Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 760 | 0,2 % |
| ≥50 % | 3.388 | 0,9 % |
| ≥10 % | 22.544 | 5,7 % |
| <10 % | 365.602 | 93,2 % |
Alpine Linux incident shows why GitLab updates need Ruby verification
Alpine Linux had upgraded to GitLab 19.3.6, but its environment remained vulnerable to CVE-2026-97229. Its container image used standard Ruby, where the vulnerability resided. The incident shows why an application version alone cannot estab
CVE-2019-12874 | VideoLAN VLC Media Player up to 3.0.7 MKV util.cpp double free (USN-4074-1 / BID-108882)
A vulnerability labeled as critical has been found in VideoLAN VLC Media Player up to 3.0.7. Impacted is an unknown function in the library zlib_decompress_extra of the file modules/demux/mkv/util.cpp of the component MKV Handler. Executing
CVE-2019-10072 | Oracle Siebel Apps - Marketing 20.7 Mktg/Campaign Mgmt denial of service (BID-108874)
A vulnerability has been found in Oracle Siebel Apps - Marketing 20.7 and classified as critical. Impacted is an unknown function of the component Mktg/Campaign Mgmt. The manipulation leads to denial of service. This vulnerability is refere
CVE-2022-48362 | Zoho ManageEngine Desktop Central/Desktop Central MSP prior 10.1.2137.2 AgentLogUploadServlet computerName path traversal (EUVD-2022-51061)
A vulnerability, which was classified as critical, has been found in Zoho ManageEngine Desktop Central and Desktop Central MSP. The impacted element is an unknown function of the component AgentLogUploadServlet. The manipulation of the argu
CVE-2022-48361 | Huawei Smart Phone Always On Display path traversal (EUVD-2022-51060)
A vulnerability described as critical has been identified in Huawei Smart Phone. This affects an unknown function of the component Always On Display. The manipulation results in path traversal. This vulnerability is identified as CVE-2022-4
CVE-2022-48360 | Huawei Smart Phone Facial Recognition permission (EUVD-2022-51059)
A vulnerability described as critical has been identified in Huawei Smart Phone. Affected by this vulnerability is an unknown functionality of the component Facial Recognition Module. Such manipulation leads to permission issues. This vulne
CVE-2022-48359 | Huawei Smart Phone Recovery Mode for Updates information disclosure (EUVD-2022-51058)
A vulnerability marked as problematic has been reported in Huawei Smart Phone. Affected is an unknown function of the component Recovery Mode for Updates. This manipulation causes information disclosure. The identification of this vulnerabi
CVE-2022-48358 | Huawei Smart Phone BatteryHealthActivity denial of service (EUVD-2022-51057)
A vulnerability was found in Huawei Smart Phone. It has been declared as problematic. This affects the function BatteryHealthActivity. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2022-48358. The
CVE-2026-116474 | Gitea up to 28.2.x User Registration /api/v1/user behavioral workflow (WID-SEC-2026-4281)
A vulnerability described as problematic has been identified in Gitea up to 28.2.x. This vulnerability affects unknown code of the file /api/v1/user of the component User Registration. The manipulation results in enforcement of behavioral w
CVE-2026-116296 | Gitea up to 28.2.x API Routes privileges management (WID-SEC-2026-4281)
A vulnerability identified as problematic has been detected in Gitea up to 28.2.x. This vulnerability affects unknown code of the component API Routes. The manipulation leads to improper privilege management. This vulnerability is documente
CVE-2026-116289 | Gitea up to 28.2.x Actions Runner Registration privileges management (WID-SEC-2026-4281)
A vulnerability labeled as problematic has been found in Gitea up to 28.2.x. Affected by this issue is some unknown functionality of the component Actions Runner Registration. Executing a manipulation can lead to improper privilege manageme
CVE-2026-114199 | Gitea up to 28.2.x Contribution Heatmap heatmap access control (WID-SEC-2026-4281)
