Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.572 | 0,9 % |
| ≥10 % | 23.061 | 5,7 % |
| <10 % | 380.692 | 93,3 % |
SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below – CVE
Microsoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs
Microsoft’s Windows Paint vulnerability, CVE-2026-83844, could allow an unauthenticated attacker to execute code over a network without user interaction. The flaw carries a CVSS score of 8.1, placing it in the High severity category rather
Linux Fragnesia (CVE-2026-46300) is in CISA KEV and being chained to root after web footholds: patch the kernel and reboot
Fragnesia is a local privilege-escalation bug in the Linux kernel's shared-frag handling on the ESP path (CVE-2026-46300). CISA added it to KEV on Oct 28. It is not a remote one-shot by itself, but Singapore's CSA and Palo Alto�
CVE-2026-73585 | sblim-cmpi-base Provider Registration Scripts temp file (EUVD-2026-57827)
A vulnerability classified as very critical was found in sblim-cmpi-base. Affected is an unknown function of the component Provider Registration Scripts. Executing a manipulation can lead to insecure temporary file. This vulnerability is re
CVE-2026-85068 | Network UPS Tools nut prior 2.8.6 ippon_subdriver drivers/blazer_usb.c ippon_command uninitialized pointer (EUVD-2026-117878)
A vulnerability, which was classified as problematic, has been found in Network UPS Tools nut. Affected is the function ippon_command of the file drivers/blazer_usb.c of the component ippon_subdriver. The manipulation leads to uninitialized
CVE-2026-48752 | LXC Incus up to 7.1.x path traversal (EUVD-2026-63979)
A vulnerability was found in LXC Incus up to 7.1.x. It has been declared as very critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-20
CVE-2026-48749 | LXC Incus up to 7.1.x access control (EUVD-2026-63976)
A vulnerability has been found in LXC Incus up to 7.1.x and classified as very critical. This impacts an unknown function. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-48749. The attack is pos
CVE-2026-123268 | libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption (Issue 39 / EUVD-2026-117879)
A vulnerability identified as problematic has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c
CVE-2025-38691 | Linux Kernel up to 6.16.1 ext_tree_prepare_commit uninitialized pointer (EUVD-2025-26778 / Nessus ID 261584)
A vulnerability has been found in Linux Kernel up to 6.16.1 and classified as critical. The impacted element is the function ext_tree_prepare_commit. This manipulation causes uninitialized pointer. The identification of this vulnerability i
CVE-2025-37792 | Linux Kernel up to 6.15-rc2 Bluetooth btrtl.c btrtl_initialize null pointer dereference (Nessus ID 237255 / WID-SEC-2025-0922)
A vulnerability was found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3/6.15-rc2. It has been rated as critical. The affected element is the function btrtl_initialize of the file drivers/bluetooth/btrtl.c of the component Bluetooth. P
CVE-2025-23138 | Linux Kernel up to 6.14.1 watch_queue_set_size buffer overflow (Nessus ID 234884 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1 and classified as critical. The affected element is the function watch_queue_set_size. The manipulation results in buffer overflow. This vulnerability is known as CVE-2025-23138. Access
CVE-2025-22128 | Linux Kernel up to 6.14.1 kernel/irq/manage.c ath12k_pci_free_irq allocation of resources (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.14.1. This affects the function ath12k_pci_free_irq of the file kernel/irq/manage.c. The manipulation results in allocation of resources. This vulnerabilit
CVE-2025-22125 | Linux Kernel up to 6.14.1 privilege escalation (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1 and classified as problematic. This affects an unknown function. The manipulation results in privilege escalation. This vulnerability was named CVE-2025-22125. The attack needs to be ap
