Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.222 | 0,8 % |
| ≥10 % | 22.082 | 5,8 % |
| <10 % | 354.682 | 93,2 % |
CVE-2025-39742 | Linux Kernel up to 6.16.1 RDMA find_hw_thread_mask divide by zero (EUVD-2025-28969 / Nessus ID 264750)
A vulnerability was found in Linux Kernel up to 6.16.1. It has been rated as critical. The affected element is the function find_hw_thread_mask of the component RDMA. This manipulation causes divide by zero. The identification of this vulne
CVE-2025-39741 | Linux Kernel up to 6.16.1/6.17-rc1 assertion (Nessus ID 264694 / WID-SEC-2025-2040)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.16.1/6.17-rc1. Affected by this vulnerability is an unknown functionality. This manipulation causes reachable assertion. This vulnerability appears as
CVE-2025-39740 | Linux Kernel up to 6.16.1/6.17-rc1 drm put use after free (Nessus ID 264692 / WID-SEC-2025-2040)
A vulnerability classified as critical was found in Linux Kernel up to 6.16.1/6.17-rc1. Affected is the function put of the component drm. The manipulation results in use after free. This vulnerability is reported as CVE-2025-39740. The att
CVE-2025-39739 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 MDSS arm_smmu_context_fault allocation of resources (Nessus ID 264720 / WID-SEC-2025-2040)
A vulnerability was found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. It has been declared as critical. Impacted is the function arm_smmu_context_fault of the component MDSS Component. The manipulation results in allocation of res
CVE-2026-95284 | Google Chrome up to 153.0.8010.52 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown function of the component ANGLE. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2026-95284. It is pos
CVE-2026-86345 | Red Hat Directory Server/Enterprise Linux 389-ds-base cleartext transmission (EUVD-2026-91139 / Nessus ID 373732)
A vulnerability identified as problematic has been detected in Red Hat Directory Server and Enterprise Linux. This vulnerability affects unknown code of the component 389-ds-base. This manipulation causes cleartext transmission of sensitive
CVE-2026-95281 | Google Chrome up to 153.0.8010.52 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability marked as critical has been reported in Google Chrome. The affected element is an unknown function of the component ANGLE. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-9528
CVE-2026-110152 | Google Chrome up to 155.0.8059.39 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability categorized as critical has been discovered in Google Chrome. This vulnerability affects unknown code of the component ANGLE. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026
CVE-2026-102331 | Google Chrome up to 154.0.8037.57 ANGLE buffer overflow (Nessus ID 373745 / WID-SEC-2026-3648)
A vulnerability was found in Google Chrome and classified as critical. Affected by this vulnerability is an unknown functionality of the component ANGLE. Executing a manipulation can lead to buffer overflow. This vulnerability is registered
CVE-2026-101548 | Oracle Application Testing Suite 13.3.0.1 OpenScript privileges management (Nessus ID 373755)
A vulnerability was found in Oracle Application Testing Suite 13.3.0.1. It has been declared as very critical. The affected element is an unknown function of the component OpenScript. Executing a manipulation can lead to improper privilege
CVE-2026-101549 | Oracle Application Testing Suite 13.3.0.1 OpenScript privileges management (Nessus ID 373755)
A vulnerability was found in Oracle Application Testing Suite 13.3.0.1. It has been rated as very critical. The impacted element is an unknown function of the component OpenScript. The manipulation leads to improper privilege management. Th
CVE-2026-93588 | ImageMagick prior 7.1.2-31/6.9.13-56 Pnm Image null pointer dereference (EUVD-2026-82907)
A vulnerability labeled as problematic has been found in ImageMagick. The impacted element is an unknown function of the component Pnm Image Handler. Such manipulation leads to null pointer dereference. This vulnerability is referenced as C
