Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.220 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.620 | 93,0 % |
CVE-2026-90084 | Linux Kernel up to 6.18.51/7.2.5 octeontx2-vf register_netdev initialization (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been rated as very critical. Affected is the function register_netdev of the component octeontx2-vf. Performing a manipulation results in improper initialization. This vu
CVE-2026-90083 | Linux Kernel up to 6.18.51/7.2.5 act_ife net/sched/act_ife.c tcf_ife_act hard_header_len memory corruption (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. Impacted is the function tcf_ife_act of the file net/sched/act_ife.c of the component act_ife. The manipulation of the argument hard_heade
CVE-2026-90082 | Linux Kernel up to 7.2.5 mana mana_gd_query_max_resources memory corruption (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. This issue affects the function mana_gd_query_max_resources of the component mana. Executing a manipulation can lead to memory corruption. The identifica
CVE-2026-90081 | Linux Kernel up to 7.2.5 RDS include/linux/wait.h rds_cong_map_updated m_waitq race condition (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. The impacted element is the function rds_cong_map_updated of the file include/linux/wait.h of the component RDS. This manipulation of the argument m_
CVE-2026-90080 | Linux Kernel up to 6.18.51/7.2.5 octeontx2-pf otx2_init_hw_resources/otx2_pool_aq_init null pointer dereference (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5 and classified as critical. This vulnerability affects the function otx2_init_hw_resources/otx2_pool_aq_init of the component octeontx2-pf. Performing a manipulation results
CVE-2026-90079 | Linux Kernel up to 7.2.5 octeontx2-af rvu_mbox_init allocation of resources (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as critical. The affected element is the function rvu_mbox_init of the component octeontx2-af. The manipulation results in allocation of resources. This vulnerabili
CVE-2026-90078 | Linux Kernel up to 7.2.5 act_skbmod net/sched/act_skbmod.c tcf_skbmod_act out-of-bounds (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as critical. Impacted is the function tcf_skbmod_act of the file net/sched/act_skbmod.c of the component act_skbmod. The manipulation leads to out-of-bounds read.
CVE-2026-90077 | Linux Kernel up to 6.18.51/7.2.5 Network Namespace copy_net_ns memory leak (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.51/7.2.5. This affects the function copy_net_ns of the component Network Namespace. Such manipulation leads to memory leak. This vulnerability is unique
CVE-2026-90076 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Fair Queueing Scheduler net/sched/fq.c fq_init quantum infinite loop (WID-SEC-2026-3444)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function fq_init of the file net/sched/fq.c of the component Fair Queueing Scheduler. Performing a manipulation of the ar
CVE-2026-90075 | Linux Kernel up to 7.2.5 fq_codel net/sched/sch_fq_codel.c fq_codel_init infinite loop (WID-SEC-2026-3444)
A vulnerability labeled as problematic has been found in Linux Kernel up to 7.2.5. The impacted element is the function fq_codel_init of the file net/sched/sch_fq_codel.c of the component fq_codel. Such manipulation leads to infinite loop.
CVE-2026-90074 | Linux Kernel up to 7.2.5 fq_pie net/sched/fq_pie.c fq_pie_init quantum/deficit infinite loop (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.2.5. Affected by this issue is the function fq_pie_init of the file net/sched/fq_pie.c of the component fq_pie. This manipulation of the argument q
CVE-2026-90073 | Linux Kernel up to 7.2.5 hhf sch_hhf.c hhf_change quantum integer overflow (WID-SEC-2026-3444)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.2.5. The affected element is the function hhf_change of the file sch_hhf.c of the component hhf. This manipulation of the argument quantum causes integer ov
CVE-2025-59042 | PyInstaller up to 5.x code injection (GHSA-p2xp-xx3r-mffc)
A vulnerability was found in PyInstaller up to 5.x. It has been rated as critical. This affects an unknown function. Performing a manipulation results in code injection. This vulnerability was named CVE-2025-59042. The attack needs to be ap
CVE-2025-58628 | kamleshyadav Miraculous Plugin up to 2.0.8 on WordPress sql injection
A vulnerability identified as critical has been detected in kamleshyadav Miraculous Plugin up to 2.0.8 on WordPress. The affected element is an unknown function. This manipulation causes sql injection. This vulnerability appears as CVE-2025
CVE-2025-52547 | Copeland LP E3 Supervisory Control up to 2.31F00 Application Service denial of service
A vulnerability categorized as problematic has been discovered in Copeland LP E3 Supervisory Control up to 2.31F00. Impacted is an unknown function of the component Application Service. Executing a manipulation can lead to denial of service
