Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-17 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
CVE-2022-44387 | EyouCMS 1.5.9-UTF8-SP1 Basic Information cross-site request forgery (Issue 29 / EUVD-2022-47330)
A vulnerability described as problematic has been identified in EyouCMS 1.5.9-UTF8-SP1. Impacted is an unknown function of the component Basic Information Component. Such manipulation leads to cross-site request forgery. This vulnerability
CVE-2022-44390 | EyouCMS 1.5.9-UTF8-SP1 Public Security Record Number cross site scripting (Issue 31 / EUVD-2022-47333)
A vulnerability has been found in EyouCMS 1.5.9-UTF8-SP1 and classified as problematic. The impacted element is an unknown function of the component Public Security Record Number Handler. The manipulation leads to cross site scripting. This
CVE-2022-44389 | EyouCMS 1.5.9-UTF8-SP1 Edit Admin Profile cross-site request forgery (Issue 30 / EUVD-2022-47332)
A vulnerability, which was classified as problematic, was found in EyouCMS 1.5.9-UTF8-SP1. The affected element is an unknown function of the component Edit Admin Profile Module. Executing a manipulation can lead to cross-site request forge
CVE-2022-44384 | rConfig 3.9.6 PHP File unrestricted upload (Exploit 49783 / EUVD-2022-47327)
A vulnerability was found in rConfig 3.9.6. It has been classified as critical. This issue affects some unknown processing of the component PHP File Handler. Performing a manipulation results in unrestricted upload. This vulnerability is kn
CVE-2022-44379 | Automotive Shop Management System 1.0 Master.php?f=delete_service sql injection (EUVD-2022-47324)
A vulnerability was found in Automotive Shop Management System 1.0. It has been declared as critical. This impacts an unknown function of the file /asms/classes/Master.php?f=delete_service. Such manipulation leads to sql injection. This vul
CVE-2026-89824 | Linux Kernel up to 7.2.4 i2c adapter panel-edp.c memory leak (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.50/7.2.4. It has been classified as critical. Impacted is an unknown function of the file panel-edp.c of the component i2c adapter. The manipulation leads to memo
CVE-2026-89823 | Linux Kernel up to 7.2.4 drm drm_dev_register race condition (WID-SEC-2026-3438)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.4. Affected by this issue is the function drm_dev_register of the component drm. This manipulation causes race condition. This vulnerability is
CVE-2026-89822 | Linux Kernel up to 7.3-rc1 i915 i915_pci_probe null pointer dereference (WID-SEC-2026-3438)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.3-rc1. The affected element is the function i915_pci_probe of the component i915. This manipulation causes null pointer dereference. This vulnerability is h
CVE-2026-89821 | Linux Kernel up to 7.2.4 drm/amd/display __is_lut_linear divide by zero (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 7.2.4 and classified as critical. This issue affects the function __is_lut_linear of the file drm/amd/display. Executing a manipulation can lead to divide by zero. This vulnerability is regist
CVE-2026-89820 | Linux Kernel up to 6.18.50/7.2.4 AMD Display drm/amd/display amdgpu_dm_commit_zero_streams locking (WID-SEC-2026-3438)
A vulnerability classified as critical was found in Linux Kernel up to 6.18.50/7.2.4. Affected by this vulnerability is the function amdgpu_dm_commit_zero_streams of the file drm/amd/display of the component AMD Display. The manipulation re
DFN-CERT-2026-4940 libvirt: Eine Schwachstelle ermöglicht die Eskalation von Privilegien
sowie Red Hat Enterprise Linux Server in Version AUS 9.2, 9.4 und 9.6 ... Gruppenleiter*in Managed Windows ServerBerlin, Home Office. PSI Software ... Weiterlesen
CVE-2026-66395 | siyuan-note SiYuan up to 3.7.1 Bazaar Plugin Readme plugin name cross site scripting
A vulnerability, which was classified as problematic, was found in siyuan-note SiYuan up to 3.7.1. This affects an unknown function of the component Bazaar Plugin Readme Handler. The manipulation of the argument plugin name results in cross
CVE-2026-65013 | Onlook up to 0.2.32 tRPC API projectId/conversationId authorization (423e2e9)
A vulnerability classified as critical was found in Onlook up to 0.2.32. Affected by this vulnerability is the function project.get/member.remove/chat.conversation.delete of the component tRPC API. Such manipulation of the argument projectI
CVE-2026-66396 | siyuan-note SiYuan up to 3.7.1 Gallery/Kanban Cover Images cross site scripting
A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan up to 3.7.1. The impacted element is an unknown function of the component Gallery/Kanban Cover Images. The manipulation leads to cross site scripting
CVE-2026-66005 | janhq Jan up to 0.8.4 Local API Server cross-domain policy (EUVD-2026-48611)
