Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.089 | 5,9 % |
| <10 % | 347.507 | 93,0 % |
The Anatomy of CVE-2024-4577: Why You Shouldn’t Abandon PHP Over a CGI Best-Fit Code Page Exploit
When a critical Remote Code Execution (RCE) vulnerability hits a language that powers a large share of the web, the headlines predictably declare the death of the ecosystem. But CVE-2024-4577 is not a flaw in modern PHP itself. It is a subt
CVE-2026-114603 | OpenTelemetry Python up to 1.45.0 TraceContextTextMapPropagator span.py TraceState.from_header resource consumption (Nessus ID 371635)
A vulnerability labeled as problematic has been found in OpenTelemetry Python up to 1.45.0. Affected by this issue is the function TraceState.from_header of the file opentelemetry/trace/span.py of the component TraceContextTextMapPropagator
CVE-2026-94422 | Red Hat xdg-dbus-proxy up to 0.1.8 Message Filtering privileges management (Nessus ID 371658)
A vulnerability, which was classified as very critical, was found in Red Hat xdg-dbus-proxy up to 0.1.8. Affected by this issue is some unknown functionality of the component Message Filtering. Executing a manipulation can lead to improper
CVE-2026-78663 | Go net http internal http2 x net http2 HTTP/2 Server Flow Control multiple operations on resource in single-operation context (ID 847187 / EUVD-2026-95427)
A vulnerability, which was classified as problematic, was found in Go net http internal http2 x net http2. Affected by this vulnerability is an unknown functionality of the component HTTP2 Server Flow Control. Executing a manipulation can l
CVE-2026-80663 | Linux Kernel up to 7.1.4 intel-speed-select fstat link following (Nessus ID 371666 / WID-SEC-2026-3075)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function fstat of the file tools/power/x86/intel-speed-select of the component intel-speed-select. E
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Bu
CVE-2023-25743 | Mozilla Firefox Focus up to 109 Fullscreen Notification authentication spoofing (Bug 1800203 / EUVD-2023-29650)
A vulnerability classified as critical has been found in Mozilla Firefox Focus up to 109. This issue affects some unknown processing of the component Fullscreen Notification Handler. This manipulation causes authentication bypass by spoofin
CVE-2023-25742 | Mozilla Firefox up to 109 SPKI RSA Public Key denial of service (Bug 1813424 / EUVD-2023-29649)
A vulnerability classified as problematic has been found in Mozilla Firefox up to 109. The impacted element is an unknown function of the component SPKI RSA Public Key Handler. Performing a manipulation results in denial of service. This vu
CVE-2023-25739 | Mozilla Thunderbird up to 102.7 ~ScriptLoadContext use after free (EUVD-2023-29646 / Nessus ID 245197)
A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been rated as critical. Affected by this vulnerability is the function ~ScriptLoadContext. The manipulation leads to use after free. This vulnerability is referenced as CV
CVE-2023-25737 | Mozilla Thunderbird up to 102.7 SetupStrokeGeometry Remote Code Execution (EUVD-2023-29644)
A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been classified as critical. This impacts an unknown function of the component SetupStrokeGeometry. Performing a manipulation results in Remote Code Execution. This vulner
CVE-2023-25735 | Mozilla Firefox up to 109 SpiderMonkey use after free (Bug 1810711 / EUVD-2023-29642)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 109. The affected element is an unknown function of the component SpiderMonkey. Performing a manipulation results in use after free. This vulnerabili
IT-Experte mahnt - Horst Kasper: „PHP-Sicherheitslücke ist Weckruf“ | krone.at
Laut IT-Security-Experte Horst Kasper verdeutlichen die Vorfälle die zentrale Bedeutung professioneller IT-Betreuung: Rasches Handeln, aktuelle ... Weiterlesen
CVE-2023-25734 | Mozilla Firefox up to 109 URL File Remote Code Execution (Bug 1809923 / EUVD-2023-29641)
A vulnerability was found in Mozilla Firefox up to 109. It has been rated as critical. Affected by this issue is some unknown functionality of the component URL File Handler. Performing a manipulation results in Remote Code Execution. This
CVE-2023-25732 | Mozilla Thunderbird up to 102.7 EncodeInputStream out-of-bounds (EUVD-2023-29639)
A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been declared as problematic. Affected is an unknown function of the component EncodeInputStream. Executing a manipulation can lead to out-of-bounds read. The identificati
