Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.572 | 0,9 % |
| ≥10 % | 23.059 | 5,7 % |
| <10 % | 380.694 | 93,3 % |
CVE-2025-57317 | apidoc-core up to 0.15.0 preProcess prototype pollution
A vulnerability was found in apidoc-core up to 0.15.0 and classified as critical. Affected by this issue is the function preProcess. The manipulation results in improperly controlled modification of object prototype attributes. This vulnera
CVE-2025-55558 | PyTorch 2.7.0 torch.nn.Conv2d denial of service (Nessus ID 266121 / WID-SEC-2025-2139)
A vulnerability was found in PyTorch 2.7.0. It has been rated as problematic. Affected is the function torch.nn.Conv2d. This manipulation causes denial of service. This vulnerability is registered as CVE-2025-55558. The attack requires acce
CVE-2025-55557 | PyTorch 2.7.0 torch.cummin denial of service (Nessus ID 266120 / WID-SEC-2025-2139)
A vulnerability, which was classified as problematic, was found in PyTorch 2.7.0. Impacted is the function torch.cummin. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-55557. The attack needs to b
CVE-2025-55556 | Google TensorFlow 2.18.0 malicious code (Nessus ID 266117)
A vulnerability was found in Google TensorFlow 2.18.0. It has been classified as problematic. This affects an unknown function. The manipulation leads to embedded malicious code. This vulnerability is listed as CVE-2025-55556. The attack mu
CVE-2025-55554 | PyTorch 2.8.0 torch.nan_to_num-.long integer overflow (Nessus ID 266097 / WID-SEC-2025-2139)
A vulnerability categorized as critical has been discovered in PyTorch 2.8.0. This affects the function torch.nan_to_num-.long. The manipulation results in integer overflow. This vulnerability is reported as CVE-2025-55554. The attacker mus
CVE-2025-55553 | PyTorch 2.7.0 proxy_tensor.py denial of service (Nessus ID 266103 / WID-SEC-2025-2139)
A vulnerability classified as problematic has been found in PyTorch 2.7.0. This affects an unknown part of the file proxy_tensor.py. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-55553. T
CVE-2025-55552 | PyTorch 2.8.0 torch.rot90/torch.randn_like random values (Nessus ID 266107 / WID-SEC-2025-2139)
A vulnerability was found in PyTorch 2.8.0. It has been rated as problematic. The impacted element is the function torch.rot90/torch.randn_like. The manipulation leads to insufficiently random values. This vulnerability is documented as CVE
CVE-2025-46153 | PyTorch up to 3.6.x bernoulli_p Decompose decompositions.py random values (Issue 142853 / Nessus ID 266100)
A vulnerability, which was classified as problematic, has been found in PyTorch up to 3.6.x. Affected by this issue is some unknown functionality of the file decompositions.py of the component bernoulli_p Decompose. The manipulation leads t
CVE-2025-46152 | PyTorch up to 2.6.x bitwise_right_shift out-of-bounds write (Issue 143555 / Nessus ID 266102)
A vulnerability marked as problematic has been reported in PyTorch up to 2.6.x. Affected by this vulnerability is the function bitwise_right_shift. Performing a manipulation results in out-of-bounds write. This vulnerability is known as CVE
CVE-2025-46150 | PyTorch up to 2.6.x torch.compile (Issue 141538 / Nessus ID 266101)
A vulnerability labeled as problematic has been found in PyTorch up to 2.6.x. Affected is the function torch.compile. Such manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2025-46150. Access to the local networ
CVE-2025-46149 | PyTorch up to 2.6.x nn.Fold assertion (Issue 147848 / Nessus ID 266113)
A vulnerability has been found in PyTorch up to 2.6.x and classified as problematic. The affected element is the function nn.Fold. Performing a manipulation results in reachable assertion. This vulnerability is identified as CVE-2025-46149.