A vulnerability categorized as problematic has been discovered in janhq Jan up to 0.8.4. This issue affects some unknown processing of the component Local API Server. Executing a manipulation can lead to permissive cross-domain policy with
CVE-2026-65606 | siyuan-note SiYuan up to 3.7.1 Protocol app/src/layout/Tab.ts innerHTML icon cross site scripting
A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan up to 3.7.1. The impacted element is the function innerHTML of the file app/src/layout/Tab.ts of the component Protocol Handler. The manipulation of
CVE-2026-63765 | Chatwoot up to 4.15.x Direct Uploads Controller missing authentication
A vulnerability was found in Chatwoot up to 4.15.x and classified as critical. Affected by this vulnerability is an unknown functionality of the component Direct Uploads Controller. Such manipulation leads to missing authentication. This vu
CVE-2026-65605 | siyuan-note SiYuan up to 3.7.1 Attribute View innerHTML Template column value cross site scripting
A vulnerability labeled as problematic has been found in siyuan-note SiYuan up to 3.7.1. This affects the function innerHTML of the component Attribute View. The manipulation of the argument Template column value results in cross site scrip
CVE-2026-50696 | Microsoft Windows up to Server 2025 Internet Key Exchange buffer overflow
A vulnerability categorized as critical has been discovered in Microsoft Windows up to Server 2025. Impacted is an unknown function of the component Internet Key Exchange. Executing a manipulation can lead to buffer overflow. This vulnerabi
CVE-2026-59258 | immich-app immich up to 3.0.2 id/user access control (EUVD-2026-44755)
A vulnerability classified as critical was found in immich-app immich up to 3.0.2. This impacts an unknown function. The manipulation of the argument id/user results in improper access controls. This vulnerability is cataloged as CVE-2026-5
CVE-2026-59255 | SpecterOps BloodHound up to 9.4.0 Custom-Nodes API authorization (EUVD-2026-44754)
A vulnerability described as critical has been identified in SpecterOps BloodHound up to 9.4.0. The impacted element is an unknown function of the component Custom-Nodes API. Executing a manipulation can lead to missing authorization. This
CVE-2026-56176 | Microsoft Windows up to Server 2025 Win32K out-of-bounds
A vulnerability described as problematic has been identified in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Win32K. Such manipulation leads to out-of-bounds read. This vulnerability is refe
CVE-2026-62240 | crewAIInc crewAI up to 1.15.0 URL Validation validate_url server-side request forgery
A vulnerability was found in crewAIInc crewAI up to 1.15.0 and classified as problematic. This vulnerability affects the function validate_url of the component URL Validation. Executing a manipulation can lead to server-side request forgery
CVE-2026-62239 | Dao-AILab FlashAttention up to 2.8.3.post1 Archive Extraction hopper/setup.py download_and_copy symlink
A vulnerability, which was classified as problematic, was found in Dao-AILab FlashAttention up to 2.8.3.post1. Affected by this issue is the function download_and_copy of the file hopper/setup.py of the component Archive Extraction. Such ma
Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges
A newly disclosed Windows zero-day affecting the Steam Client Service can reportedly let a standard local user obtain NT AUTHORITY\SYSTEM privileges without administrator credentials, a User Account Control prompt, Steam authentication, or
CVE-2026-93331 | GPAC 26.08-DEV RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt size out-of-bounds (Issue 3868 / EUVD-2026-82639)
A vulnerability labeled as critical has been found in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketizer. Such manipulation of the argument siz
CVE-2026-93468 | HGiga OAKclouds up to 106 path traversal (EUVD-2026-82642)
A vulnerability was found in HGiga OAKclouds up to 106. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-93468. Th
CVE-2026-93467 | HGiga OAKclouds-custom_page-4.0 up to 25 deserialization (EUVD-2026-82641)
A vulnerability was found in HGiga OAKclouds-custom_page-2.0, OAKclouds-custom_page-3.0 and OAKclouds-custom_page-4.0 up to 25. It has been classified as critical. Impacted is an unknown function. This manipulation causes deserialization. T
CVE-2026-93371 | marcopiovanello yt-dlp-web-ui up to v4 generic.go NewGenericDownload params command injection (EUVD-2026-82640)
A vulnerability labeled as critical has been found in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params le
CVE-2026-15650 | themewant RT Mega Menu Plugin up to 1.5.2 on WordPress Block Attribute pointer_menu_item cross site scripting (EUVD-2026-82643)
A vulnerability was found in themewant RT Mega Menu Plugin up to 1.5.2 on WordPress. It has been declared as problematic. The affected element is an unknown function of the component Block Attribute. Such manipulation of the argument pointe