CVE-2025-52546 | Copeland LP E3 Supervisory Control up to 2.31F00 Floor Plan unrestricted upload
A vulnerability marked as critical has been reported in Copeland LP E3 Supervisory Control up to 2.31F00. This affects an unknown function of the component Floor Plan Handler. This manipulation causes unrestricted upload. This vulnerability
CVE-2025-10290 | Mozilla Focus up to 142.x on iOS ui layer
A vulnerability was found in Mozilla Focus up to 142.x on iOS and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to improper restriction of rendered ui layers. The identification of this vulne
CVE-2026-110956 | asVereinbase Plugin up to 1.1.7 on WordPress improper authentication (EUVD-2026-109225)
A vulnerability classified as critical has been found in asVereinbase Plugin up to 1.1.7 on WordPress. This impacts an unknown function. This manipulation causes improper authentication. This vulnerability is handled as CVE-2026-110956. The
CVE-2026-97353 | News Kit Addons for Elementor Plugin up to 1.4.7 on WordPress authorization (EUVD-2026-109227)
A vulnerability categorized as critical has been discovered in News Kit Addons for Elementor Plugin up to 1.4.7 on WordPress. The impacted element is an unknown function. Executing a manipulation can lead to missing authorization. This vuln
CVE-2026-105199 | Pixel Tag Manager for WooCommerce Plugin up to 2.2.2 on WordPress AJAX Actions cross site scripting (EUVD-2026-109226)
A vulnerability classified as problematic was found in Pixel Tag Manager for WooCommerce Plugin up to 2.2.2 on WordPress. Affected is an unknown function of the component AJAX Actions. Such manipulation leads to cross site scripting. This v
CVE-2026-97352 | News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress authorization (EUVD-2026-109228)
A vulnerability was found in News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes missing authorization. This vulnerabilit
CVE-2026-107907 | MAS Videos Plugin up to 1.3.4 on WordPress authorization (EUVD-2026-109229)
A vulnerability, which was classified as problematic, has been found in MAS Videos Plugin up to 1.3.4 on WordPress. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in missing authorization. This
CVE-2026-87835 | Front End Users Plugin up to 3.2.35 on WordPress Registration access control (EUVD-2026-109230)
A vulnerability has been found in Front End Users Plugin up to 3.2.35 on WordPress and classified as critical. This affects an unknown part of the component Registration. The manipulation leads to improper access controls. This vulnerabilit
CVE-2026-107887 | Advanced Twenty Seventeen Plugin up to 1.3.1 on WordPress authorization (EUVD-2026-109231)
A vulnerability was found in Advanced Twenty Seventeen Plugin up to 1.3.1 on WordPress. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to missing authorization. This vulnerability is listed as
CVE-2026-114194 | Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress cross site scripting (EUVD-2026-109261)
A vulnerability was found in Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. This vulnerability i
CVE-2026-112863 | Hogash KALLYAS Plugin up to 4.25.0 on WordPress cross site scripting (EUVD-2026-108942)
A vulnerability identified as problematic has been detected in Hogash KALLYAS Plugin up to 4.25.0 on WordPress. The affected element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is kn
CVE-2026-114179 | wordplus BP Better Messages Plugin up to 3.1.3 on WordPress cross site scripting (EUVD-2026-109245)
A vulnerability categorized as problematic has been discovered in wordplus BP Better Messages Plugin up to 3.1.3 on WordPress. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloge
CVE-2026-112844 | Arraytics Event Solution Plugin up to 4.1.26 on WordPress cross site scripting (EUVD-2026-109246)
A vulnerability was found in Arraytics Event Solution Plugin up to 4.1.26 on WordPress and classified as problematic. The affected element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is refere
CVE-2026-114705 | QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress missing authentication (EUVD-2026-109263)
A vulnerability labeled as critical has been found in QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress. This issue affects some unknown processing. Executing a manipulation can lead to missing authentication. This vulnerab
CVE-2026-115981 | phpIPAM up to 1.8.3 upgrade/index.php REQUEST_URI cross site scripting (EUVD-2026-109318)
A vulnerability described as problematic has been identified in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site
CVE-2023-4052 | Mozilla Firefox up to 115.43.1 on Windows Updater permission
A vulnerability has been found in Mozilla Firefox on Windows and classified as critical. The impacted element is an unknown function of the component Updater. The manipulation leads to permission issues. This vulnerability is uniquely ident
