Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 730 | 0,2 % |
| ≥50 % | 3.215 | 0,9 % |
| ≥10 % | 22.094 | 5,9 % |
| <10 % | 348.048 | 93,0 % |
CVE-2026-33759 | WWBN AVideo up to 26.0 playlistsVideos.json.php playlists_id authorization
A vulnerability marked as problematic has been reported in WWBN AVideo up to 26.0. This vulnerability affects unknown code of the file objects/playlistsVideos.json.php. This manipulation of the argument playlists_id causes missing authoriza
CVE-2026-33755 | Intermesh GroupOffice up to 6.8.157/25.0.91/26.0.16 Contact/query sql injection
A vulnerability categorized as critical has been discovered in Intermesh GroupOffice up to 6.8.157/25.0.91/26.0.16. This vulnerability affects unknown code of the file Contact/query. The manipulation results in sql injection. This vulnerabi
CVE-2026-33284 | globaleaks globaleaks-whistleblowing-software up to 5.0.88 /api/support input validation
A vulnerability was found in globaleaks globaleaks-whistleblowing-software up to 5.0.88. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /api/support. Performing a manipulation r
CVE-2026-1496 | Black Duck Coverity up to 2025.12.0 API Endpoint /token authorization
A vulnerability was found in Black Duck Coverity up to 2024.12.1/2025.3.1/2025.6.3/2025.9.2/2025.12.0. It has been declared as critical. This impacts an unknown function of the file /token of the component API Endpoint. Such manipulation le
CVE-2026-116822 | YesWiki up to 4.6.x BazarListeAction template path traversal (EUVD-2026-110529)
A vulnerability was found in YesWiki up to 4.6.x. It has been declared as problematic. This affects the function BazarListeAction. Executing a manipulation of the argument template can lead to path traversal. This vulnerability is handled a
CVE-2026-116824 | YesWiki up to 4.6.x Referer referrers_sites.php cross site scripting (EUVD-2026-110531)
A vulnerability labeled as problematic has been found in YesWiki up to 4.6.x. This impacts an unknown function of the file handlers/page/referrers_sites.php of the component Referer Handler. The manipulation results in cross site scripting.
CVE-2026-116823 | YesWiki up to 4.6.x Bazar BazarField::getValue REQUEST cross site scripting (EUVD-2026-110530)
A vulnerability was found in YesWiki up to 4.6.x. It has been classified as problematic. Affected is the function BazarField::getValue of the component Bazar. The manipulation of the argument Request leads to cross site scripting. This vuln
CVE-2026-116826 | YesWiki up to 4.6.x DuplicationManager /api/pages downloadFile files server-side request forgery (EUVD-2026-110533)
A vulnerability was found in YesWiki up to 4.6.x. It has been rated as problematic. Affected by this issue is the function DuplicationManager::downloadFile of the file /api/pages of the component DuplicationManager. This manipulation of the
CVE-2026-116825 | YesWiki up to 4.6.2 HttpSignatureService verifySignature authentication replay (EUVD-2026-110532)
A vulnerability, which was classified as critical, has been found in YesWiki up to 4.6.2. The affected element is the function HttpSignatureService::verifySignature of the component HttpSignatureService. This manipulation causes authenticat
CVE-2026-116828 | YesWiki up to 4.6.x despam.php from sql injection (EUVD-2026-110535)
A vulnerability described as problematic has been identified in YesWiki up to 4.6.x. Affected by this vulnerability is an unknown functionality of the file despam.php. Such manipulation of the argument from leads to sql injection. This vuln
CVE-2026-116827 | YesWiki up to 4.6.x Bazar copyUrlToLocalFile server-side request forgery (EUVD-2026-110534)
A vulnerability was found in YesWiki up to 4.6.x. It has been declared as problematic. Affected by this vulnerability is the function copyUrlToLocalFile of the component Bazar. The manipulation results in server-side request forgery. This v
CVE-2026-4309 | NEC Platforms Aterm W1200EX Setting authorization