CVE-2026-14855 | themewant RT Mega Menu Plugin up to 1.5.1 on WordPress css[left] cross site scripting (EUVD-2026-82644)
A vulnerability was found in themewant RT Mega Menu Plugin up to 1.5.1 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation of the argument css[left] results in cross site scripting. This
CVE-2026-92991 | bdthemes Element Pack Addons for Elementor Plugin on WordPress Sigmative API display_id cross site scripting (EUVD-2026-82645)
A vulnerability categorized as problematic has been discovered in bdthemes Element Pack Addons for Elementor Plugin, Elementor Pixel Gallery Addons Plugin, Live Copy Paste for Elementor Plugin, Prime Slider Plugin, Smart Admin Assistant Plu
CVE-2026-87886 | Acronis Backup Plugin permission
A vulnerability was found in Acronis Backup Plugin, Acronis Backup Extension and Acronis Backup Plugin. It has been classified as very critical. Affected is an unknown function. Performing a manipulation results in permission issues. This v
CVE-2026-89819 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 Plane Degamma LUT Validation drm/amd/display __set_dm_plane_degamma out-of-bounds (WID-SEC-2026-3438)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.109/6.18.50/7.2.4. Affected is the function __set_dm_plane_degamma of the file drm/amd/display of the component Plane Degamma LUT Validation. The manipula
CVE-2026-89818 | Linux Kernel up to 7.2.4 Vcn drm/amdgpu/vcn num_buffers integer overflow (WID-SEC-2026-3438)
A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.50/7.2.4 and classified as critical. This vulnerability affects unknown code of the file drm/amdgpu/vcn of the component Vcn. Performing a manipulation of th
CVE-2026-89817 | Linux Kernel up to 7.3-rc1 gud gud_drv.c gud_connector_add_tv_mode out-of-bounds (WID-SEC-2026-3438)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.3-rc1. This affects the function gud_connector_add_tv_mode of the file drivers/gpu/drm/gud/gud_drv.c of the component gud. Such manipulation leads to out-o
CVE-2026-89816 | Linux Kernel up to 7.3-rc1 drm drm/ complete_signaling memory leak (WID-SEC-2026-3438)
A vulnerability described as problematic has been identified in Linux Kernel up to 7.3-rc1. This impacts the function complete_signaling of the file drm/ of the component drm. Executing a manipulation can lead to memory leak. The identifica
CVE-2026-89814 | Linux Kernel up to 6.18.50/7.2.4 drm/amdgpu out-of-bounds (WID-SEC-2026-3438)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.50/7.2.4. This affects an unknown function of the component drm/amdgpu. Performing a manipulation results in out-of-bounds read. This vulnerability was nam
CVE-2026-89815 | Linux Kernel up to 7.2.4 ttm ttm_pool_restore_and_alloc stack-based overflow (WID-SEC-2026-3438)
A vulnerability labeled as critical has been found in Linux Kernel up to 7.2.4. The impacted element is the function ttm_pool_restore_and_alloc of the component ttm. Such manipulation leads to stack-based buffer overflow. This vulnerability
CVE-2026-77164 | Nextcloud Server up to 32.0.0 Circles server-side request forgery (EUVD-2026-82621)
A vulnerability described as problematic has been identified in Nextcloud Server up to 32.0.0. This impacts an unknown function of the component Circles. The manipulation results in server-side request forgery. This vulnerability was named
CVE-2026-68493 | Nextcloud Server up to 34.0.0 privileges management (EUVD-2026-82623)
A vulnerability, which was classified as problematic, was found in Nextcloud Server up to 34.0.0. This affects an unknown part. Executing a manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2026-68
CVE-2026-82985 | Nextcloud up to 31.x Photos privileges management (EUVD-2026-82622)
A vulnerability labeled as problematic has been found in Nextcloud up to 31.x. The impacted element is an unknown function of the component Photos. Executing a manipulation can lead to improper privilege management. This vulnerability is ha
CVE-2026-93314 | Freedesktop Poppler 26.07.0 fofi/FoFiTrueType.cc mapCodeToGID segCnt integer overflow (ID 1761 / EUVD-2026-82624)
A vulnerability labeled as critical has been found in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer ov
CVE-2026-92925 | Redis up to 8.8.1/8.9.x Cluster Bus out-of-bounds (EUVD-2026-81460)
A vulnerability, which was classified as critical, has been found in Redis up to 8.8.1/8.9.x. The affected element is an unknown function of the component Cluster Bus. The manipulation leads to out-of-bounds read. This vulnerability is trad
CVE-2026-93373 | Google Chrome up to 153.0.8010.47 Extensions use after free (Nessus ID 346979)
A vulnerability classified as critical has been found in Google Chrome. Affected by this issue is some unknown functionality of the component Extensions. Performing a manipulation results in use after free. This vulnerability was named CVE-