CVE-2025-22106 | Linux Kernel up to 6.14.1 net/core/xdp.c vmxnet3_reset_work privilege escalation (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1. It has been declared as problematic. Impacted is the function vmxnet3_reset_work of the file net/core/xdp.c. The manipulation results in privilege escalation. This vulnerability was na
CVE-2026-93325 | Docker Filesystem protection mechanism (Nessus ID 376214)
A vulnerability identified as very critical has been detected in Docker. Affected by this vulnerability is an unknown functionality of the component Filesystem. This manipulation causes protection mechanism failure. This vulnerability appea
CVE-2026-121953 | FreeRDP up to 3.32.1 rdpgfx dynamic virtual channel rdpgfx_on_close use after free (Nessus ID 376213)
A vulnerability categorized as critical has been discovered in FreeRDP. Affected by this issue is the function rdpgfx_on_close of the component rdpgfx dynamic virtual channel. The manipulation results in use after free. This vulnerability i
CVE-2026-121954 | FreeRDP up to 3.32.1 Planar Codec freerdp_bitmap_planar_context_reset out-of-bounds write (Nessus ID 376215)
A vulnerability labeled as problematic has been found in FreeRDP up to 3.32.1. Affected by this vulnerability is the function freerdp_bitmap_planar_context_reset of the component Planar Codec. The manipulation results in out-of-bounds write
CVE-2026-121963 | FreeRDP up to 3.32.1 rdpsnd channel rdpsnd_virtual_channel_write use after free (Nessus ID 376216)
A vulnerability classified as problematic was found in FreeRDP up to 3.32.1. The impacted element is the function rdpsnd_virtual_channel_write of the component rdpsnd channel. The manipulation results in use after free. This vulnerability i
CVE-2025-21632 | Linux Kernel up to 6.6.71/6.12.9/6.13-rc6 fpu buffer overflow (Nessus ID 214901 / WID-SEC-2025-0119)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.71/6.12.9/6.13-rc6. This issue affects some unknown processing of the component fpu. The manipulation results in buffer overflow. This vulnerability is k
CVE-2024-56636 | Linux Kernel up to 6.12.4 include/linux/skbuff.h geneve_xmit_skb privilege escalation (Nessus ID 214901 / WID-SEC-2024-3762)
A vulnerability classified as problematic was found in Linux Kernel up to 5.10.230/5.15.173/6.1.119/6.6.65/6.12.4. Impacted is the function geneve_xmit_skb in the library include/linux/skbuff.h. Executing a manipulation can lead to privileg
CVE-2024-56594 | Linux Kernel up to 6.12.4 AMD GPU debug_dma_map_sg memory corruption (Nessus ID 216224 / WID-SEC-2024-3762)
A vulnerability has been found in Linux Kernel up to 6.12.4 and classified as critical. This issue affects the function debug_dma_map_sg of the component AMD GPU. This manipulation causes memory corruption. The identification of this vulner
CVE-2024-56372 | Linux Kernel up to 6.6.67/6.12.6 net/core/skbuff.c tun_napi_alloc_frags denial of service (Nessus ID 214901 / WID-SEC-2025-0047)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.67/6.12.6. The affected element is the function tun_napi_alloc_frags of the file net/core/skbuff.c. The manipulation leads to denial of service. This vulnera
CVE-2024-55881 | Linux Kernel up to 5.15.175/6.1.121/6.6.67/6.12.6 Hypercall Page arch/x86/kvm/x86.h complete_hypercall_exit state issue (Nessus ID 214901 / WID-SEC-2025-0047)
A vulnerability marked as problematic has been reported in Linux Kernel up to 5.15.175/6.1.121/6.6.67/6.12.6. This affects the function complete_hypercall_exit in the library arch/x86/kvm/x86.h of the component Hypercall Page Handler. This
CVE-2024-50251 | Linux Kernel up to 6.11.6 netfilter skb_checksum privilege escalation (Nessus ID 211777 / WID-SEC-2024-3397)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.11.6. Impacted is the function skb_checksum of the component netfilter. Such manipulation leads to privilege escalation. This vulnerability is documented as CVE-2
CVE-2024-50146 | Linux Kernel up to 6.11.5 mlx5e_netdev_change_profile null pointer dereference (3955b77494c3/4dbc1d1a9f39 / Nessus ID 213014)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.11.5. Affected by this issue is the function mlx5e_netdev_change_profile. Performing a manipulation results in null pointer dereference. This vulnerability
