Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.557 | 0,9 % |
| ≥10 % | 13.139 | 3,2 % |
| <10 % | 391.193 | 95,7 % |
CVE-2026-123471 | myCred Plugin up to 4.0.2 on WordPress cross site scripting (EUVD-2026-118528)
A vulnerability has been found in myCred Plugin up to 4.0.2 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. The identification of this vulnerab
CVE-2026-109884 | Elementor Website Builder Plugin up to 4.3.5 on WordPress cross site scripting (EUVD-2026-118223)
A vulnerability categorized as problematic has been discovered in Elementor Website Builder Plugin up to 4.3.5 on WordPress. This issue affects some unknown processing. Executing a manipulation can lead to cross site scripting. This vulnera
CVE-2026-118785 | NXP MCUXpresso SDK up to 26.06.00-lts/26.09.00-pvw2 NSC Veneer Functions input validation (EUVD-2026-118540)
A vulnerability classified as very critical was found in NXP MCUXpresso SDK up to 26.06.00-lts/26.09.00-pvw2. This impacts an unknown function of the component NSC Veneer Functions. Executing a manipulation can lead to improper input valida
CVE-2026-75939 | Red Hat OpenShift Container Platform PGP Signature Verification signature verification (EUVD-2026-83918)
A vulnerability categorized as critical has been discovered in Red Hat OpenShift Container Platform. Affected by this vulnerability is an unknown functionality of the component PGP Signature Verification. Such manipulation leads to improper
CVE-2026-118786 | NXP MCUXpresso SDK up to 26.12.00-pvw0 rpmsg-lite input validation (EUVD-2026-118541)
A vulnerability was found in NXP MCUXpresso SDK up to 26.12.00-pvw0. It has been classified as problematic. This vulnerability affects unknown code of the component rpmsg-lite. Performing a manipulation results in improper input validation.
CVE-2026-71881 | GBIF Integrated Publishing Toolkit up to 3.3.4 cross site scripting (EUVD-2026-118543)
A vulnerability categorized as problematic has been discovered in GBIF Integrated Publishing Toolkit up to 3.3.4. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged
CVE-2026-109469 | Microsoft Entra Device Registration authorization (EUVD-2026-118542)
A vulnerability was found in Microsoft Entra Device Registration. It has been rated as critical. Impacted is an unknown function. The manipulation leads to authorization bypass. This vulnerability is listed as CVE-2026-109469. The attack ma
CVE-2026-119170 | PSF Python up to 3.14.10 hashlib module protection mechanism (EUVD-2026-118275)
A vulnerability identified as critical has been detected in PSF Python up to 3.14.10. Affected by this vulnerability is an unknown functionality of the component hashlib module. Performing a manipulation results in protection mechanism fail
CVE-2026-120458 | Ultra Video Group Kvazaar up to 2.3.2 src/encmain.c read_header infinite loop (EUVD-2026-115218)
A vulnerability classified as problematic has been found in Ultra Video Group Kvazaar up to 2.3.2. Affected by this vulnerability is the function read_header of the file src/encmain.c. The manipulation leads to infinite loop. This vulnerabi
CVE-2026-120487 | LaraDashboard up to 1.4.4 SettingPolicy manageCoreUpgrades improper authorization (EUVD-2026-115222)
A vulnerability was found in LaraDashboard up to 1.4.4 and classified as problematic. Affected is the function SettingPolicy::manageCoreUpgrades of the component SettingPolicy. The manipulation results in improper authorization. This vulner
CVE-2026-94213 | Red Hat Keycloak 7 Authorization Services privileges management (WID-SEC-2026-3484)
A vulnerability classified as problematic was found in Red Hat Keycloak 7. Impacted is an unknown function of the component Authorization Services. The manipulation results in improper privilege management. This vulnerability is reported as
CVE-2026-94001 | Red Hat Keycloak Admin REST API privileges management (WID-SEC-2026-3484)
A vulnerability was found in Red Hat Keycloak and classified as problematic. This issue affects some unknown processing of the component Admin REST API. Executing a manipulation can lead to improper privilege management. This vulnerability
CVE-2026-94000 | Red Hat Keycloak Group Membership Endpoint permission (WID-SEC-2026-3484)
A vulnerability, which was classified as problematic, was found in Red Hat Keycloak. This affects an unknown part of the component Group Membership Endpoint. Such manipulation leads to permission issues. This vulnerability is listed as CVE-
CVE-2026-93999 | Red Hat Keycloak OIDC Protocol access control (WID-SEC-2026-3484)
A vulnerability has been found in Red Hat Keycloak and classified as critical. This vulnerability affects unknown code of the component OIDC Protocol. Performing a manipulation results in improper access controls. This vulnerability is cata