A vulnerability, which was classified as problematic, was found in Gitea up to 28.2.x. The impacted element is an unknown function of the file /api/v1/users/{username}/heatmap of the component Contribution Heatmap. Executing a manipulation
CVE-2026-113429 | Gitea up to 28.2.x Artifact Upload Content-Encoding cross site scripting (WID-SEC-2026-4281)
A vulnerability marked as problematic has been reported in Gitea up to 28.2.x. Impacted is an unknown function of the component Artifact Upload. This manipulation of the argument Content-Encoding causes cross site scripting. This vulnerabil
CVE-2026-112887 | Gitea up to 28.2.x Actions Task Token /api/v1/user/repos privileges management (WID-SEC-2026-4281)
A vulnerability labeled as problematic has been found in Gitea up to 28.2.x. This issue affects some unknown processing of the file /api/v1/user/repos of the component Actions Task Token. The manipulation results in improper privilege manag
CVE-2026-78127 | strongSwan up to 6.0.7 IKE message parser use after free (Nessus ID 375198)
A vulnerability labeled as critical has been found in strongSwan up to 6.0.7. Affected by this vulnerability is an unknown functionality of the component IKE message parser. Such manipulation leads to use after free. This vulnerability is t
CVE-2026-78126 | strongSwan up to 6.0.7 EAP-AKA Plugin null pointer dereference (Nessus ID 375198)
A vulnerability described as critical has been identified in strongSwan up to 6.0.7. This affects an unknown part of the component EAP-AKA Plugin. Executing a manipulation can lead to null pointer dereference. This vulnerability is handled
CVE-2026-78124 | strongSwan up to 6.0.7 openssl plugin information disclosure (Nessus ID 375198)
A vulnerability identified as problematic has been detected in strongSwan up to 6.0.7. Affected is an unknown function of the component openssl plugin. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-
CVE-2026-78123 | strongSwan up to 6.0.7 openssl plugin null pointer dereference (Nessus ID 375198)
A vulnerability was found in strongSwan up to 6.0.7. It has been rated as critical. This affects an unknown function of the component openssl plugin. The manipulation leads to null pointer dereference. This vulnerability is documented as CV
CVE-2023-41140 | Autodesk AutoCAD PRT File Parser heap-based overflow (ZDI-23-1442 / EUVD-2023-45659)
A vulnerability was found in Autodesk AutoCAD. It has been rated as critical. This affects an unknown part of the component PRT File Parser. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as
CVE-2023-46751 | Artifex Ghostscript up to 10.02.0 gdev_prn_open_printer_seekable denial of service (EUVD-2023-50918 / Nessus ID 235015)
A vulnerability was found in Artifex Ghostscript up to 10.02.0. It has been rated as problematic. Affected by this vulnerability is the function gdev_prn_open_printer_seekable. This manipulation causes denial of service. This vulnerability
CVE-2023-45862 | Linux Kernel up to 6.2.4 ENE UB6250 Reader Driver ene_ub6250.c ms_lib_process_bootblock allocation of resources (EUVD-2023-50128)
A vulnerability classified as critical was found in Linux Kernel up to 6.2.4. The impacted element is the function ms_lib_process_bootblock of the file drivers/usb/storage/ene_ub6250.c of the component ENE UB6250 Reader Driver. The manipula
CVE-2023-4693 | grub2 fs/ntfs.c out-of-bounds (EUVD-2023-54544 / Nessus ID 212124)
A vulnerability classified as problematic has been found in grub2. This issue affects some unknown processing of the file fs/ntfs.c. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2023-4693. Access to the
CVE-2023-49646 | Zoom Desktop Client/Mobile App/VDI Client/SDK improper authentication (EUVD-2023-53588)
A vulnerability marked as critical has been reported in Zoom Desktop Client, Mobile App, VDI Client and SDK. This issue affects some unknown processing. The manipulation leads to improper authentication. This vulnerability is traded as CVE-
CVE-2023-5197 | Linux Kernel nf_tables nf_tables_api.c use after free (EUVD-2023-57528)