CVE-2026-93372 | Google Chrome up to 153.0.8010.47 WebGL buffer overflow (Nessus ID 346979)
A vulnerability labeled as critical has been found in Google Chrome. This impacts an unknown function of the component WebGL. The manipulation results in buffer overflow. This vulnerability is known as CVE-2026-93372. It is possible to laun
CVE-2026-93374 | Google Chrome up to 153.0.8010.47 Dawn use after free (Nessus ID 346979)
A vulnerability described as critical has been identified in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Dawn. Such manipulation leads to use after free. This vulnerability is uniquely identifi
CVE-2026-93382 | Google Chrome up to 153.0.8010.47 PDFium use after free (Nessus ID 346979)
A vulnerability has been found in Google Chrome and classified as critical. Impacted is an unknown function of the component PDFium. This manipulation causes use after free. This vulnerability is tracked as CVE-2026-93382. The attack is pos
CVE-2023-1380 | Linux Kernel cfg80211.c brcmf_get_assoc_ies out-of-bounds (EUVD-2023-23636)
A vulnerability categorized as problematic has been discovered in Linux Kernel. The affected element is the function brcmf_get_assoc_ies of the file drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c. Such manipulation leads to out
CVE-2025-20327 | Cisco IOS up to 15.2(8)E5 Web UI improper validation of specified type of input (cisco-sa-ios-invalid-url-dos-Nvxszf6u)
A vulnerability was found in Cisco IOS. It has been declared as critical. This issue affects some unknown processing of the component Web UI. The manipulation results in improper validation of specified type of input. This vulnerability was
CVE-2022-44373 | TRENDnet Wireless AC Easy-Upgrader TEW-820AP 1.0R stack-based overflow (EUVD-2022-47318)
A vulnerability identified as critical has been detected in TRENDnet Wireless AC Easy-Upgrader TEW-820AP 1.0R. Affected by this vulnerability is an unknown functionality. The manipulation leads to stack-based buffer overflow. This vulnerabi
CVE-2022-44378 | Automotive Shop Management System 1.0 Master.php?f=delete_mechanic sql injection (EUVD-2022-47323)
A vulnerability was found in Automotive Shop Management System 1.0. It has been classified as critical. This affects an unknown function of the file /asms/classes/Master.php?f=delete_mechanic. This manipulation causes sql injection. This vu
CVE-2022-44371 | hope-boot 1.0.0 deserialization (Issue 83 / EUVD-2022-47316)
A vulnerability identified as critical has been detected in hope-boot 1.0.0. This affects an unknown function. Performing a manipulation results in deserialization. This vulnerability is identified as CVE-2022-44371. The attack can be initi
CVE-2022-44369 | NASM 2.16 output/outaout.c null pointer dereference (EUVD-2022-47314)
A vulnerability was found in NASM 2.16. It has been declared as problematic. Affected by this issue is some unknown functionality of the file output/outaout.c. Executing a manipulation can lead to null pointer dereference. This vulnerabilit
CVE-2022-44368 | NASM 2.16 null pointer dereference (EUVD-2022-47313)
A vulnerability marked as problematic has been reported in NASM 2.16. This vulnerability affects unknown code. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2022-44368. The attack is only possible w
CVE-2022-44367 | Tenda i21 1.0.0.14 /goform/setUplinkInfo buffer overflow (EUVD-2022-47312)
A vulnerability identified as critical has been detected in Tenda i21 1.0.0.14. This issue affects some unknown processing of the file /goform/setUplinkInfo. Performing a manipulation results in buffer overflow. This vulnerability was named
CVE-2022-44365 | Tenda i21 1.0.0.14 /goform/setSysPwd stack-based overflow (EUVD-2022-47310)
A vulnerability was found in Tenda i21 1.0.0.14. It has been rated as critical. This affects an unknown part of the file /goform/setSysPwd. This manipulation causes stack-based buffer overflow. This vulnerability is handled as CVE-2022-4436
CVE-2022-44363 | Tenda i21 1.0.0.14 /goform/setSnmpInfo buffer overflow (EUVD-2022-47308)
A vulnerability was found in Tenda i21 1.0.0.14. It has been declared as critical. Affected by this issue is some unknown functionality of the file /goform/setSnmpInfo. The manipulation results in buffer overflow. This vulnerability is know
CVE-2022-44362 | Tenda i21 1.0.0.14 /goform/AddSysLogRule buffer overflow (EUVD-2022-47307)
A vulnerability was found in Tenda i21 1.0.0.14. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/AddSysLogRule. The manipulation leads to buffer overflow. This vulnerability
CVE-2022-44361 | ZZCMS 2022 admin/ad_list.php cross site scripting (EUVD-2022-47306)
A vulnerability labeled as problematic has been found in ZZCMS 2022. This impacts an unknown function of the file admin/ad_list.php. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2022-44361.