CVE-2026-93587 | ImageMagick prior 7.1.2-31/6.9.13-56 PCD Coder allocation of resources (EUVD-2026-82906)
A vulnerability identified as problematic has been detected in ImageMagick. This impacts an unknown function of the component PCD Coder. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2026-935
CVE-2026-61645 | docat-org docat up to 1.5.x Upload API unrestricted upload (EUVD-2026-113395)
A vulnerability marked as critical has been reported in docat-org docat up to 1.5.x. This impacts an unknown function of the component Upload API. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2026-61645
CVE-2026-61654 | Lightdash up to 0.3213.0 Webhook projectController.ts testWebhook accountId/runId path traversal (EUVD-2026-113396)
A vulnerability labeled as critical has been found in Lightdash up to 0.3213.0. This affects the function testWebhook of the file packages/backend/src/controllers/projectController.ts of the component Webhook. Executing a manipulation of th
CVE-2026-61671 | LabRedesCefetRJ WeGIA up to 3.8.6 AtendidoControle /controle/control.php AtendidoControle.alterar authorization (EUVD-2026-113397)
A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.8.6. It has been declared as problematic. This issue affects the function AtendidoControle.alterar of the file /controle/control.php of the component AtendidoControle. The manipulat
CVE-2026-61673 | LabRedesCefetRJ WeGIA up to 3.8.6 DOM listar_despachos.php html_entity_decode texto cross site scripting (EUVD-2026-113398)
A vulnerability categorized as problematic has been discovered in LabRedesCefetRJ WeGIA up to 3.8.6. The affected element is the function html_entity_decode of the file web/html/memorando/listar_despachos.php of the component DOM. Such mani
CVE-2026-61707 | SOCFortress CoPilot up to 0.1.75 Template Rendering db_operations.py render_document_with_context special elements in template engine (EUVD-2026-113399)
A vulnerability was found in SOCFortress CoPilot up to 0.1.75. It has been rated as very critical. Impacted is the function render_document_with_context of the file backend/app/incidents/routes/db_operations.py of the component Template Ren
CVE-2026-35632 | OpenClaw up to 2026.2.22 agents.create/agents.update symlink (GHSA-7xr2-q9vf-x4r5)
A vulnerability has been found in OpenClaw up to 2026.2.22 and classified as critical. Affected is the function agents.create/agents.update. Performing a manipulation results in symlink following. This vulnerability is identified as CVE-202
CVE-2026-22185 | OpenLDAP Lightning Memory-Mapped Database up to 2.6.10 readline out-of-bounds (EUVD-2026-1169 / Nessus ID 282442)
A vulnerability classified as problematic has been found in OpenLDAP Lightning Memory-Mapped Database up to 2.6.10. This vulnerability affects the function readline. The manipulation leads to out-of-bounds read. This vulnerability is unique
CVE-2018-25308 | donmik Buddypress Xprofile Custom Fields Type 2.6.3 POST Parameter field_hiddenfile/field_deleteimg path traversal (Exploit 44432 / EDB-44432)
A vulnerability described as critical has been identified in donmik Buddypress Xprofile Custom Fields Type 2.6.3. Affected by this issue is some unknown functionality of the component POST Parameter Handler. Such manipulation of the argumen
CVE-2017-20243 | QuanticaLabs Car Park Booking System 1.0 booking-page Endpoint SLEEP space_id sql injection (Exploit 43012)
A vulnerability marked as critical has been reported in QuanticaLabs Car Park Booking System 1.0. Affected by this issue is the function SLEEP of the component booking-page Endpoint. Performing a manipulation of the argument space_id result
CVE-2026-87400 | Oracle WebCenter Content 14.1.2.0.0 Content Server improper authorization (Nessus ID 373756)
A vulnerability classified as critical has been found in Oracle WebCenter Content 14.1.2.0.0. Affected by this issue is some unknown functionality of the component Content Server. Performing a manipulation results in improper authorization.