A vulnerability was found in Linux Kernel. It has been rated as critical. Affected by this issue is some unknown functionality of the file net/netfilter/nf_tables_api.c of the component nf_tables. This manipulation causes use after free. Th
CVE-2023-7008 | systemd-resolved Unsigned Name Response data authenticity (Bug 25676 / EUVD-2023-59200)
A vulnerability was found in systemd-resolved. It has been rated as problematic. The impacted element is an unknown function of the component Unsigned Name Response Handler. This manipulation causes insufficient verification of data authent
CVE-2026-71450 | Johnson Controls EasyIO Neo EC/CW Edge Controller up to 3.3b62/3.3b63/3.3b24/3.3b25 improper authentication (EUVD-2026-115650)
A vulnerability marked as very critical has been reported in Johnson Controls EasyIO Neo EC and CW Edge Controller up to 3.3b62/3.3b63/3.3b24/3.3b25. This vulnerability affects unknown code. This manipulation causes improper authentication.
CVE-2026-63667 | ApostropheCMS Apostrophe up to 3.6.1 Import-Export gzip.js _id/name/extension path traversal (EUVD-2026-60441)
A vulnerability, which was classified as problematic, has been found in ApostropheCMS Apostrophe up to 3.6.1. This affects an unknown function of the file packages/import-export/lib/formats/gzip.js of the component Import-Export Module. Thi
CVE-2019-5439 | VideoLAN VLC Media Player up to 3.0.6 memory corruption (USN-4074-1 / ID 371832)
A vulnerability, which was classified as critical, was found in VideoLAN VLC Media Player up to 3.0.6. This affects an unknown function. Executing a manipulation can lead to memory corruption. The identification of this vulnerability is CVE
CVE-2019-12439 | Bubblewrap up to 0.3.2 bubblewrap.c input validation (RHSA-2019:1833 / Nessus ID 210538)
A vulnerability, which was classified as critical, was found in Bubblewrap up to 0.3.2. Impacted is an unknown function of the file bubblewrap.c. The manipulation results in improper input validation. This vulnerability is known as CVE-2019
CVE-2019-0232 | Oracle Agile Engineering Data Management 6.2.0/6.2.1 Install os command injection (EDB-47073 / ID 150240)
A vulnerability identified as critical has been detected in Oracle Agile Engineering Data Management 6.2.0/6.2.1. Affected is an unknown function of the component Install. Performing a manipulation results in os command injection. This vuln
CVE-2019-0221 | Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 BI Platform Security cross site scripting (EDB-50119 / ID 176952)
A vulnerability was found in Oracle Business Intelligence Enterprise Edition 5.5.0.0.0. It has been classified as critical. The impacted element is an unknown function of the component BI Platform Security. This manipulation causes cross si
CVE-2022-48357 | Huawei Smart Phone Kernel denial of service (EUVD-2022-51056)
A vulnerability marked as problematic has been reported in Huawei Smart Phone. The impacted element is an unknown function of the component Kernel. The manipulation leads to denial of service. This vulnerability is referenced as CVE-2022-48
CVE-2022-48356 | Huawei Smart Phone Facial Recognition input denial of service (EUVD-2022-51055)
A vulnerability labeled as problematic has been found in Huawei Smart Phone. This impacts an unknown function of the component Facial Recognition Module. The manipulation of the argument input results in denial of service. This vulnerabilit
CVE-2022-48355 | Huawei Smart Phone Bluetooth out-of-bounds (EUVD-2022-51054)
A vulnerability identified as problematic has been detected in Huawei Smart Phone. This affects an unknown function of the component Bluetooth Module. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified a
CVE-2022-48354 | Huawei Smart Phone Bluetooth out-of-bounds write (EUVD-2022-51053)
A vulnerability was found in Huawei Smart Phone. It has been classified as critical. This issue affects some unknown processing of the component Bluetooth Module. This manipulation causes out-of-bounds write. This vulnerability appears as C