CVE-2026-91777 | FasterXML jackson-databind Forward Reference Completion resource consumption (EUVD-2026-85003 / Nessus ID 349504)
A vulnerability classified as problematic was found in FasterXML jackson-databind. The impacted element is the function CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference of the component Forward Reference Complet
CVE-2026-91776 | FasterXML jackson-databind Deserializer Cache TypeDeserializerBase._findDeserializer resource consumption (EUVD-2026-85002 / Nessus ID 349507)
A vulnerability, which was classified as problematic, has been found in FasterXML jackson-databind. This affects the function TypeDeserializerBase._findDeserializer of the component Deserializer Cache. Performing a manipulation results in r
CVE-2026-89425 | FasterXML jackson-core DataInput Parser UTF8DataInputJsonParser._reportInvalidToken allocation of resources (EUVD-2026-85000 / Nessus ID 349334)
A vulnerability classified as problematic has been found in FasterXML jackson-core. The affected element is the function UTF8DataInputJsonParser._reportInvalidToken of the component DataInput Parser. This manipulation causes allocation of r
CVE-2026-97177 | Red Hat Keycloak/Single Sign-On User Update Mechanism privileges management (WID-SEC-2026-3558)
A vulnerability has been found in Red Hat Keycloak and Single Sign-On and classified as problematic. This affects an unknown part of the component User Update Mechanism. This manipulation causes improper privilege management. The identifica
CVE-2026-97176 | Red Hat Keycloak/Single Sign-On improper authorization (WID-SEC-2026-3558)
A vulnerability, which was classified as critical, was found in Red Hat Keycloak and Single Sign-On. Affected by this issue is some unknown functionality. The manipulation results in improper authorization. This vulnerability was named CVE-
CVE-2026-96446 | Red Hat Keycloak Single Sign-On Pushed Authorization Request PAR Implementation improper authorization (WID-SEC-2026-3558)
A vulnerability classified as critical was found in Red Hat Keycloak Single Sign-On. Affected by this issue is some unknown functionality of the component Pushed Authorization Request PAR Implementation. Such manipulation leads to improper
CVE-2026-96445 | Red Hat Keycloak Conditional OTP authenticator improper authentication (WID-SEC-2026-3558)
A vulnerability classified as critical has been found in Red Hat Keycloak. Affected by this vulnerability is an unknown functionality of the component Conditional OTP authenticator. This manipulation causes improper authentication. This vul
CVE-2026-97846 | Red Hat Keycloak Single Sign-On Standard Token Exchange V2 certificate validation (WID-SEC-2026-3569)
A vulnerability classified as problematic has been found in Red Hat Keycloak Single Sign-On. This affects an unknown function of the component Standard Token Exchange V2. The manipulation leads to improper certificate validation. This vulne
CVE-2026-88049 | Tesseract up to 5.5.3 LSTM Engine src/lstm/networkio.cpp AddTimeStepPart heap-based overflow (Nessus ID 377039)
A vulnerability identified as critical has been detected in Tesseract up to 5.5.3. Affected is the function NetworkIO::WriteTimeStepPart/NetworkIO::AddTimeStepPart of the file src/lstm/networkio.cpp of the component LSTM Engine. Performing
CVE-2026-88047 | tesseract-ocr Tesseract up to 5.5.3 NORMPROTO normmatch.cpp Classify::ReadNormProtos stack-based overflow (Nessus ID 377039)
A vulnerability marked as problematic has been reported in tesseract-ocr Tesseract up to 5.5.3. This impacts the function Classify::ReadNormProtos of the file src/classify/normmatch.cpp of the component NORMPROTO. Performing a manipulation
CVE-2026-88048 | tesseract-ocr Tesseract up to 5.5.3 FullyConnected Layer fullyconnected.cpp DeSerialize ni_/no_ heap-based overflow (Nessus ID 377039)
A vulnerability described as critical has been identified in tesseract-ocr Tesseract up to 5.5.3. Affected is the function FullyConnected::DeSerialize of the file src/lstm/fullyconnected.cpp of the component FullyConnected Layer. Executing
CVE-2026-18199 | Zohocorp ManageEngine PAM360 code injection (Nessus ID 377043)
A vulnerability labeled as critical has been found in Zohocorp ManageEngine PAM360 and ManageEngine Password Manager Pro. Affected by this issue is some unknown functionality. Such manipulation leads to code injection. This vulnerability is
CVE-2026-115297 | Elastic Packetbeat up to 8.19.23/9.4.8/9.5.5 AMQP Protocol Parser null pointer dereference (Nessus ID 377041)
A vulnerability classified as critical was found in Elastic Packetbeat up to 8.19.23/9.4.8/9.5.5. Affected by this issue is some unknown functionality of the component AMQP Protocol Parser. Executing a manipulation can lead to null pointer