CVE-2023-25730 | Mozilla Thunderbird up to 102.7 Fullscreen Mode requestFullscreen Remote Code Execution (EUVD-2023-29637)
A vulnerability was found in Mozilla Thunderbird up to 102.7 and classified as critical. Impacted is the function requestFullscreen of the component Fullscreen Mode. The manipulation results in Remote Code Execution. This vulnerability was
CVE-2023-25728 | Mozilla Thunderbird up to 102.7 ui layer (EUVD-2023-29635 / Nessus ID 247804)
A vulnerability, which was classified as problematic, has been found in Mozilla Thunderbird up to 102.7. Impacted is an unknown function. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is traded as
CVE-2023-23605 | Mozilla Firefox up to 108 memory corruption (EUVD-2023-27705)
A vulnerability was found in Mozilla Firefox up to 108. It has been classified as critical. Impacted is an unknown function. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2023-23605. The attack may be init
CVE-2023-23599 | Mozilla Firefox up to 108 Developer Tools Panel command injection (Bug 1777800 / EUVD-2023-27699)
A vulnerability classified as problematic has been found in Mozilla Firefox up to 108. Affected is an unknown function of the component Developer Tools Panel. The manipulation leads to command injection. This vulnerability is uniquely ident
CVE-2023-1945 | Mozilla Thunderbird up to 102.9 Safe Browsing API memory corruption (Bug 1777588 / EUVD-2023-24131)
A vulnerability classified as critical was found in Mozilla Thunderbird up to 102.9. Affected is an unknown function of the component Safe Browsing API. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2
CVE-2023-0767 | Mozilla Firefox up to 109 NSS memory corruption (Bug 1804640 / Nessus ID 239916)
A vulnerability classified as critical was found in Mozilla Firefox up to 109. Impacted is an unknown function of the component NSS. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2023-0767. The attack may
250.000 Solaranlagen in Deutschland betroffen: Hacker findet krasse Sicherheitslücke
Ein kleiner Login-Fehler ermöglichte weitreichenden Zugriff auf eine zentrale Solar-Cloud. Wie groß die daraus entstandene Gefahr für das deutsche ... Weiterlesen
CVE-2023-31208 | Checkmk up to 2.0.0p35/2.1.0p27/2.2.0b7 RestAPI delimiter
A vulnerability labeled as critical has been found in Checkmk up to 2.0.0p35/2.1.0p27/2.2.0b7. The affected element is an unknown function of the component RestAPI. Executing a manipulation can lead to improper neutralization of delimiters.
CVE-2023-30898 | Siemens Siveillance Video 2023 Event Server deserialization (ssa-789345)
A vulnerability categorized as very critical has been discovered in Siemens Siveillance Video 2020, Siveillance Video 2021, Siveillance Video 2022 and Siveillance Video 2023. Affected by this vulnerability is an unknown functionality of the
CVE-2023-29128 | Siemens SIMATIC Cloud Connect 7 2.0 Web Based Management filename path traversal (ssa-555292)
A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been rated as critical. Affected is an unknown function of the component Web Based Management. This manipulation of the argument filename causes path traversal. This v
CVE-2023-29107 | Siemens SIMATIC Cloud Connect 7 2.0 Export Endpoint file access (ssa-555292)
A vulnerability has been found in Siemens SIMATIC Cloud Connect 7 2.0 and classified as problematic. The affected element is an unknown function of the component Export Endpoint. Performing a manipulation results in files or directories acc
CVE-2023-28325 | Rocket.Chat up to 5.x updateMessage rid improper authorization (EUVD-2023-32032)
A vulnerability was found in Rocket.Chat up to 5.x and classified as critical. The impacted element is the function updateMessage. Executing a manipulation of the argument rid can lead to improper authorization. This vulnerability is tracke
CVE-2023-22648 | SUSE Rancher up to 2.7.3 Azure AD privileges management (GHSA-vf6j-6739-78m8)
A vulnerability classified as critical has been found in SUSE Rancher up to 2.7.3. The affected element is an unknown function of the component Azure AD Handler. This manipulation causes improper privilege management. This vulnerability is
CVE-2023-0616 | Mozilla Thunderbird up to 102.7 MIME Email denial of service (EUVD-2023-12651)
A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 102.7. This impacts an unknown function of the component MIME Email Handler. Executing a manipulation can lead to denial of service. This vulnerabil
CVE-2023-0430 | Mozilla Thunderbird up to 102.7.0 Signature certificate validation (EUVD-2023-12487)