CVE-2024-50138 | Linux Kernel up to 6.1.114/6.11.5 bpf spinlock_rt.c in_atomic stack-based overflow (5eb34999d118/ca30e682e5d6/8b62645b09f8 / Nessus ID 213018)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.114/6.11.5. This affects the function in_atomic of the file kernel/locking/spinlock_rt.c of the component bpf. This manipulation causes stack-based buffer overf
CVE-2024-50134 | Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5 vboxvideo vbva_mouse_pointer_shape allocation of resources (Nessus ID 212830 / WID-SEC-2024-3339)
A vulnerability described as problematic has been identified in Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5. This issue affects the function vbva_mouse_pointer_shape of the component vboxvideo. Such manipulation leads to allocation of
CVE-2026-88980 | Kubeflow Pipelines up to 2.17.x Frontend /artifacts/get improper authorization (EUVD-2026-117828)
A vulnerability, which was classified as problematic, has been found in Kubeflow Pipelines up to 2.17.x. The impacted element is an unknown function of the file /artifacts/get of the component Frontend. Performing a manipulation results in
CVE-2026-59843 | Red Hat Enterprise Linux/Hardened Images libssh infinite loop (EUVD-2026-46177 / Nessus ID 330077)
A vulnerability categorized as problematic has been discovered in Red Hat Enterprise Linux and Hardened Images. Impacted is an unknown function of the component libssh. Executing a manipulation can lead to infinite loop. This vulnerability
CVE-2026-88982 | Kubeflow Pipelines up to 2.17.x Webhook information disclosure (EUVD-2026-117831)
A vulnerability classified as problematic was found in Kubeflow Pipelines up to 2.17.x. The affected element is an unknown function of the component Webhook. Such manipulation leads to information disclosure. This vulnerability is reference
CVE-2026-88981 | Kubeflow Pipelines up to 2.17.x Frontend Artifact Download improper authorization (EUVD-2026-117829)
A vulnerability has been found in Kubeflow Pipelines up to 2.17.x and classified as problematic. This impacts an unknown function of the component Frontend Artifact Download. The manipulation leads to improper authorization. This vulnerabil
CVE-2026-77596 | Kubeflow Pipelines up to 2.17.x HTTP Endpoint upload canUploadVersionedPipeline privileges management (EUVD-2026-117830)
A vulnerability was found in Kubeflow Pipelines up to 2.17.x. It has been rated as critical. This affects the function canUploadVersionedPipeline of the file /apis/v2beta1/pipelines/upload of the component HTTP Endpoint. Performing a manipu
CVE-2026-92695 | pavel-odintsov FastNetMon up to 1.2.9 Pcap Parser pcap_collector.cpp parse_packet caplen out-of-bounds (EUVD-2026-117833)
A vulnerability, which was classified as critical, was found in pavel-odintsov FastNetMon up to 1.2.9. This affects the function parse_packet of the file src/pcap_plugin/pcap_collector.cpp of the component Pcap Parser. Executing a manipulat
CVE-2026-92694 | pavel-odintsov FastNetMon up to 1.2.9 IPv6 Top-Talkers Screen-Draw Thread src/fastnetmon_logic.cpp draw_table_ipv6 race condition (EUVD-2026-117832)
A vulnerability was found in pavel-odintsov FastNetMon up to 1.2.9. It has been declared as critical. Affected by this issue is the function draw_table_ipv6 of the file src/fastnetmon_logic.cpp of the component IPv6 Top-Talkers Screen-Draw
CVE-2026-121956 | FreeRDP up to 3.32.1 WinPR Kerberos SSPI retrieveSomeTgt double free (Nessus ID 376217)
A vulnerability classified as problematic has been found in FreeRDP up to 3.32.1. This vulnerability affects the function retrieveSomeTgt of the component WinPR Kerberos SSPI. Performing a manipulation results in double free. This vulnerabi
CVE-2026-122032 | SPIP up to 4.4.28 Request Sanitization spip_sanitize_from_request where sql injection (Nessus ID 376218)