CVE-2026-95728 | HPE Virtual Intranet Access up to 4.7.8 privileges management (Nessus ID 377045)
A vulnerability classified as problematic was found in HPE Virtual Intranet Access up to 4.7.8. This vulnerability affects unknown code. Such manipulation leads to improper privilege management. This vulnerability is listed as CVE-2026-9572
CVE-2026-95725 | HPE Virtual Intranet Access up to 4.7.8 command injection (Nessus ID 377045)
A vulnerability categorized as very critical has been discovered in HPE Virtual Intranet Access up to 4.7.8. This affects an unknown function. Such manipulation leads to command injection. This vulnerability is uniquely identified as CVE-20
CVE-2026-95726 | HPE Virtual Intranet Access up to 4.7.8 buffer overflow (Nessus ID 377045)
A vulnerability classified as critical has been found in HPE Virtual Intranet Access up to 4.7.8. This issue affects some unknown processing. This manipulation causes buffer overflow. This vulnerability is registered as CVE-2026-95726. Remo
CVE-2026-95727 | HPE Virtual Intranet Access up to 4.7.8 command injection (Nessus ID 377045)
A vulnerability marked as very critical has been reported in HPE Virtual Intranet Access up to 4.7.8. Impacted is an unknown function. This manipulation causes command injection. This vulnerability is tracked as CVE-2026-95727. The attack i
CVE-2026-19868 | SonicWall SonicOS SSLVPN Service improper authentication
A vulnerability was found in SonicWall SonicOS and classified as very critical. This impacts an unknown function of the component SSLVPN Service. Executing a manipulation can lead to improper authentication. This vulnerability is registered
CVE-2025-60969 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 path traversal
A vulnerability labeled as critical has been found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. This affects an unknown function. Such manipulation leads to path traversal. This vulnerability is uniquely identified as CV
CVE-2025-60312 | SourceCodester Markdown to HTML Converter 1.0 Markdown Input cross site scripting
A vulnerability labeled as problematic has been found in SourceCodester Markdown to HTML Converter 1.0. This affects an unknown part. Such manipulation of the argument Markdown Input leads to cross site scripting. This vulnerability is list
CVE-2025-60298 | Novel-Plus up to 5.2.4 /author/updateIndexName indexName cross site scripting
A vulnerability classified as problematic was found in Novel-Plus up to 5.2.4. Affected by this issue is some unknown functionality of the file /author/updateIndexName. Such manipulation of the argument indexName leads to cross site scripti
CVE-2025-57564 | CubeAPM nightly-2025-08-01-1 Endpoint _bulk neutralization for logs
A vulnerability classified as critical has been found in CubeAPM nightly-2025-08-01-1. The impacted element is an unknown function of the file /api/logs/insert/elasticsearch/_bulk of the component Endpoint. The manipulation leads to imprope
CVE-2025-57515 | Uniclare Student Portal sql injection
A vulnerability, which was classified as critical, was found in Uniclare Student Portal. This vulnerability affects unknown code. Such manipulation leads to sql injection. This vulnerability is listed as CVE-2025-57515. The attack may be pe
CVE-2025-56382 | LionCoders SalePro POS 5.4.8 Customer Management Customer Name cross site scripting
A vulnerability was found in LionCoders SalePro POS 5.4.8 and classified as problematic. Impacted is an unknown function of the component Customer Management Module. Executing a manipulation of the argument Customer Name can lead to cross s
CVE-2025-52021 | PuneethReddyHC Online Shopping System Advanced 1.0 GET Parameter edit_product.php product_id sql injection
A vulnerability, which was classified as critical, has been found in PuneethReddyHC Online Shopping System Advanced 1.0. Impacted is an unknown function of the file edit_product.php of the component GET Parameter Handler. This manipulation
CVE-2025-28129 | PHPGurukul Hostel Management System 2.1 ui layer
A vulnerability classified as problematic was found in PHPGurukul Hostel Management System 2.1. Affected by this issue is some unknown functionality. The manipulation results in improper restriction of rendered ui layers. This vulnerability
CVE-2026-95724 | HPE Virtual Intranet Access up to 4.7.8 certificate validation (Nessus ID 377045)
A vulnerability classified as problematic was found in HPE Virtual Intranet Access up to 4.7.8. Impacted is an unknown function. Such manipulation leads to improper certificate validation. This vulnerability is documented as CVE-2026-95724.