CVE-2026-91504 | Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 Content Portal Suite privileges management (Nessus ID 373756)
A vulnerability, which was classified as critical, has been found in Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0. Affected is an unknown function of the component Content Portal Suite. The manipulation leads to improper privilege managem
CVE-2026-91495 | Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 Content Server privileges management (Nessus ID 373756)
A vulnerability, which was classified as critical, was found in Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0. This affects an unknown part of the component Content Server. The manipulation results in improper privilege management. This vu
CVE-2026-117888 | Mozilla Firefox up to 153.5/158 Canvas2D uninitialized pointer (Nessus ID 373648)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 153.5/158. This affects an unknown part of the component Canvas2D. The manipulation leads to uninitialized pointer. This vulnerability is listed as C
CVE-2026-117887 | Mozilla Firefox up to 115.43/153.5/158 DOM use after free (Nessus ID 373648)
A vulnerability classified as critical was found in Mozilla Firefox up to 115.43/153.5/158. Affected by this issue is some unknown functionality of the component DOM. Executing a manipulation can lead to use after free. This vulnerability i
CVE-2026-117886 | Mozilla Firefox up to 115.43/153.5/158 Graphics Text input validation (Nessus ID 373648)
A vulnerability marked as critical has been reported in Mozilla Firefox up to 115.43/153.5/158. This impacts an unknown function of the component Graphics Text. This manipulation causes improper input validation. The identification of this
CVE-2026-117883 | Mozilla Firefox up to 115.43/153.5/158 HTML Parser use after free (Nessus ID 373648)
A vulnerability labeled as critical has been found in Mozilla Firefox up to 115.43/153.5/158. This affects an unknown function of the component HTML Parser. The manipulation results in use after free. This vulnerability was named CVE-2026-1
CVE-2026-117882 | Mozilla Firefox up to 115.43/153.5/158 Layout use after free (Nessus ID 373648)
A vulnerability identified as critical has been detected in Mozilla Firefox up to 115.43/153.5/158. The impacted element is an unknown function of the component Layout. The manipulation leads to use after free. This vulnerability is uniquel
CVE-2026-117881 | Mozilla Firefox up to 115.43/153.5/158 DOM use after free (Nessus ID 373648)
A vulnerability was found in Mozilla Firefox up to 115.43/153.5/158. It has been declared as critical. This issue affects some unknown processing of the component DOM. Such manipulation leads to use after free. This vulnerability is traded
CVE-2026-117880 | Mozilla Firefox up to 115.43/153.5/158 XML use after free (Nessus ID 373648)
A vulnerability was found in Mozilla Firefox up to 115.43/153.5/158. It has been rated as critical. Impacted is an unknown function of the component XML. Performing a manipulation results in use after free. This vulnerability is known as CV
CVE-2026-117879 | Mozilla Firefox up to 115.43/153.5/158 Layout Tables array index (Nessus ID 373648)
A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 115.43/153.5/158. The affected element is an unknown function of the component Layout Tables. Executing a manipulation can lead to improper validation of a
CVE-2026-117878 | Mozilla Firefox up to 115.43/153.5/158 IndexedDB use after free (Nessus ID 373648)
A vulnerability was found in Mozilla Firefox up to 115.43/153.5/158. It has been classified as critical. This vulnerability affects unknown code of the component IndexedDB. This manipulation causes use after free. This vulnerability appears
CVE-2026-61719 | LabRedesCefetRJ WeGIA up to 3.8.6 historico_prontuarios.php textoProntuario cross site scripting (EUVD-2026-113400)
A vulnerability identified as problematic has been detected in LabRedesCefetRJ WeGIA up to 3.8.6. The impacted element is an unknown function of the file saude/historico_prontuarios.php. Performing a manipulation of the argument textoProntu
CVE-2026-107444 | Red Hat Hardened Images/Satellite Docker Tags information disclosure (EUVD-2026-94692)
A vulnerability classified as problematic has been found in Red Hat Hardened Images and Satellite. Affected by this vulnerability is an unknown functionality of the component Docker Tags. Performing a manipulation results in information dis
CVE-2026-117877 | Mozilla Firefox up to 153.5/158 Layout Text/Fonts use after free (Nessus ID 373648)
A vulnerability was found in Mozilla Firefox up to 153.5/158 and classified as critical. This affects an unknown part of the component Layout Text/Fonts. The manipulation results in use after free. This vulnerability is reported as CVE-2026
