_interface.html. The manipulation results in command injection. This vulnerability is cataloged as CVE-2022-45796. The
CVE-2026-55330 | Google Android Bluetooth Ccc bluetooth_ccc.cc BluetoothCccHandlerCallbackImpl use after free (WID-SEC-2026-3786)
A vulnerability was found in Google Android. It has been classified as very critical. Affected is the function BluetoothCccHandlerCallbackImpl of the file bluetooth_ccc.cc of the component Bluetooth Ccc Handler. This manipulation causes use
CVE-2026-55307 | Google Android hwcrypto hwcrypto-kdn.c kdn_set_sysregs_prot information disclosure (WID-SEC-2026-3786)
A vulnerability identified as problematic has been detected in Google Android. This vulnerability affects the function kdn_set_sysregs_prot of the file hwcrypto-kdn.c of the component hwcrypto. The manipulation leads to information disclosu
CVE-2026-0198 | Google Android Permission Check gem_msg.c is_pd_allowed permission (WID-SEC-2026-3786)
A vulnerability, which was classified as problematic, has been found in Google Android. This impacts the function is_pd_allowed of the file gem_msg.c of the component Permission Check. The manipulation leads to permission issues. This vulne
CVE-2026-106063 | Red Hat Enterprise Linux up to 10 DICOM Export out-of-bounds write (WID-SEC-2026-3789)
A vulnerability, which was classified as problematic, was found in Red Hat Enterprise Linux 6/7/8/9/10. This issue affects some unknown processing of the component DICOM Export. The manipulation results in out-of-bounds write. This vulnerab
CVE-2026-106016 | Mozilla Firefox up to 157.0.0 File privileges management (WID-SEC-2026-3788)
A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 157.0.0. This affects an unknown function of the component File Handler. Executing a manipulation can lead to improper privilege management. This vulnerabi
CVE-2026-106062 | GIMP DDS Loader out-of-bounds write (WID-SEC-2026-3789)
A vulnerability categorized as problematic has been discovered in GIMP. The affected element is an unknown function of the component DDS Loader. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-106062.
CVE-2026-88815 | CPANSec DBI up to 1.653 Cast sql_type_cast num memory corruption (WID-SEC-2026-3790)
A vulnerability was found in CPANSec DBI up to 1.653 and classified as problematic. This affects the function sql_type_cast of the component Cast. Executing a manipulation of the argument num can lead to memory corruption. This vulnerabilit
Noch keine Analyse zu CVE-2026-81479
Sei der Erste: Einschätzung, Betroffenheit, Workaround oder PoC — mit Antworten im Thread.