A vulnerability, which was classified as problematic, was found in SPIP up to 4.4.28. This vulnerability affects the function spip_sanitize_from_request of the component Request Sanitization. Executing a manipulation of the argument where c
CVE-2026-121960 | FreeRDP up to 3.32.1 Shadow Server input validation (Nessus ID 376219)
A vulnerability marked as critical has been reported in FreeRDP up to 3.32.1. Affected by this issue is some unknown functionality of the component Shadow Server. This manipulation causes improper input validation. This vulnerability appear
CVE-2026-121952 | FreeRDP up to 3.32.1 Proxy out-of-bounds write (Nessus ID 376220)
A vulnerability was found in FreeRDP up to 3.32.1. It has been classified as critical. This impacts an unknown function of the component Proxy. Performing a manipulation results in out-of-bounds write. This vulnerability is identified as CV
CVE-2026-121964 | FreeRDP up to 3.32.1 RD Gateway RPC Client rpc_client_recv_fragment alloc_hint/frag_length buffer overflow (Nessus ID 376223)
A vulnerability was found in FreeRDP up to 3.32.1. It has been rated as problematic. Affected by this vulnerability is the function rpc_client_recv_fragment of the component RD Gateway RPC Client. The manipulation of the argument alloc_hint
CVE-2026-121961 | FreeRDP up to 3.32.1 DRDYNVC Tracker use after free (Nessus ID 376221)
A vulnerability, which was classified as problematic, has been found in FreeRDP up to 3.32.1. Impacted is an unknown function of the component DRDYNVC Tracker. The manipulation leads to use after free. This vulnerability is uniquely identif
CVE-2026-63183 | OmniAuth up to 2.1.x Provider Callback URL Derivation injection (Nessus ID 376224)
A vulnerability described as critical has been identified in OmniAuth up to 2.1.x. This vulnerability affects unknown code of the component Provider Callback URL Derivation. Executing a manipulation can lead to injection. This vulnerability
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)
Yes, that's right! Today we're at the aquarium.Welcome back to yet another watchTowr Labs blog post. You can begin preparing your comments now. What Is A Barracuda, And Why? Must We?Barracuda’s Email Security Gateway solution (ESG
CVE-2025-63451 | Car-Booking-System-PHP 1.0 /carlux/sign-in.php sql injection
A vulnerability described as critical has been identified in Car-Booking-System-PHP 1.0. The affected element is an unknown function of the file /carlux/sign-in.php. The manipulation results in sql injection. This vulnerability is known as
CVE-2025-63450 | Car-Booking-System-PHP 1.0 /carlux/booking.php cross site scripting
A vulnerability described as problematic has been identified in Car-Booking-System-PHP 1.0. This impacts an unknown function of the file /carlux/booking.php. Such manipulation leads to cross site scripting. This vulnerability is traded as C
CVE-2025-63449 | Water Management System 1.0 /orders.php cross site scripting
A vulnerability categorized as problematic has been discovered in Water Management System 1.0. Impacted is an unknown function of the file /orders.php. Executing a manipulation can lead to cross site scripting. This vulnerability is registe
CVE-2025-63447 | Water Management System 1.0 /add_customer.php cross site scripting
A vulnerability was found in Water Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /add_customer.php. This manipulation causes cross site scripting. This vulnerability is tracked as CVE
CVE-2025-63446 | Water Management System 1.0 /add_vendor.php cross site scripting
A vulnerability was found in Water Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /add_vendor.php. The manipulation results in cross site scripting. This vulnerability i
CVE-2025-11618 | Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3 UDP/IPv6 null pointer dereference (GHSA-6fh9-mqxj-hmwj)
A vulnerability identified as problematic has been detected in Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3. This affects an unknown function of the component UDP/IPv6. This manipulation causes null pointer dereference. This vulnerability appea