A vulnerability was found in Mozilla Thunderbird up to 102.7.0. It has been rated as critical. This affects an unknown function of the component Signature Handler. Performing a manipulation results in improper certificate validation. This v
CVE-2022-45846 | Nickys Image Map Pro Plugin 5.6.9 on WordPress cross-site request forgery
A vulnerability was found in Nickys Image Map Pro Plugin 5.6.9 on WordPress. It has been classified as problematic. This affects an unknown part. Performing a manipulation results in cross-site request forgery. This vulnerability is identif
CVE-2023-29525 | XWiki xwiki-platform-distribution-war prior 14.4.8/14.10.3/15.0-rc-1 LegacyNotificationAdministration since escape output (GHSA-jgg7-w2rj-58cj)
A vulnerability, which was classified as critical, has been found in XWiki xwiki-platform-distribution-war and xwiki-platform-legacy-events-hibernate-ui. Affected by this vulnerability is an unknown functionality of the file /xwiki/bin/view
CVE-2023-29104 | Siemens SIMATIC Cloud Connect 7 2.0 Web Based Management path traversal (ssa-555292)
A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been classified as critical. This affects an unknown function of the component Web Based Management. The manipulation leads to path traversal. This vulnerability is do
CVE-2023-27535 | libcurl up to 7.x FTP Connection Reuse authentication bypass (FEDORA-2023-7e7414e64d / Nessus ID 236679)
A vulnerability identified as problematic has been detected in libcurl up to 7.x. Affected by this vulnerability is an unknown functionality of the component FTP Connection Reuse Handler. This manipulation causes authentication bypass by pr
CVE-2023-27464 | Siemens Mendix up to 3.7.0/4.1.0/5.1.0 Forgot Password response discrepancy (ssa-699404)
A vulnerability categorized as problematic has been discovered in Siemens Mendix up to 3.7.0/4.1.0/5.1.0. This vulnerability affects unknown code of the component Forgot Password Handler. The manipulation results in observable response disc
CVE-2023-27409 | Siemens SCALANCE LPE9403 up to 2.0 SSH Interface path traversal (ssa-325383)
A vulnerability classified as critical was found in Siemens SCALANCE LPE9403 up to 2.0. The affected element is an unknown function of the component SSH Interface. Such manipulation leads to path traversal. This vulnerability is referenced
CVE-2023-27407 | Siemens SCALANCE LPE9403 up to 2.0 Web Based Management command injection (ssa-325383)
A vulnerability, which was classified as critical, was found in Siemens SCALANCE LPE9403 up to 2.0. Impacted is an unknown function of the component Web Based Management. Such manipulation leads to command injection. This vulnerability is l
CVE-2023-27406 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File stack-based overflow (ssa-847261)
A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation 16.0.5. The affected element is an unknown function of the component SPP File Handler. Executing a manipulation can lead to stack-based buffer
CVE-2023-22691 | Tips and Tricks HQ Plugin up to 2.1 on WordPress cross-site request forgery
A vulnerability, which was classified as problematic, has been found in Tips and Tricks HQ Plugin up to 2.1 on WordPress. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability
CVE-2023-2017 | Shopware up to 6.4.20.0/6.5.0.0-rc1/6.5.0.0-rc4 special elements in template engine (GHSA-7v2v-9rm4-7m8f)
A vulnerability labeled as critical has been found in Shopware up to 6.4.20.0/6.5.0.0-rc1/6.5.0.0-rc4. The affected element is an unknown function. Such manipulation leads to improper neutralization of special elements used in a template en
CVE-2023-27530 | Rack Gem on Ruby Multipart MIME Parsing denial of service (Nessus ID 207797)
A vulnerability, which was classified as problematic, was found in Rack Gem on Ruby. The affected element is an unknown function of the component Multipart MIME Parsing. Such manipulation leads to denial of service. This vulnerability is un
CVE-2023-27401 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component SPP File Handler. Executing a manipulation can lead to
CVE-2023-27400 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been classified as critical. Affected is an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This v
CVE-2023-27309 | Siemens RUGGEDCOM CROSSBOW up to 5.1 Client Query authorization (ssa-260625)
A vulnerability classified as problematic was found in Siemens RUGGEDCOM CROSSBOW up to 5.1. Impacted is an unknown function of the component Client Query Handler. Executing a manipulation can lead to missing authorization. The identificati
