Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.089 | 5,9 % |
| <10 % | 347.465 | 93,0 % |
CVE-2023-24992 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. This issue affects some unknown processing of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vul
CVE-2023-24991 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability classified as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. This vulnerability affects unknown code of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This v
CVE-2023-24990 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation 16.0.5. This affects an unknown part of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is t
CVE-2023-24988 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability labeled as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this vulnerability is an unknown functionality of the component SPP File Handler. The manipulation results in out-of-bounds write.
CVE-2023-24986 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability categorized as critical has been discovered in Siemens Tecnomatix Plant Simulation 16.0.5. This impacts an unknown function of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write. This vu
CVE-2023-24985 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been rated as critical. This affects an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This vulne
CVE-2023-24983 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been classified as critical. The affected element is an unknown function of the component SPP File Handler. This manipulation causes out-of-bounds write. This v
CVE-2023-24978 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File uninitialized pointer (ssa-847261)
A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this issue is some unknown functionality of the component SPP File Handler. Such manipulation leads to uninitialized pointer. This v
CVE-2023-24563 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File uninitialized pointer (ssa-491245)
A vulnerability labeled as critical has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. This affects an unknown function of the component PAR File Handler. Executing a manipulation can lead to uninitialized pointer. This vuln
CVE-2023-24561 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File uninitialized pointer (ssa-491245)
A vulnerability categorized as critical has been discovered in Siemens Solid Edge SE2022 and Solid Edge SE2023. The affected element is an unknown function of the component PAR File Handler. Such manipulation leads to uninitialized pointer.
CVE-2023-24560 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds write (ssa-491245)
A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023. It has been rated as critical. Impacted is an unknown function of the component PAR File Handler. This manipulation causes out-of-bounds write. This vulnerability
CVE-2023-24558 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds (ssa-491245)
A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023. It has been classified as problematic. This vulnerability affects unknown code of the component PAR File Handler. The manipulation leads to out-of-bounds read. Th
CVE-2023-24557 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds (ssa-491245)
A vulnerability was found in Siemens Solid Edge SE2022 and Solid Edge SE2023 and classified as problematic. This affects an unknown part of the component PAR File Handler. Executing a manipulation can lead to out-of-bounds read. This vulner
CVE-2023-24554 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds (ssa-491245)
A vulnerability, which was classified as problematic, has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. Affected is an unknown function of the component PAR File Handler. This manipulation causes out-of-bounds read. The ide
CVE-2023-24551 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File heap-based overflow (ssa-491245)
A vulnerability described as critical has been identified in Siemens Solid Edge SE2022 and Solid Edge SE2023. The impacted element is an unknown function of the component PAR File Handler. Executing a manipulation can lead to heap-based buf
CVE-2023-22799 | GlobalID Gem prior 1.0.1 on Ruby redos (EUVD-2023-0304)
A vulnerability has been found in GlobalID Gem on Ruby and classified as problematic. Impacted is an unknown function. Performing a manipulation results in inefficient regular expression complexity. This vulnerability is cataloged as CVE-20
CVE-2023-22792 | actionpack Gem up to 6.1.3.2 on Ruby Action Dispatch redos (EUVD-2023-0513)