CVE-2019-5413 | morgan Package up to 1.9.0 on npm format command injection
A vulnerability was found in morgan Package up to 1.9.0 on npm and classified as critical. The impacted element is an unknown function. Such manipulation of the argument format as part of Parameter leads to command injection. This vulnerabi
CVE-2019-1543 | Oracle MySQL Connectors up to 5.3.13/8.0.17 OpenSSL cryptographic issue (Nessus ID 211827 / ID 172247)
A vulnerability marked as critical has been reported in Oracle MySQL Connectors up to 5.3.13/8.0.17. This affects an unknown function of the component OpenSSL. Performing a manipulation results in cryptographic issues. This vulnerability is
CVE-2018-12209 | Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows User Mode Driver access control (ID 371696)
A vulnerability marked as problematic has been reported in Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows. This issue affects some unknown processing of the component User Mode Driver. Performing a manipulation results in im
CVE-2017-5647 | Oracle MySQL Enterprise Monitor up to 3.3.3.1199 Apache Tomcat information disclosure (Nessus ID 99534 / ID 169972)
A vulnerability classified as critical has been found in Oracle MySQL Enterprise Monitor up to 3.3.3.1199. Affected by this issue is some unknown functionality of the component Apache Tomcat. Performing a manipulation results in information
CVE-2017-13745 | Oracle Outside In Technology 8.5.3 Apache Batik assertion (Nessus ID 220720 / BID-100514)
A vulnerability described as critical has been identified in Oracle Outside In Technology 8.5.3. The impacted element is an unknown function of the component Apache Batik. Such manipulation leads to reachable assertion. This vulnerability i
CVE-2022-48353 | Huawei Smart Phone Configuration Local Privilege Escalation (EUVD-2022-51052)
A vulnerability labeled as critical has been found in Huawei Smart Phone. The affected element is an unknown function of the component Configuration Handler. Executing a manipulation can lead to Local Privilege Escalation. The identificatio
CVE-2022-48352 | Huawei Smart Phone initialization (EUVD-2022-51051)
A vulnerability categorized as critical has been discovered in Huawei Smart Phone. The impacted element is an unknown function. Executing a manipulation can lead to improper initialization. This vulnerability is handled as CVE-2022-48352. T
CVE-2022-48351 | Huawei Smart Phone Secure OS denial of service (EUVD-2022-51050)
A vulnerability was found in Huawei Smart Phone. It has been rated as problematic. The affected element is an unknown function of the component Secure OS. Performing a manipulation results in denial of service. This vulnerability is known a
CVE-2022-48350 | Huawei Smart Phone Messaging App access control (EUVD-2022-51049)
A vulnerability was found in Huawei Smart Phone. It has been classified as critical. The impacted element is an unknown function of the component Messaging App. Performing a manipulation results in improper access controls. This vulnerabili
CVE-2022-48349 | Huawei Smart Phone Control privilege escalation (EUVD-2022-51048)
A vulnerability was found in Huawei Smart Phone and classified as critical. This vulnerability affects unknown code of the component Control Component. The manipulation results in privilege escalation. This vulnerability is reported as CVE-
CVE-2026-113687 | Apache Syncope up to 3.0.16/4.0.8/4.1.3 Groovy Sandbox sandbox (EUVD-2026-115154)
A vulnerability identified as problematic has been detected in Apache Syncope up to 3.0.16/4.0.8/4.1.3. This impacts an unknown function of the component Groovy Sandbox. This manipulation causes sandbox issue. This vulnerability appears as
CVE-2026-105475 | WebPros cPanel neutralization (EUVD-2026-115630)
A vulnerability has been found in WebPros cPanel and classified as problematic. The affected element is an unknown function. The manipulation leads to improper neutralization. This vulnerability is traded as CVE-2026-105475. It is possible