CVE-2023-4050 | Mozilla Firefox up to 115.9 stack-based overflow (DLA 3521-1 / Nessus ID 239763)
A vulnerability categorized as critical has been discovered in Mozilla Firefox. Affected by this issue is some unknown functionality. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-202
CVE-2023-37376 | Siemens Tecnomatix Plant Simulation prior 2201.0008/2302.0002 STP File type confusion (ssa-764801)
A vulnerability, which was classified as critical, was found in Siemens Tecnomatix Plant Simulation. This impacts an unknown function of the component STP File Handler. The manipulation results in type confusion. This vulnerability is known
CVE-2023-37375 | Siemens Tecnomatix Plant Simulation SPP File stack-based overflow (ssa-764801)
A vulnerability, which was classified as critical, has been found in Siemens Tecnomatix Plant Simulation. This affects an unknown function of the component SPP File Handler. The manipulation leads to stack-based buffer overflow. This vulner
CVE-2023-37374 | Siemens Tecnomatix Plant Simulation STP File stack-based overflow (ssa-764801)
A vulnerability classified as critical was found in Siemens Tecnomatix Plant Simulation. The impacted element is an unknown function of the component STP File Handler. Executing a manipulation can lead to stack-based buffer overflow. This v
CVE-2023-30367 | mRemoteNG up to 1.76.20/1.77.3-dev Configuration File cleartext storage in memory (ID 2420 / EUVD-2023-34787)
A vulnerability was found in mRemoteNG up to 1.76.20/1.77.3-dev. It has been classified as problematic. This impacts an unknown function of the component Configuration File Handler. The manipulation leads to cleartext storage of sensitive i
CVE-2023-23548 | Checkmk up to 1.6.0p30/2.0.0p37/2.1.0p31/2.2.0p7 Business Intelligence cross site scripting
A vulnerability was found in Checkmk up to 1.6.0p30/2.0.0p37/2.1.0p31/2.2.0p7. It has been rated as problematic. This affects an unknown function of the component Business Intelligence. This manipulation causes cross site scripting. This vu
CVE-2023-37248 | Siemens Tecnomatix Plant Simulation PAR File out-of-bounds write (ssa-764801)
A vulnerability classified as critical has been found in Siemens Tecnomatix Plant Simulation. The affected element is an unknown function of the component PAR File Handler. Performing a manipulation results in out-of-bounds write. This vuln
CVE-2023-37247 | Siemens Tecnomatix Plant Simulation PAR File heap-based overflow (ssa-764801)
A vulnerability described as critical has been identified in Siemens Tecnomatix Plant Simulation. Impacted is an unknown function of the component PAR File Handler. Such manipulation leads to heap-based buffer overflow. This vulnerability i
CVE-2023-37246 | Siemens Tecnomatix Plant Simulation PRT File heap-based overflow (ssa-764801)
A vulnerability marked as critical has been reported in Siemens Tecnomatix Plant Simulation. This issue affects some unknown processing of the component PRT File Handler. This manipulation causes heap-based buffer overflow. This vulnerabili
CVE-2023-36755 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 SCEP CA Certificate Name the command injection (ssa-146325)
A vulnerability, which was classified as critical, has been found in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. Impacted is the function the of the component SCEP CA Certificate Name Handler. Performing a manipulation of the argument Name results
CVE-2023-36754 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 SCEP Server Configuration command injection (ssa-146325)
A vulnerability classified as critical was found in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. This issue affects some unknown processing of the component SCEP Server Configuration Handler. Such manipulation leads to command injection. This vulne
CVE-2023-36753 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 Web Interface uninstall-app command injection (ssa-146325)
A vulnerability classified as critical has been found in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. This vulnerability affects unknown code of the component Web Interface Handler. This manipulation of the argument uninstall-app causes command inj
CVE-2023-36752 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 URL Parameter upgrade-app command injection (ssa-146325)
A vulnerability described as critical has been identified in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. This affects the function upgrade-app of the component URL Parameter Handler. The manipulation results in command injection. This vulnerabilit
CVE-2023-36751 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 URL Parameter install-app command injection (ssa-146325)
A vulnerability marked as critical has been reported in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. Affected by this issue is some unknown functionality of the component URL Parameter Handler. The manipulation of the argument install-app leads to