CVE-2025-11617 | Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3 IPv6 Packet Processor buffer over-read (GHSA-wmjr-wm93-cvv2)
A vulnerability categorized as critical has been discovered in Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3. The impacted element is an unknown function of the component IPv6 Packet Processor. The manipulation results in buffer over-read. This
CVE-2025-11616 | Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3 ICMPv6 Packet Processor buffer over-read (GHSA-8j9h-xjm9-8j6j)
A vulnerability was found in Amazon AWS FreeRTOS-Plus-TCP up to 4.3.3. It has been rated as critical. The affected element is an unknown function of the component ICMPv6 Packet Processor. The manipulation leads to buffer over-read. This vul
After CVE-2026-113461: Root Cause, Residual Risk, and Closure Criteria
After CVE-2026-113461: Root Cause, Residual Risk, and Closure Criteria CVE-2026-113461 is a reminder that a monitoring plugin's local inputs are part of its security boundary. Checkmk 2.5.0p14 added loading of individual Oracle home li
CVE-2022-49624 | Linux Kernel up to 5.10.131/5.15.55/5.18.12 aq_nic_deinit information disclosure (Nessus ID 302981)
A vulnerability has been found in Linux Kernel up to 5.10.131/5.15.55/5.18.12 and classified as problematic. The affected element is the function aq_nic_deinit. Performing a manipulation results in information disclosure. This vulnerability
CVE-2022-49402 | Linux Kernel up to 5.10.120/5.15.45/5.17.13/5.18.2 Trailing Space ftrace privilege escalation (Nessus ID 241018)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.10.120/5.15.45/5.17.13/5.18.2. This affects the function ftrace of the component Trailing Space Handler. The manipulation leads to privilege escala
CVE-2022-49352 | Linux Kernel up to 5.18.2 fs/ext4/file.c ext4_setattr allocation of resources (EUVD-2022-54876 / Nessus ID 238226)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.4.197/5.10.120/5.15.45/5.17.13/5.18.2. This impacts the function ext4_setattr of the file fs/ext4/file.c. This manipulation causes allocation of re
CVE-2022-49257 | Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1 watch_queue_set_size __free_page null pointer dereference (WID-SEC-2025-2107)
A vulnerability classified as problematic has been found in Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1. Affected by this vulnerability is the function __free_page of the component watch_queue_set_size. This manipulation causes null
CVE-2022-49256 | Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1 free_watch memory leak (WID-SEC-2025-2107)
A vulnerability described as problematic has been identified in Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1. Affected is the function free_watch. The manipulation results in memory leak. This vulnerability is reported as CVE-2022-492
CVE-2022-49204 | Linux Kernel up to 5.17.1 tcp_bpf_send_verdict privilege escalation (Nessus ID 241018)
A vulnerability described as problematic has been identified in Linux Kernel up to 5.4.188/5.10.109/5.15.32/5.16.18/5.17.1. This vulnerability affects the function tcp_bpf_send_verdict. The manipulation results in privilege escalation. This
CVE-2022-49198 | Linux Kernel up to 5.16.18/5.17.1 tcp_tsorted_anchor initialization
A vulnerability identified as problematic has been detected in Linux Kernel up to 5.16.18/5.17.1. Affected by this vulnerability is the function tcp_tsorted_anchor. Performing a manipulation results in improper initialization. This vulnerab
CVE-2021-38299 | Webauthn Authenticator up to 3.3.3 FIDO2 Authenticator access control
A vulnerability labeled as critical has been found in Webauthn Authenticator up to 3.3.3. This impacts an unknown function of the component FIDO2 Authenticator. Such manipulation leads to improper access controls. This vulnerability is list
Hacker nehmen Kühlschränke einer französischen Blutbank über Sicherheitslücke bei ...
Hacker sollen die Kühlungseinstellungen in drei französischen Blutbankeinrichtungen über einen Angriff auf einen Zulieferer verändert haben. Weiterlesen