CVE-2026-92374 | TeamViewer Full Client/Host up to 13.2.154006/14.7.48867/15.82 Privileged Helper toctou (Nessus ID 377053)
A vulnerability classified as very critical has been found in TeamViewer Full Client and Host up to 13.2.154006/14.7.48867/15.82. Affected by this vulnerability is an unknown functionality of the component Privileged Helper. This manipulati
CVE-2026-92372 | TeamViewer Full Client up to 15.82 Screen-Image Decoder out-of-bounds write (Nessus ID 377054)
A vulnerability categorized as critical has been discovered in TeamViewer Full Client up to 15.82. The affected element is an unknown function of the component Screen-Image Decoder. Such manipulation leads to out-of-bounds write. This vulne
CVE-2026-111585 | TeamViewer up to 15.82 Remote Control Screen Processing integer overflow (Nessus ID 377055)
A vulnerability identified as problematic has been detected in TeamViewer up to 15.82. The impacted element is an unknown function of the component Remote Control Screen Processing. Performing a manipulation results in integer overflow. Thi
CVE-2025-60967 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 cross site scripting
A vulnerability described as problematic has been identified in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. Affected is an unknown function. Executing a manipulation can lead to cross site scripting. The identification of
CVE-2025-60965 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability was found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. It has been declared as critical. This issue affects some unknown processing. Executing a manipulation can lead to os command injection. This vulnera
CVE-2025-60964 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability was found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. It has been classified as critical. This vulnerability affects unknown code. Performing a manipulation results in os command injection. This vulnerab
CVE-2025-60963 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability was found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 and classified as critical. This affects an unknown part. Such manipulation leads to os command injection. This vulnerability is documented as CVE-202
CVE-2025-61224 | DokuWiki 2025-05-14a q cross site scripting (Issue 4512)
A vulnerability classified as problematic was found in DokuWiki 2025-05-14a. This impacts an unknown function. Executing a manipulation of the argument q can lead to cross site scripting. This vulnerability is tracked as CVE-2025-61224. The
CVE-2025-61198 | Orban Optimod 5750HD Web UI cross site scripting
A vulnerability marked as problematic has been reported in Orban Optimod 5750HD, Optimod 5950, Optimod 5950HD and Optimod Trio. This vulnerability affects unknown code of the component Web UI. The manipulation leads to cross site scripting.
CVE-2025-61197 | Orban Optimod 5750 client-side enforcement of server-side security
A vulnerability described as critical has been identified in Orban Optimod 5750, Optimod 5750HD, Optimod 5950, Optimod 5950HD and Trio. This issue affects some unknown processing. The manipulation results in client-side enforcement of serve
CVE-2025-60962 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability, which was classified as critical, was found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. Affected by this vulnerability is an unknown functionality. The manipulation results in os command injection. This
CVE-2025-60961 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 cross site scripting
A vulnerability identified as problematic has been detected in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. The impacted element is an unknown function. This manipulation causes cross site scripting. This vulnerability is h
CVE-2025-60960 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability has been found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 and classified as critical. Affected by this issue is some unknown functionality. This manipulation causes os command injection. This vulnerabili
CVE-2025-60959 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability categorized as critical has been discovered in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. The affected element is an unknown function. The manipulation results in os command injection. This vulnerability i
CVE-2025-60958 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 cross site scripting
A vulnerability marked as problematic has been reported in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. This impacts an unknown function. Performing a manipulation results in cross site scripting. This vulnerability was nam
CVE-2025-60957 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 os command injection
A vulnerability, which was classified as critical, has been found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. Affected is an unknown function. The manipulation leads to os command injection. This vulnerability is listed
CVE-2025-60956 | EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00 cross-site request forgery
A vulnerability was found in EndRun Sonoma D12 Network Time Server 6010-0071-000 Ver 4.00. It has been rated as problematic. Impacted is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded
CVE-2025-57247 | BATBToken Smart Contract Compiler 0.8.26 setColdWhiteList/setSpecialAddress access control
A vulnerability was found in BATBToken Smart Contract Compiler 0.8.26. It has been rated as critical. This affects the function setColdWhiteList/setSpecialAddress. Performing a manipulation results in improper access controls. This vulnerab
CVE-2024-6237 | 389-ds-base Extended Search Request denial of service (EUVD-2024-47979 / Nessus ID 210486)
A vulnerability marked as problematic has been reported in 389-ds-base. Affected by this vulnerability is an unknown functionality of the component Extended Search Request Handler. The manipulation leads to denial of service. This vulnerabi