CVE-2025-46148 | PyTorch up to 2.6.0 nn.PairwiseDistance (Issue 151198 / Nessus ID 266106)
A vulnerability, which was classified as problematic, has been found in PyTorch up to 2.6.0. This issue affects the function nn.PairwiseDistance. This manipulation causes an unknown weakness. The identification of this vulnerability is CVE-
CVE-2025-57639 | Tenda AC9 1.0 formSetSambaConf usb.samba.guest.user os command injection
A vulnerability classified as critical was found in Tenda AC9 1.0. Affected is the function formSetSambaConf. Executing a manipulation of the argument usb.samba.guest.user can lead to os command injection. The identification of this vulnera
CVE-2025-57638 | Tenda AC9 1.0 Configuration sys.vendor buffer overflow
A vulnerability labeled as critical has been found in Tenda AC9 1.0. Affected by this issue is some unknown functionality of the component Configuration Handler. Executing a manipulation of the argument sys.vendor can lead to buffer overflo
CVE-2025-57636 | D-Link C1 2020-02-21 jHTTPd sub_47F028 time os command injection (WID-SEC-2025-2161)
A vulnerability marked as critical has been reported in D-Link C1 2020-02-21. This affects the function sub_47F028 of the component jHTTPd. The manipulation of the argument Time leads to os command injection. This vulnerability is traded as
CVE-2025-56394 | free5GC 4.0.1 AMF buffer overflow
A vulnerability, which was classified as critical, has been found in free5GC 4.0.1. This affects an unknown function of the component AMF. Performing a manipulation results in buffer overflow. This vulnerability is identified as CVE-2025-56
CVE-2025-56304 | YzmCMS up to 7.3 Register Page Referer cross site scripting
A vulnerability marked as problematic has been reported in YzmCMS up to 7.3. This issue affects some unknown processing of the component Register Page. The manipulation of the argument Referer leads to cross site scripting. This vulnerabili
CVE-2025-29084 | CSZ-CMS 1.3.0 Upgrade.php execSqlFile sql injection
A vulnerability was found in CSZ-CMS 1.3.0. It has been classified as critical. This issue affects the function execSqlFile of the file Upgrade.php. Performing a manipulation results in sql injection. This vulnerability is cataloged as CVE-
CVE-2025-29083 | CSZ-CMS 1.3.0 Plugin_Manager.php execSqlFile sql injection
A vulnerability was found in CSZ-CMS 1.3.0. It has been declared as critical. This affects the function execSqlFile of the file Plugin_Manager.php. The manipulation results in sql injection. This vulnerability is cataloged as CVE-2025-29083
CVE-2026-122020 | NST Labs Tech Nstbrowser up to 1.2.1 Local Agent Management Service stopAll stopAllBrowsers denial of service
A vulnerability marked as problematic has been reported in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Pe
CVE-2026-123028 | itsourcecode Online Book Store 1.0 /admin_edit.php bookisbn sql injection
A vulnerability has been found in itsourcecode Online Book Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn with the input 1%27
CVE-2025-57441 | Blackmagic ATEM Mini Pro 2.7 Telnet Service improper authentication
A vulnerability classified as critical has been found in Blackmagic ATEM Mini Pro 2.7. This affects an unknown part of the component Telnet Service. This manipulation causes improper authentication. This vulnerability is handled as CVE-2025
CVE-2025-57439 | Creacast Creabox Manager 4.4.4 edit.php code injection
A vulnerability was found in Creacast Creabox Manager 4.4.4. It has been rated as critical. This issue affects some unknown processing of the file edit.php. The manipulation leads to code injection. This vulnerability is documented as CVE-2
CVE-2025-57407 | S-Cart up to 10.0.3 Admin Log Viewer cross site scripting
A vulnerability categorized as problematic has been discovered in S-Cart up to 10.0.3. Affected by this issue is some unknown functionality of the component Admin Log Viewer. Such manipulation leads to cross site scripting. This vulnerabili
CVE-2025-57205 | iNiLabs School Express 6.2 /posts/edit/ cross site scripting
A vulnerability labeled as problematic has been found in iNiLabs School Express 6.2. Impacted is an unknown function of the file /posts/edit/. Executing a manipulation can lead to cross site scripting. The identification of this vulnerabili
CVE-2025-57204 | Stocky POS with Inventory Management & HRM 5.0 Products product name cross site scripting