CVE-2026-117876 | Mozilla Firefox up to 115.43/153.5/158 Layout use after free (Nessus ID 373648)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 115.43/153.5/158. Affected is an unknown function of the component Layout. Performing a manipulation results in use after free. This vulnerability is
CVE-2026-117874 | Mozilla Firefox up to 115.43/153.5/158 Internationalization use after free (Nessus ID 373648)
A vulnerability has been found in Mozilla Firefox up to 115.43/153.5/158 and classified as critical. Affected by this issue is some unknown functionality of the component Internationalization. The manipulation leads to use after free. This
CVE-2026-117873 | Mozilla Firefox up to 115.43/153.5/158 Audio Video Playback array index (Nessus ID 373648)
A vulnerability classified as critical was found in Mozilla Firefox up to 115.43/153.5/158. This impacts an unknown function of the component Audio Video Playback. Such manipulation leads to improper validation of array index. This vulnerab
CVE-2026-117872 | Mozilla Firefox up to 115.43/153.5/158 JavaScript use after free (Nessus ID 373648)
A vulnerability classified as critical has been found in Mozilla Firefox up to 115.43/153.5/158. This affects an unknown function of the component JavaScript. This manipulation causes use after free. This vulnerability is tracked as CVE-202
CVE-2026-117871 | Mozilla Firefox up to 153.5/158 Graphics memory corruption (Nessus ID 373648)
A vulnerability labeled as critical has been found in Mozilla Firefox up to 153.5/158. Impacted is an unknown function of the component Graphics Component. Executing a manipulation can lead to memory corruption. The identification of this v
CVE-2022-48126 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg username command injection (EUVD-2022-50838)
A vulnerability, which was classified as critical, has been found in TOTOLINK A7100RU 7.4cu.2313_B20191024. This affects the function setOpenVpnCertGenerationCfg of the component Setting Handler. Performing a manipulation of the argument Us
CVE-2022-48125 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg password command injection (EUVD-2022-50837)
A vulnerability classified as critical was found in TOTOLINK A7100RU 7.4cu.2313_B20191024. Affected by this issue is the function setOpenVpnCertGenerationCfg of the component Setting Handler. Such manipulation of the argument Password leads
CVE-2022-48124 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting setOpenVpnCertGenerationCfg FileName command injection (EUVD-2022-50836)
A vulnerability classified as critical has been found in TOTOLINK A7100RU 7.4cu.2313_B20191024. Affected by this vulnerability is the function setOpenVpnCertGenerationCfg of the component Setting Handler. This manipulation of the argument F
CVE-2026-92092 | Red Hat OpenShift Container Platform openshift-ansible channel accessible (EUVD-2026-113354)
A vulnerability was found in Red Hat OpenShift Container Platform. It has been rated as critical. Affected is an unknown function of the component openshift-ansible. Performing a manipulation results in channel accessible by non-endpoint. T
CVE-2026-51832 | IDrive Backup up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113367)
A vulnerability was found in IDrive Backup up to 7.0.1.1. It has been classified as problematic. This affects an unknown function of the file id_service.exe. This manipulation causes os command injection. This vulnerability is registered as
CVE-2026-51831 | IDrive Backup for Windows up to 7.0.1.1 id_service.exe os command injection (EUVD-2026-113368)
A vulnerability was found in IDrive Backup for Windows up to 7.0.1.1 and classified as problematic. The impacted element is an unknown function of the file id_service.exe. The manipulation results in os command injection. This vulnerability
CVE-2026-119325 | Bricks Theme Plugin up to 2.4.0 Popup Content load_popup_content popupId access control (EUVD-2026-113376)
A vulnerability was found in Bricks Theme Plugin up to 2.4.0. It has been rated as problematic. This affects an unknown part of the file /wp-json/bricks/v1/load_popup_content of the component Popup Content. The manipulation of the argument
CVE-2026-13303 | HashiCorp Boundary prior 1.0.2/0.21.6 Vault Credential Store Integration server-side request forgery (EUVD-2026-113390)
A vulnerability, which was classified as problematic, has been found in HashiCorp Boundary. Affected is an unknown function of the component Vault Credential Store Integration. This manipulation causes server-side request forgery. The ident
CVE-2026-119284 | authlib joserfc up to 1.7.5 Compact JWS Deserialization deserialize_compact allocation of resources (EUVD-2026-113401)
A vulnerability classified as problematic was found in authlib joserfc up to 1.7.5. Affected by this issue is the function deserialize_compact of the component Compact JWS Deserialization. Such manipulation leads to allocation of resources.