A vulnerability labeled as problematic has been found in actionpack Gem up to 6.1.3.2 on Ruby. This impacts an unknown function of the component Action Dispatch. Such manipulation leads to inefficient regular expression complexity. This vul
CVE-2022-47977 | Siemens JT Open/JT Utilities up to 11.2.2.x/13.2.2.x JT File memory corruption (ssa-836777)
A vulnerability was found in Siemens JT Open and JT Utilities up to 11.2.2.x/13.2.2.x. It has been rated as critical. This affects an unknown part of the component JT File Handler. The manipulation leads to memory corruption. This vulnerabi
CVE-2022-44566 | activerecord Gem on Ruby PostgreSQL Adapter denial of service (Nessus ID 276881)
A vulnerability identified as problematic has been detected in activerecord Gem on Ruby. This affects an unknown function of the component PostgreSQL Adapter. This manipulation causes denial of service. This vulnerability is handled as CVE-
CVE-2022-31808 | Siemens SiPass integrated AC5102/SiPass integrated ACC-AP Telnet Command Line Interface Parser command injection (ssa-658793)
A vulnerability has been found in Siemens SiPass integrated AC5102 and SiPass integrated ACC-AP and classified as critical. This impacts an unknown function of the component Telnet Command Line Interface Parser. This manipulation causes com
CVE-2026-93990 | Expat up to 2.8.4 xml injection (EUVD-2026-83618 / Nessus ID 348348)
A vulnerability classified as problematic has been found in Expat up to 2.8.4. This affects an unknown function. The manipulation leads to xml injection. This vulnerability is uniquely identified as CVE-2026-93990. The attack is possible to
CVE-2026-90050 | Linux Kernel up to 7.3-rc1/7.3-rc2 fq net/sched/sch_fq.c fq_change TCA_FQ_QUANTUM/TCA_FQ_INITIAL_QUANTUM input validation (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 7.3-rc1/7.3-rc2 and classified as problematic. Affected by this vulnerability is the function fq_change of the file net/sched/sch_fq.c of the component fq. This manipulation of the argume
CVE-2026-95511 | Red Hat Enterprise Linux/Hardened Images 7/8/9/10 Serial Backend privileges management (EUVD-2026-84335 / WID-SEC-2026-3497)
A vulnerability was found in Red Hat Enterprise Linux and Hardened Images 7/8/9/10. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Serial Backend. Such manipulation leads t
CVE-2026-63278 | Document Foundation LibreOffice up to 26.2.4 URL Expansion information disclosure (EUVD-2026-84357 / WID-SEC-2026-3521)
A vulnerability identified as problematic has been detected in Document Foundation LibreOffice up to 26.2.4. The affected element is an unknown function of the component URL Expansion. This manipulation causes information disclosure. This v
CVE-2026-63279 | Document Foundation LibreOffice up to 26.2.4 PICT Image out-of-bounds (EUVD-2026-84358 / WID-SEC-2026-3521)
A vulnerability categorized as critical has been discovered in Document Foundation LibreOffice up to 26.2.4. Impacted is an unknown function of the component PICT Image Handler. The manipulation results in out-of-bounds read. This vulnerabi
CVE-2026-63274 | Document Foundation LibreOffice up to 26.2.4 PDF Import heap-based overflow (EUVD-2026-84354 / Nessus ID 365560)
A vulnerability, which was classified as critical, has been found in Document Foundation LibreOffice up to 26.2.4. Affected by this issue is some unknown functionality of the component PDF Import. This manipulation causes heap-based buffer
CVE-2026-63273 | Document Foundation LibreOffice up to 26.2.4 heap-based overflow (EUVD-2026-84353 / WID-SEC-2026-3521)
A vulnerability classified as critical has been found in Document Foundation LibreOffice up to 26.2.4. Affected is an unknown function. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2
CVE-2026-63272 | Document Foundation LibreOffice up to 26.2.4 heap-based overflow (EUVD-2026-84352 / WID-SEC-2026-3521)
A vulnerability marked as critical has been reported in Document Foundation LibreOffice up to 26.2.4. This affects an unknown function. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2026
PHP2Shell: Critical PHP RCE Flaws and How to Patch Them
PHP2Shell hit on October 21 with two critical 9.2-rated flaws, CVE-2026-109618 and CVE-2026-109619, now patched, while a third issue, CVE-2026-115560, remains unpatched with only a mitigation. This guide explains what each flaw breaks, then
CVE-2023-25751 | Mozilla Firefox up to 110 JIT Code Remote Code Execution (Bug 1814899 / EUVD-2023-29658)
A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 110. The affected element is an unknown function of the component JIT Code Handler. Such manipulation leads to Remote Code Execution. This vulnerability is
CVE-2023-25746 | Mozilla Thunderbird up to 102.7 memory corruption (EUVD-2023-29653)