CVE-2023-36750 | Siemens RUGGEDCOM ROX 2.14.1/2.15.1 URL Parameter software-upgrade command injection (ssa-146325)
A vulnerability labeled as critical has been found in Siemens RUGGEDCOM ROX 2.14.1/2.15.1. Affected by this vulnerability is an unknown functionality of the component URL Parameter Handler. Executing a manipulation of the argument software-
CVE-2023-36749 | Siemens RUGGEDCOM ROX Webserver risky encryption (ssa-146325)
A vulnerability labeled as problematic has been found in Siemens RUGGEDCOM ROX. This vulnerability affects unknown code of the component Webserver. The manipulation results in risky cryptographic algorithm. This vulnerability is cataloged a
CVE-2026-90072 | Linux Kernel up to 7.2.5 SFQ net/sched/sch_sfq.c sfq_init quantum integer overflow (WID-SEC-2026-3444)
A vulnerability classified as problematic was found in Linux Kernel up to 7.2.5. Affected by this vulnerability is the function sfq_init of the file net/sched/sch_sfq.c of the component SFQ. The manipulation of the argument quantum results
CVE-2026-90071 | Linux Kernel up to 7.2.5 sch_teql net/sched/sch_teql.c teql_master_xmit use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as very critical. This vulnerability affects the function teql_master_xmit of the file net/sched/sch_teql.c of the component sch_teql. Executing a manipulation can
CVE-2026-90070 | Linux Kernel up to 7.2.5 st33zp24 st33zp24_status stack-based overflow (WID-SEC-2026-3444)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.5. Affected is the function st33zp24_status of the component st33zp24. The manipulation leads to stack-based buffer overflow. This vulnerability is traded
CVE-2026-90069 | Linux Kernel up to 6.18.51/7.2.5 Crypto Acomp acomp_request_clone out-of-bounds write (WID-SEC-2026-3444)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.51/7.2.5. This impacts the function acomp_request_clone of the component Crypto Acomp. Executing a manipulation can lead to out-of-bounds write. This
CVE-2026-90068 | Linux Kernel up to 7.2.5 ASoC DAPM soc-ops.c snd_soc_dapm_put_enum_double item/items/values off-by-one (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.2.5. Affected is the function snd_soc_dapm_put_enum_double of the file soc-ops.c of the component ASoC DAPM. The manipulation of the argument item/items/va
CVE-2026-90067 | Linux Kernel up to 7.2.5 libceph net/ceph/messenger_v2.c process_banner_prefix payload_len input validation (WID-SEC-2026-3444)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.5. This affects the function process_banner_prefix of the file net/ceph/messenger_v2.c of the component libceph. Executing a manipulation of the argument
CVE-2026-90066 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ftrace samples/ftrace ftrace_direct_multi_init null pointer dereference (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. This impacts the function ftrace_direct_multi_init of the file samples/ftrace of the component ftrace. The manipulati
CVE-2026-90065 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 SMC Socket Release net/smc sk_common_release memory leak (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function sk_common_release of the file net/smc of the component SMC Socket Release. Executing a manipulation can lead to memory
CVE-2026-90064 | Linux Kernel up to 7.2.5 drm/xe memory corruption (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. Affected by this issue is some unknown functionality of the component drm/xe. Performing a manipulation results in memory corruption. This vulnerabil
CVE-2026-90063 | Linux Kernel up to 7.2.5 virtio-net tun.c buffer overflow (WID-SEC-2026-3444)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.5. The impacted element is an unknown function of the file tools/testing/selftests/net/tun.c of the component virtio-net. Performing a manipulation results
CVE-2026-90062 | Linux Kernel up to 7.2.5 nf_tables race condition (WID-SEC-2026-3444)
A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.5. The affected element is an unknown function of the component nf_tables. Such manipulation leads to race condition. This vulnerability is traded as C
CVE-2026-93546 | Apache HTTP Server up to 2.4.68 mod_dav_fs integer overflow (Nessus ID 371689 / WID-SEC-2026-3703)
A vulnerability, which was classified as problematic, has been found in Apache HTTP Server up to 2.4.68. This issue affects some unknown processing of the component mod_dav_fs. This manipulation causes integer overflow. This vulnerability i
CVE-2026-73637 | Apache HTTP Server up to 2.4.68 mod_auth_digest use after free (Nessus ID 371689 / WID-SEC-2026-3703)
A vulnerability marked as critical has been reported in Apache HTTP Server up to 2.4.68. Affected by this vulnerability is an unknown functionality of the component mod_auth_digest. Performing a manipulation results in use after free. This