CVE-2026-119285 | Gofiber Fiber up to 2.52.2 CORS Middleware middleware/cors/utils.go cross-domain policy (EUVD-2026-113402)
A vulnerability, which was classified as problematic, has been found in Gofiber Fiber up to 2.52.2. This affects an unknown part of the file middleware/cors/utils.go of the component CORS Middleware. Performing a manipulation results in per
CVE-2026-115943 | Spreadsheet::XLSX up to 0.18 ExcelFmt os command injection (EUVD-2026-113403)
A vulnerability classified as critical has been found in Spreadsheet::XLSX up to 0.18. Affected by this vulnerability is an unknown functionality of the component ExcelFmt. This manipulation causes os command injection. This vulnerability i
CVE-2026-119286 | graphql-python graphql-core up to 3.3.0 Validation Error validate resource consumption (EUVD-2026-113404)
A vulnerability described as problematic has been identified in graphql-python graphql-core up to 3.3.0. Affected is the function validate of the component Validation Error Handler. The manipulation results in resource consumption. This vul
CVE-2026-9268 | GitLab up to 19.2.7/19.3.4/19.4.1 CI/CD Deployment Rollback Settings privileges management (WID-SEC-2026-3858)
A vulnerability was found in GitLab up to 19.2.7/19.3.4/19.4.1. It has been classified as problematic. The impacted element is an unknown function of the component CI/CD Deployment Rollback Settings. This manipulation causes improper privil
CVE-2026-82632 | GitLab up to 19.2.7/19.3.4/19.4.1 Import improper authorization (WID-SEC-2026-3858)
A vulnerability, which was classified as problematic, was found in GitLab up to 19.2.7/19.3.4/19.4.1. This issue affects some unknown processing of the component Import. Executing a manipulation can lead to improper authorization. The ident
CVE-2025-34253 | D-Link Nuclias Connect up to 1.3.1.4 Network cross site scripting (EUVD-2025-34830)
A vulnerability identified as problematic has been detected in D-Link Nuclias Connect up to 1.3.1.4. Impacted is an unknown function. The manipulation of the argument Network leads to cross site scripting. This vulnerability is listed as CV
CVE-2025-34108 | Falconstor Disk Pulse Enterprise 9.0.34 HTTP POST Request /login username stack-based overflow (EDB-40452)
A vulnerability classified as critical has been found in Falconstor Disk Pulse Enterprise 9.0.34. The affected element is an unknown function in the library libspp.dll of the file /login of the component HTTP POST Request Handler. This mani
CVE-2024-58300 | Siklu MultiHaul TG 1.x Network Request missing authentication (Exploit 51932 / EDB-51932)
A vulnerability was found in Siklu MultiHaul TG 1.x. It has been declared as critical. This affects an unknown function of the component Network Request Handler. Executing a manipulation can lead to missing authentication. This vulnerabilit
CVE-2024-58296 | PhoenixCart CE Phoenix 1.0.8.20 Administration Panel title cross site scripting (Exploit 52015 / EDB-52015)
A vulnerability was found in PhoenixCart CE Phoenix 1.0.8.20. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Administration Panel. Such manipulation of the argument Title leads to