A vulnerability, which was classified as critical, has been found in NEC Platforms Aterm W1200EX, Aterm WG1200HP2, Aterm WG1900HP, Aterm WG1200HS2, Aterm WG1800HP3, Aterm WG1200HP3, Aterm WG1900HP2, Aterm WG1200HS3, Aterm WG1800HP4, Aterm W
CVE-2026-3457 | Thales Sentinel LDK Runtime up to 10.21 on Windows cross site scripting (KB0027106)
A vulnerability classified as problematic was found in Thales Sentinel LDK Runtime up to 10.21 on Windows. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-3457. An a
CVE-2026-33366 | Buffalo Wi-Fi Router missing authentication
A vulnerability, which was classified as critical, has been found in Buffalo Wi-Fi Router. This affects an unknown function. Performing a manipulation results in missing authentication. This vulnerability was named CVE-2026-33366. The attac
CVE-2026-33280 | Buffalo Wi-Fi Router backdoor
A vulnerability categorized as critical has been discovered in Buffalo Wi-Fi Router. Affected by this issue is some unknown functionality. Such manipulation leads to backdoor. This vulnerability is documented as CVE-2026-33280. The attack c
CVE-2026-32678 | Buffalo Wi-Fi Router Setting authentication bypass
A vulnerability classified as critical was found in Buffalo Wi-Fi Router. The impacted element is an unknown function of the component Setting Handler. Such manipulation leads to authentication bypass using alternate channel. This vulnerabi
CVE-2026-32669 | Buffalo Wi-Fi Router code injection
A vulnerability described as critical has been identified in Buffalo Wi-Fi Router. Impacted is an unknown function. The manipulation results in code injection. This vulnerability is known as CVE-2026-32669. It is possible to launch the atta
CVE-2026-27650 | Buffalo Wi-Fi Router os command injection
A vulnerability marked as critical has been reported in Buffalo Wi-Fi Router. This issue affects some unknown processing. The manipulation leads to os command injection. This vulnerability is traded as CVE-2026-27650. It is possible to init
CVE-2026-22744 | VMware Spring AI up to 1.0.4/1.1.3 RedisFilterExpressionConverter stringValue information disclosure
A vulnerability was found in VMware Spring AI up to 1.0.4/1.1.3. It has been rated as problematic. Affected by this vulnerability is the function stringValue of the component RedisFilterExpressionConverter. This manipulation causes informat
CVE-2026-0747 | Devolutions Remote Desktop Manager up to 2025.3.28.0 on Windows information disclosure (DEVO-2026-0002 / Nessus ID 286266)
A vulnerability was found in Devolutions Remote Desktop Manager up to 2025.3.28.0 on Windows and classified as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. The identi
CVE-2026-0719 | libsoup NTLM md4sum stack-based overflow (ID 477 / EUVD-2026-1573)
A vulnerability classified as critical was found in libsoup. The impacted element is the function md4sum of the component NTLM. The manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2026-0719. The
CVE-2026-0707 | Keycloak on Red Hat Authorization Header authorization before parsing and canonicalization (Nessus ID 300554 / WID-SEC-2026-0034)
A vulnerability, which was classified as problematic, has been found in Keycloak on Red Hat. This impacts an unknown function of the component Authorization Header Handler. The manipulation leads to authorization before parsing and canonica
CVE-2026-0701 | code-projects Intern Membership Management System 1.0 add_admin.php username sql injection
A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation
CVE-2026-0700 | code-projects Intern Membership Management System 1.0 check_admin.php username sql injection
A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/check_admin.php. Executing a manipulation of the argument Username can lead
CVE-2026-20026 | Cisco Secure Firewall Threat Defense Software Snort 3 Detection Engine double free (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH / WID-SEC-2026-0041)
A vulnerability, which was classified as problematic, has been found in Cisco Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. The impacted element is an unknown function of the component Snort 3 Detection Engine.