A vulnerability marked as problematic has been reported in Stocky POS with Inventory Management &amp; HRM 5.0. The affected element is an unknown function of the component Products Module. The manipulation of the argument product name l
CVE-2025-57203 | MagicProject AI 9.1 Content Security Policy generate-stream cross site scripting
A vulnerability classified as problematic was found in MagicProject AI 9.1. Affected by this vulnerability is an unknown functionality of the file /dashboard/user/generator/generate-stream of the component Content Security Policy Handler. E
CVE-2025-55887 | ARD Meal Reservation Service transactionID cross site scripting
A vulnerability classified as problematic was found in ARD. Impacted is an unknown function of the component Meal Reservation Service. The manipulation of the argument transactionID results in cross site scripting. This vulnerability is cat
CVE-2025-39877 | Linux Kernel up to 6.17-rc5 state_show use after free (Nessus ID 265875 / WID-SEC-2025-2107)
A vulnerability has been found in Linux Kernel up to 6.1.152/6.6.106/6.12.47/6.16.7/6.17-rc5 and classified as critical. Affected by this issue is the function state_show. The manipulation leads to use after free. This vulnerability is docu
CVE-2025-25208 | Red Hat Connectivity Link rhcl-operator-container denial of service (EUVD-2025-17429)
A vulnerability labeled as problematic has been found in Red Hat Connectivity Link. Affected by this issue is some unknown functionality of the component rhcl-operator-container. Such manipulation leads to denial of service. This vulnerabil
[NEU] [hoch] OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH (in Kombination mit musl libc und ohne PAM) ausnutzen, um Administratorrechte zu erlangen. Weiterlesen
CVE-2026-40802 | Pubjet Plugin up to 5.4.8 on WordPress privileges management (EUVD-2026-96539)
A vulnerability described as critical has been identified in Pubjet Plugin up to 5.4.8 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in improper privilege management. This vulnerability is cata
CVE-2026-88800 | MDJM Event Management Plugin up to 1.7.8.7 on WordPress authorization (EUVD-2026-117969)
A vulnerability, which was classified as critical, has been found in MDJM Event Management Plugin and Mobile Events Manager Plugin up to 1.7.8.7 on WordPress. Affected by this vulnerability is an unknown functionality. This manipulation cau
CVE-2026-88799 | MDJM Event Management Plugin up to 1.7.8.7 on WordPress Client Profile Update authorization (EUVD-2026-117968)
A vulnerability classified as critical has been found in MDJM Event Management Plugin and Mobile Events Manager Plugin up to 1.7.8.7 on WordPress. This impacts an unknown function of the component Client Profile Update. The manipulation lea
CVE-2026-88801 | MDJM Event Management Plugin up to 1.7.8.7 on WordPress cross site scripting (EUVD-2026-117970)
A vulnerability classified as problematic was found in MDJM Event Management Plugin and Mobile Events Manager Plugin up to 1.7.8.7 on WordPress. Affected is an unknown function. The manipulation results in cross site scripting. This vulnera
CVE-2026-118423 | WP Libre Form Plugin up to 1.5.0.1 on WordPress unrestricted upload (EUVD-2026-117971)
A vulnerability labeled as critical has been found in WP Libre Form Plugin up to 1.5.0.1 on WordPress. The affected element is an unknown function. Such manipulation leads to unrestricted upload. This vulnerability is documented as CVE-2026
CVE-2026-118166 | MC4WP Mailchimp Plugin up to 4.14.x on WordPress Dynamic Content Tag injection (EUVD-2026-117972)
A vulnerability, which was classified as critical, was found in MC4WP Mailchimp Plugin up to 4.14.x on WordPress. Affected by this issue is some unknown functionality of the component Dynamic Content Tag. Such manipulation leads to injectio
CVE-2026-121633 | Order Tracking Plugin up to 3.5.x on WordPress data authenticity (EUVD-2026-117973)
A vulnerability described as problematic has been identified in Order Tracking Plugin up to 3.5.x on WordPress. This affects an unknown function. Executing a manipulation can lead to insufficient verification of data authenticity. This vuln
CVE-2026-121636 | Quick Event Manager Plugin up to 9.18 on WordPress data authenticity (EUVD-2026-117974)
A vulnerability marked as problematic has been reported in Quick Event Manager Plugin up to 9.18 on WordPress. The impacted element is an unknown function. Performing a manipulation results in insufficient verification of data authenticity.
Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. Ein Ratgebertext von Steffen Zahn (Security, PHP) Weiterlesen
CVE-2026-91718 | Google Chrome up to 153.0.8010.36 Core use after free (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability classified as critical has been found in Google Chrome. Impacted is an unknown function of the component Core. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2026-91718. It is pos
CVE-2026-91716 | Google Chrome up to 153.0.8010.36 Auth use after free (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability labeled as critical has been found in Google Chrome. This affects an unknown part of the component Auth. The manipulation results in use after free. This vulnerability is identified as CVE-2026-91716. The attack can be execu
CVE-2026-91715 | Google Chrome up to 153.0.8010.36 ServiceWorker type confusion (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability identified as critical has been detected in Google Chrome. Affected by this issue is some unknown functionality of the component ServiceWorker. The manipulation leads to type confusion. This vulnerability is referenced as CV
CVE-2026-91714 | Google Chrome up to 153.0.8010.36 Fonts information disclosure (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability classified as problematic was found in Google Chrome. This vulnerability affects unknown code of the component Fonts. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-91714. The
CVE-2026-123158 | OpenBSD OpenSSH up to 10.6p1 sshd improper authentication (WID-SEC-2026-4365)
A vulnerability categorized as very critical has been discovered in OpenBSD OpenSSH up to 10.6p1. Impacted is an unknown function of the component sshd. The manipulation results in improper authentication. This vulnerability is reported as
CVE-2026-97848 | Red Hat Keycloak Token Sanitization improper authorization (EUVD-2026-117923)
A vulnerability was found in Red Hat Keycloak. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Token Sanitization. Performing a manipulation results in improper authorization. Th
CVE-2026-97367 | Red Hat Keycloak Account REST API improper authentication (EUVD-2026-117922)
A vulnerability classified as critical was found in Red Hat Keycloak. The impacted element is an unknown function of the component Account REST API. Executing a manipulation can lead to improper authentication. This vulnerability is handled
CVE-2026-96547 | Red Hat Keycloak/Single Sign-On Dynamic Client Registration privileges management (EUVD-2026-117921)
A vulnerability classified as problematic has been found in Red Hat Keycloak and Single Sign-On. The affected element is an unknown function of the component Dynamic Client Registration. Performing a manipulation results in improper privile
CVE-2026-121139 | Rapid7 Metasploit Framework up to 6.5.8 REST API /api/v1/users ApiToken#authenticate missing authentication (EUVD-2026-117544)
A vulnerability has been found in Rapid7 Metasploit Framework up to 6.5.8 and classified as critical. Affected by this vulnerability is the function ApiToken#authenticate of the file /api/v1/users of the component REST API. This manipulatio
CVE-2026-123151 | Red Hat Enterprise Linux GDB stack-based overflow (Nessus ID 376647)
A vulnerability was found in Red Hat Enterprise Linux. It has been declared as critical. The affected element is an unknown function of the component GDB. The manipulation results in stack-based buffer overflow. This vulnerability is catalo
CVE-2026-18142 | IBM MQ up to 10.0.0.5 integer overflow (WID-SEC-2026-4343)
A vulnerability classified as problematic has been found in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. The impacted element is an unknown function. This manipulation causes integer overflow. This vulnerability is registered a
CVE-2026-14252 | IBM MQ information disclosure (WID-SEC-2026-4343)
A vulnerability was found in IBM MQ. It has been declared as problematic. The affected element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2026-14252. It is possi
CVE-2026-13292 | IBM MQ os command injection (WID-SEC-2026-4343)
A vulnerability marked as very critical has been reported in IBM MQ. This affects an unknown function. This manipulation causes os command injection. This vulnerability is tracked as CVE-2026-13292. The attack is possible to be carried out
CVE-2026-13289 | IBM MQ up to 10.0.0.5 xml external entity reference (WID-SEC-2026-4343)
A vulnerability, which was classified as critical, has been found in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Th
CVE-2026-13284 | IBM MQ up to 10.0.0.5 xml external entity reference (WID-SEC-2026-4343)
A vulnerability, which was classified as critical, was found in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. This affects an unknown part. The manipulation results in xml external entity reference. This vulnerability is reporte
CVE-2026-13271 | IBM MQ up to 10.0.0.5 Managed File Transfer xml external entity reference (WID-SEC-2026-4343)
A vulnerability identified as critical has been detected in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. The affected element is an unknown function of the component Managed File Transfer. The manipulation leads to xml external
CVE-2026-12550 | IBM MQ up to 10.0.0.5 input validation (WID-SEC-2026-4343)
A vulnerability labeled as critical has been found in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. The impacted element is an unknown function. The manipulation results in improper input validation. This vulnerability is identi
CVE-2026-12538 | IBM MQ Appliance up to 9.4.0.26/9.4.5.3/10.0.0.5 input validation (WID-SEC-2026-4343)
A vulnerability classified as critical has been found in IBM MQ Appliance up to 9.4.0.26/9.4.5.3/10.0.0.5. Affected is an unknown function. Performing a manipulation results in improper input validation. This vulnerability is cataloged as C
CVE-2026-12356 | IBM MQ up to 10.0.0.5 command injection (WID-SEC-2026-4343)
A vulnerability categorized as very critical has been discovered in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5. Impacted is an unknown function. Executing a manipulation can lead to command injection. The identification of thi
CVE-2026-11724 | IBM MQ up to 10.0.0.5 Managed File Transfer input validation (WID-SEC-2026-4343)
A vulnerability was found in IBM MQ up to 9.2.0.44/9.3.0.42/9.4.0.26/9.4.5.1/10.0.0.5 and classified as very critical. Affected by this issue is some unknown functionality of the component Managed File Transfer. The manipulation results in