A vulnerability has been found in Mozilla Thunderbird up to 102.7 and classified as critical. This issue affects some unknown processing. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2023-257
CVE-2023-25744 | Mozilla Firefox up to 109 memory corruption (EUVD-2023-29651)
A vulnerability classified as critical was found in Mozilla Firefox up to 109. This affects an unknown function. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2023-25744. The attack may be perform
CVE-2023-25738 | Mozilla Thunderbird up to 102.7 on Windows Printing out-of-bounds (EUVD-2023-29645)
A vulnerability was found in Mozilla Thunderbird up to 102.7 on Windows. It has been classified as problematic. The affected element is an unknown function of the component Printing. This manipulation causes out-of-bounds read. The identifi
CVE-2023-23601 | Mozilla Thunderbird up to 102.6 URL cross-domain policy (EUVD-2023-27701 / Nessus ID 248435)
A vulnerability described as problematic has been identified in Mozilla Thunderbird up to 102.6. This affects an unknown part of the component URL Handler. Such manipulation leads to permissive cross-domain policy with untrusted domains. Th
CVE-2023-23598 | Mozilla Firefox up to 108 GTK Wrapper information disclosure (Bug 1800425 / EUVD-2023-27698)
A vulnerability described as problematic has been identified in Mozilla Firefox up to 108. This impacts an unknown function of the component GTK Wrapper. Executing a manipulation can lead to information disclosure. This vulnerability is han
CVE-2023-0547 | Mozilla Thunderbird up to 102.9 OCSP Revocation Status certificate validation (Bug 1811298 / EUVD-2023-12592)
A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 102.9. This issue affects some unknown processing of the component OCSP Revocation Status Handler. Such manipulation leads to improper certificate v
CVE-2023-31135 | Dgraph up to 22.x Audit log inadequate encryption (GHSA-92wq-q9pq-gw47)
A vulnerability classified as problematic has been found in Dgraph up to 22.x. This affects an unknown part of the component Audit log Handler. The manipulation leads to inadequate encryption strength. This vulnerability is traded as CVE-20
CVE-2023-30191 | cdesigner up to 3.1.8 on PrestaShop initContent sql injection (EUVD-2023-34616)
A vulnerability was found in cdesigner up to 3.1.8 on PrestaShop and classified as critical. The impacted element is the function CdesignerTraitementModuleFrontController::initContent. Executing a manipulation can lead to sql injection. The
CVE-2023-28321 | Apple macOS up to 13.4.1 curl certificate validation (HT213843 / EUVD-2023-32028)
A vulnerability categorized as problematic has been discovered in Apple macOS up to 13.4.1. This vulnerability affects unknown code of the component curl. Executing a manipulation can lead to improper certificate validation. This vulnerabil
CVE-2023-28320 | Apple macOS up to 13.4.1 curl race condition (HT213843 / EUVD-2023-32027)
A vulnerability was found in Apple macOS up to 13.4.1. It has been rated as problematic. This affects an unknown part of the component curl. Performing a manipulation results in race condition. This vulnerability is reported as CVE-2023-283
CVE-2023-28319 | Apple macOS up to 13.4.1 curl use after free (HT213843 / EUVD-2023-32026)
A vulnerability was found in Apple macOS up to 13.4.1. It has been declared as problematic. Affected by this issue is some unknown functionality of the component curl. Such manipulation leads to use after free. This vulnerability is documen
CVE-2023-22685 | Tips and Tricks HQ Ruhul Amin Category Specific RSS Feed Subscription Plugin cross site scripting
A vulnerability classified as problematic has been found in Tips and Tricks HQ Ruhul Amin Category Specific RSS Feed Subscription Plugin up to 2.2 on WordPress. This impacts an unknown function. The manipulation leads to cross site scriptin
CVE-2023-22647 | SUSE Rancher up to 2.7.3 privileges management (GHSA-p976-h52c-26p6)
A vulnerability, which was classified as critical, was found in SUSE Rancher up to 2.7.3. This impacts an unknown function. Executing a manipulation can lead to improper privilege management. This vulnerability is registered as CVE-2023-226
CVE-2022-43760 | SUSE Rancher up to 2.7.3 cross site scripting (GHSA-46v3-ggjg-qq3x)
A vulnerability has been found in SUSE Rancher up to 2.7.3 and classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2022-43760. The attack can be
CVE-2023-30986 | Siemens Solid Edge SE2023 STP File memory corruption (ssa-932528)
A vulnerability, which was classified as critical, was found in Siemens Solid Edge SE2023. This affects an unknown function of the component STP File Handler. Executing a manipulation can lead to memory corruption. This vulnerability is tra