CVE-2026-0650 | OpenFlagr up to 1.1.18 HTTP Middleware missing authentication
A vulnerability described as critical has been identified in OpenFlagr Flagr up to 1.1.18. Affected is an unknown function of the component HTTP Middleware. Executing a manipulation can lead to missing authentication. This vulnerability app
CVE-2026-0642 | projectworlds House Rental and Property Listing 1.0 /app/complaint.php name cross site scripting (EUVD-2026-1142)
A vulnerability, which was classified as problematic, was found in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results
CVE-2026-0641 | TOTOLINK WA300 5.2cu.7112_B20190227 cstecgi.cgi sub_401510 UPLOAD_FILENAME command injection (EUVD-2026-0958)
A vulnerability, which was classified as critical, has been found in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to
CVE-2026-0640 | Tenda AC23 16.03.07.52 /goform/PowerSaveSet sscanf time buffer overflow
A vulnerability classified as critical was found in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. This vulnerability is
CVE-2026-0628 | Google Chrome up to 143.0.7499.146 WebView Tag authorization (Nessus ID 281895 / WID-SEC-2026-0020)
A vulnerability was found in Google Chrome and classified as critical. Affected is an unknown function of the component WebView Tag Handler. The manipulation results in missing authorization. This vulnerability is identified as CVE-2026-062
CVE-2026-0618 | Devolutions PowerShell Universal up to 4.5.5/5.6.12 cross site scripting (DEVO-2026-0001)
A vulnerability described as problematic has been identified in Devolutions PowerShell Universal up to 4.5.5/5.6.12. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-
CVE-2026-0578 | code-projects Online Product Reservation System 1.0 delete.php id sql injection (EUVD-2026-0779 / CNNVD-202601-795)
A vulnerability has been found in code-projects Online Product Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the
CVE-2025-65877 | Lvzhou CMS title sql injection (EUVD-2025-200301)
A vulnerability labeled as critical has been found in Lvzhou CMS. This impacts an unknown function of the component com.wanli.lvzhoucms.service.ContentService#findPage. The manipulation of the argument Title results in sql injection. This v
CVE-2025-65656 | Dcat-Admin up to 2.2.3-beta VersionManager.php file inclusion
A vulnerability identified as problematic has been detected in Dcat-Admin up to 2.2.3-beta. Affected is an unknown function of the file admin/src/Extend/VersionManager.php. The manipulation leads to file inclusion. This vulnerability is doc
CVE-2025-65358 | edoc-doctor-appointment-system 1.0.1 /admin/appointment.php docid sql injection
A vulnerability categorized as critical has been discovered in edoc-doctor-appointment-system 1.0.1. This impacts an unknown function of the file /admin/appointment.php. Executing a manipulation of the argument docid can lead to sql injecti
CVE-2025-63528 | Blood Bank Management System 1.0 blooddinfo.php error cross site scripting
A vulnerability has been found in Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file blooddinfo.php. Performing a manipulation of the argument Error results
CVE-2025-63499 | Alinto Sogo 5.12.3 theme cross site scripting (EUVD-2025-201283 / Nessus ID 277525)
A vulnerability classified as problematic has been found in Alinto Sogo 5.12.3. This impacts an unknown function. Performing a manipulation of the argument theme results in cross site scripting. This vulnerability is identified as CVE-2025-
CVE-2025-63365 | SoftSea EPUB File Reader 1.0.0.0 EPUB File Parser path traversal
A vulnerability labeled as critical has been found in SoftSea EPUB File Reader 1.0.0.0. Impacted is an unknown function of the component EPUB File Parser. Executing a manipulation can lead to path traversal. This vulnerability is registered
CVE-2025-51735 | HCL Unica 12.0.0 csv injection
A vulnerability categorized as problematic has been discovered in HCL Unica 12.0.0. This vulnerability affects unknown code. Executing a manipulation can lead to csv injection. The identification of this vulnerability is CVE-2025-51735. The
CVE-2025-46175 | y_project RuoYi 4.8.0 SysUserController.java authRole access control (EUVD-2025-199727)
A vulnerability categorized as critical has been discovered in y_project RuoYi 4.8.0. The affected element is the function authRole of the file SysUserController.java. Such manipulation leads to improper access controls. This vulnerability
CVE-2026-63512 | Microsoft SharePoint Server improper authorization (EUVD-2026-56296)
A vulnerability labeled as problematic has been found in Microsoft SharePoint Server. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper authorization. This vulnerability is registered as CVE
CVE-2026-63520 | Microsoft SharePoint Server input validation (EUVD-2026-56298)
A vulnerability was found in Microsoft SharePoint Server. It has been declared as critical. This vulnerability affects unknown code. Executing a manipulation can lead to improper input validation. The identification of this vulnerability is