CVE-2023-25207 | dpdfrance up to 6.1.2 on PrestaShop dpdfrance/ajax.php sql injection (EUVD-2023-29170)
A vulnerability labeled as critical has been found in dpdfrance up to 6.1.2 on PrestaShop. The affected element is an unknown function of the file dpdfrance/ajax.php. Such manipulation leads to sql injection. This vulnerability is uniquely
CVE-2023-24996 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. This affects an unknown function of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is re
CVE-2023-24994 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability, which was classified as critical, was found in Siemens Tecnomatix Plant Simulation 16.0.5. The affected element is an unknown function of the component SPP File Handler. The manipulation results in out-of-bounds write. This
CVE-2023-23919 | Node.js up to 14.21.2/16.19.0/18.14.0/19.1.x OpenSSL Error cryptographic issue (EUVD-2023-28001 / Nessus ID 216256)
A vulnerability labeled as problematic has been found in Node.js up to 14.21.2/16.19.0/18.14.0/19.1.x. The affected element is an unknown function of the component OpenSSL Error Handler. The manipulation results in cryptographic issues. Thi
CVE-2023-23918 | Node.js up to 14.21.2/16.19.0/18.14.0/19.6.0 permission (EUVD-2023-28000 / Nessus ID 216256)
A vulnerability was found in Node.js up to 14.21.2/16.19.0/18.14.0/19.6.0. It has been classified as critical. This issue affects some unknown processing. Performing a manipulation results in permission issues. This vulnerability is catalog
CVE-2023-23917 | Rocket.Chat Server up to 5.1.x command injection (EUVD-2023-27999)
A vulnerability labeled as critical has been found in Rocket.Chat Server up to 5.1.x. This impacts an unknown function. Such manipulation leads to command injection. This vulnerability is traded as CVE-2023-23917. The attack may be launched
CVE-2023-23080 | Tenda CP3/CP7/IT7-PCS/IT7-LCS/IT7-PRS command injection (EUVD-2023-27180)
A vulnerability has been found in Tenda CP3, CP7, IT7-PCS, IT7-LCS and IT7-PRS and classified as critical. The impacted element is an unknown function. This manipulation causes command injection. This vulnerability appears as CVE-2023-23080
CVE-2023-22974 | OpenEMR up to 6.x setup.php path traversal (EUVD-2023-27074)
A vulnerability labeled as critical has been found in OpenEMR up to 6.x. This affects an unknown function of the file setup.php. The manipulation results in path traversal. This vulnerability was named CVE-2023-22974. The attack may be perf
CVE-2026-31431 prüfen: 12 Schritte, 75 Min [2026] - shattered.io
Weitere Grundlagen zu Schwachstellen und Gegenmaßnahmen finden Sie in der Rubrik Cybersicherheit. Der Plan unterteilt sich in zwölf Schritte. Die ... Weiterlesen
CVE-2023-24992 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. This issue affects some unknown processing of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vul
CVE-2023-24991 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability classified as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. This vulnerability affects unknown code of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This v
CVE-2023-24990 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation 16.0.5. This affects an unknown part of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is t
CVE-2023-24988 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability labeled as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this vulnerability is an unknown functionality of the component SPP File Handler. The manipulation results in out-of-bounds write.
CVE-2023-24986 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability categorized as critical has been discovered in Siemens Tecnomatix Plant Simulation 16.0.5. This impacts an unknown function of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vu
CVE-2023-24985 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been rated as critical. This affects an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This vulne
CVE-2023-24983 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been classified as critical. The affected element is an unknown function of the component SPP File Handler. This manipulation causes out-of-bounds write. This v
CVE-2023-24978 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File uninitialized pointer (ssa-847261)
A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this issue is some unknown functionality of the component SPP File Handler. Such manipulation leads to uninitialized pointer. This v