CVE-2026-76306 | Splunk SOAR up to 8.6.x REST API Query Filters information disclosure (EUVD-2026-107645)
A vulnerability was found in Splunk SOAR up to 8.6.x. It has been declared as problematic. The affected element is an unknown function of the component REST API Query Filters. The manipulation results in information disclosure. This vulnera
CVE-2026-105476 | WebPros cPanel Link Resolution path traversal (EUVD-2026-115631)
A vulnerability, which was classified as very critical, was found in WebPros cPanel. Impacted is an unknown function of the component Link Resolution. Executing a manipulation can lead to path traversal. This vulnerability appears as CVE-20
CVE-2026-76528 | Splunk SOAR up to 8.6.x protection mechanism (EUVD-2026-107637)
A vulnerability, which was classified as critical, has been found in Splunk SOAR up to 8.6.x. Affected by this issue is some unknown functionality. This manipulation causes protection mechanism failure. This vulnerability is handled as CVE-
CVE-2026-59107 | WolfVision Cynap Pro/Cynap Core Pro/Cynap/Cynap Core File Sharing improper authentication (EUVD-2026-109828)
A vulnerability marked as very critical has been reported in WolfVision Cynap Pro, Cynap Core Pro, Cynap and Cynap Core. This vulnerability affects unknown code of the component File Sharing. This manipulation causes improper authentication
CVE-2026-76407 | Splunk SOAR up to 8.6.x access control (EUVD-2026-107641)
A vulnerability classified as very critical was found in Splunk SOAR up to 8.6.x. Affected by this vulnerability is an unknown functionality. The manipulation results in improper access controls. This vulnerability is known as CVE-2026-7640
CVE-2026-115700 | benoitc hackney up to 4.8.99 URL Normalization hackney_url.normalize server-side request forgery (EUVD-2026-109834)
A vulnerability identified as critical has been detected in benoitc hackney up to 4.8.99. This impacts the function hackney_url.normalize of the component URL Normalization. Performing a manipulation results in server-side request forgery.
CVE-2026-113440 | benoitc hackney up to 4.8.x src/hackney.erl hackney.follow_redirect missing encryption (EUVD-2026-109835)
A vulnerability categorized as problematic has been discovered in benoitc hackney up to 4.8.x. Impacted is the function hackney.follow_redirect of the file src/hackney.erl. The manipulation results in missing encryption of sensitive data. T
CVE-2026-85297 | Google Cloud Run MCP up to 1.10.x information disclosure (EUVD-2026-109906)
A vulnerability has been found in Google Cloud Run MCP up to 1.10.x and classified as problematic. The impacted element is an unknown function. This manipulation causes information disclosure. The identification of this vulnerability is CVE
CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628)
A vulnerability classified as very critical was found in Google Android XR 14. This vulnerability affects the function addDragDropListener of the file WindowManagerService.java of the component WindowManagerService. Such manipulation leads
CVE-2026-105811 – Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Read this article Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. This article has been indexed from Latest Bulletins Read the original article: CVE-2026-105811 – Aut
CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status component of the
CVE-2026-65059 | Furl up to 3.15 Decompression lib/Furl/ZlibStream.pm memory allocation (EUVD-2026-115332)
A vulnerability labeled as problematic has been found in Furl up to 3.15. Affected by this issue is some unknown functionality of the file lib/Furl/ZlibStream.pm of the component Decompression. The manipulation results in uncontrolled memor
CVE-2026-116769 | Absolute Security Secure Access up to 14.60 improper authentication (EUVD-2026-115456)
A vulnerability was found in Absolute Security Secure Access up to 14.60 and classified as very critical. This affects an unknown function. Executing a manipulation can lead to improper authentication. This vulnerability is tracked as CVE-2