CVE-2026-63516 | Microsoft SharePoint Server deserialization (EUVD-2026-56297)
A vulnerability was found in Microsoft SharePoint Server. It has been classified as critical. This affects an unknown part. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-63516. The attack may be
CVE-2026-72970 | Microsoft Edge up to 151.0.4129.78 buffer overflow (EUVD-2026-58754)
A vulnerability classified as critical has been found in Microsoft Edge. The impacted element is an unknown function. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-72970. The attack is possible to be ca
CVE-2026-50515 | Microsoft Azure Service Bus deserialization (EUVD-2026-54324)
A vulnerability classified as critical has been found in Microsoft Azure Service Bus. This affects an unknown part. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-50515. The attack can be initiated r
CVE-2026-65801 | Microsoft Exchange Online server-side request forgery (EUVD-2026-63689)
A vulnerability was found in Microsoft Exchange Online and classified as critical. Impacted is an unknown function. Such manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2026-65801. The att
CVE-2026-116806 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a member session to obtain plaintext secrets, inject fake analytics events, poison business metrics, and consume the organization's usage budget.
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only
CVE-2026-116805 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the client.list tRPC query. Attackers can request client.list with a project ID and receive full Client rows including the secret column, enabling offline verification of leaked secrets without audit trails.
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the client.list tRPC query. Attackers can request client.list with a p
CVE-2026-116804 | DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, which merge after removal and are evaluated by downstream template engines for cross-site scripting.
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE modes. Attackers can split expression
CVE-2026-116803 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize() returns, causing DOM XSS.
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutral
CVE-2026-116802 | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeName=href guard when PARSER_MEDIA_TYPE is application/xhtml+xml, because transformCaseFunc does not lowercase attribute names. Attackers can submit SVG with an animate or set element using attributeName="href" and a javascript: entry in values to execute script when users click the sanitized link.
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeName=href guard when PARSER_MEDIA_TYPE is application/xhtml+xml, because transformCaseFunc does not lowercase attribute
CVE-2026-116801 | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relation queries, so supplying a query operator instead of an object ID bypasses the owning-object ACL check. A client with read access to at least one object of the owning class can disclose which readable objects are linked to owning objects it cannot read.
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relation queries, so supplying a query operator instead of an object ID bypasses the owning-object ACL check. A client w
CVE-2026-116800 | WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include PHP files outside the locale directory via a crafted Accept-Language header. Attackers can use overlapping traversal sequences like ....// to bypass single-pass removal in setLanguage(), executing existing server-side PHP files in the application context.
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include PHP files outside the locale directory via a crafted Accept-Language header. Attackers can use overlapping traversal se
CVE-2026-116602 | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The attack
CVE-2026-116556 | A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross
CVE-2026-116555 | A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. The manipulation of the argument template leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not r
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. The manipulation of the argument template l
CVE-2026-116554 | A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has
A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulat
CVE-2026-116515 | A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be
CVE-2026-116591 | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable to retain stale fse.Scratch decode-table state from the prior block, and nextFast then derives an out-of-range state and indexes beyond the table instead of returnin
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores
CVE-2026-116748 | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409