CVE-2023-30985 | Siemens Solid Edge SE2023 OBJ File out-of-bounds (ssa-932528)
A vulnerability labeled as problematic has been found in Siemens Solid Edge SE2023. This affects an unknown part of the component OBJ File Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CV
CVE-2023-30899 | Siemens Siveillance Video 2023 Management Server deserialization (ssa-789345)
A vulnerability identified as very critical has been detected in Siemens Siveillance Video 2020, Siveillance Video 2021, Siveillance Video 2022 and Siveillance Video 2023. Affected by this issue is some unknown functionality of the componen
CVE-2023-30549 | apptainer prior 1.1.8 extfs denial of service (EUVD-2023-1328 / Nessus ID 247109)
A vulnerability classified as problematic was found in apptainer. Affected by this vulnerability is an unknown functionality of the component extfs Handler. Executing a manipulation can lead to denial of service. This vulnerability appears
CVE-2023-29106 | Siemens SIMATIC Cloud Connect 7 2.0 REST API information disclosure (ssa-555292)
A vulnerability was found in Siemens SIMATIC Cloud Connect 7 2.0. It has been declared as problematic. This impacts an unknown function of the component REST API. The manipulation results in information disclosure. This vulnerability is rep
CVE-2023-29105 | Siemens SIMATIC Cloud Connect 7 2.0 MQTT Parser missing standardized error handling mechanism (ssa-555292)
A vulnerability, which was classified as critical, has been found in Siemens SIMATIC Cloud Connect 7 2.0. The impacted element is an unknown function of the component MQTT Parser. Performing a manipulation results in missing standardized er
CVE-2023-29053 | Siemens JT Utilities prior 11.3.2.0/13.3.0.0 JT File out-of-bounds (ssa-642810)
A vulnerability classified as problematic has been found in Siemens JT Utilities. This affects an unknown function of the component JT File Handler. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as
CVE-2023-27408 | Siemens SCALANCE LPE9403 up to 2.0 i2c Mutex File temp file (ssa-325383)
A vulnerability marked as problematic has been reported in Siemens SCALANCE LPE9403 up to 2.0. This vulnerability affects unknown code of the component i2c Mutex File Handler. The manipulation leads to creation of temporary file with insecu
CVE-2023-25392 | Allegro Tech BigFlow 1.6 certificate validation (EUVD-2023-1403)
A vulnerability classified as critical has been found in Allegro Tech BigFlow 1.6. This impacts an unknown function. Performing a manipulation results in improper certificate validation. This vulnerability is cataloged as CVE-2023-25392. It
CVE-2022-43768 | Siemens SIMATIC CP 1242-7 V2 Webserver allocation of resources (ssa-566905)
A vulnerability described as critical has been identified in Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-7 LTE EU, SIMATIC CP 1243-7 LTE US, SIMATIC CP 1243-8 IRC, SIMATIC
CVE-2022-43767 | Siemens SIMATIC CP 1242-7 V2 Webserver denial of service (ssa-566905)
A vulnerability marked as problematic has been reported in Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-7 LTE EU, SIMATIC CP 1243-7 LTE US, SIMATIC CP 1243-8 IRC, SIMATIC CP
Kritische Sicherheitslücke in Brotli gefährdet Node.js, Python und weitere Anwendungen
Kritische Sicherheitslücke in Brotli gefährdet Node.js, Python und weitere Anwendungen Matthias Heinemann Sa., 24.10.2026 - 12:36 Eine Schwachstelle im weitverbreiteten Brotli-Dekomprimierer ermöglicht es Angreifern, mit manipulierten kompr
CVE-2026-115929 | MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1
CVE-2026-115931 | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads a file from the server's disk. A user who connects a channel whose stored token is a file path can have the backend return the contents of any file it can read, in
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be rea
CVE-2026-115938 | Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment lookups therefore bypass the sandbox’s empty property/method allowlists. The vulnerable condition value is ultimately cast to an integer. That does not protect the
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper,
CVE-2026-115937 | The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which Craft Commerce transaction is completed * id — selects which Mollie payment is queried for its status An unauthenticated attacker holding any paid Mollie payment ID from the merchant’s account can pair it with any transaction hash. Commerce queries Mollie, sees status: paid,
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which Craft Commerce transaction is completed * id — selects which