Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 761 | 0,2 % |
| ≥50 % | 3.395 | 0,9 % |
| ≥10 % | 22.580 | 5,7 % |
| <10 % | 366.557 | 93,2 % |
CVE-2023-41140 | Autodesk AutoCAD PRT File Parser heap-based overflow (ZDI-23-1441)
A vulnerability classified as critical has been found in Autodesk AutoCAD. This affects an unknown function of the component PRT File Parser. Performing a manipulation results in heap-based buffer overflow. This vulnerability was named CVE-
CVE-2023-21748 | Microsoft Windows up to Server 2022 Kernel privilege escalation (EUVD-2023-25915)
A vulnerability marked as critical has been reported in Microsoft Windows. The impacted element is an unknown function of the component Kernel. Performing a manipulation results in privilege escalation. This vulnerability is identified as C
CVE-2022-39324 | Grafana up to 8.5.15/9.2.7 Snapshot originalUrl cross site scripting (GHSA-4724-7jwc-3fpw)
A vulnerability described as problematic has been identified in Grafana up to 8.5.15/9.2.7. Impacted is an unknown function of the component Snapshot Handler. Such manipulation of the argument originalUrl leads to cross site scripting. This
CVE-2022-36062 | Grafana up to 8.5.12/9.0.8/9.1.5 RBAC permissions (GHSA-p978-56hq-r492 / EUVD-2024-1710)
A vulnerability identified as critical has been detected in Grafana up to 8.5.12/9.0.8/9.1.5. The impacted element is an unknown function of the component RBAC. Performing a manipulation results in preservation of permissions. This vulnerab
CVE-2022-23552 | Grafana up to 8.1/8.5.16/9.2.10/9.3.4 GeoMap Plugin cross site scripting (GHSA-8xmm-x63g-f6xv)
A vulnerability was found in Grafana up to 8.1/8.5.16/9.2.10/9.3.4. It has been rated as problematic. This vulnerability affects unknown code of the component GeoMap Plugin. The manipulation leads to cross site scripting. This vulnerability
CVE-2022-35768 | Microsoft Windows up to Server 2022 Kernel privilege escalation (EUVD-2022-38641)
A vulnerability has been found in Microsoft Windows and classified as critical. This issue affects some unknown processing of the component Kernel. This manipulation causes privilege escalation. This vulnerability is tracked as CVE-2022-357
CVE-2022-34707 | Microsoft Windows up to Server 2022 Kernel use after free (EUVD-2022-37657)
A vulnerability identified as critical has been detected in Microsoft Windows. Affected by this issue is some unknown functionality of the component Kernel. This manipulation causes use after free. This vulnerability is handled as CVE-2022-
CVE-2022-2068 | Oracle Communications Unified Assurance up to 5.5.7.0.0/6.0.0.0.0 User Interface os command injection (EUVD-2022-34360 / Nessus ID 211339)
A vulnerability classified as very critical was found in Oracle Communications Unified Assurance up to 5.5.7.0.0/6.0.0.0.0. Affected is an unknown function of the component User Interface. The manipulation results in os command injection. T
CVE-2022-1292 | Oracle MySQL Workbench up to 8.0.29 os command injection (EUVD-2022-24621 / Nessus ID 208691)
A vulnerability labeled as very critical has been found in Oracle MySQL Workbench up to 8.0.29. This vulnerability affects unknown code of the component Workbench. The manipulation results in os command injection. This vulnerability was nam
Ubuntu-Patch für IPv4-TCP-Schwachstelle CVE-2026-98432 kommt
In Linux wurde kürzlich die Schwachstelle CVE-2026-98432 in der IPv4-TCP-Verarbeitung öffentlich bekannt. Nun haben die Entwickler von Canonical entsprechende Sicherheitsupdates für Ubuntu zur Absicherung gegen diese Schwachstelle angekündi
Kritische Schwachstelle in Omnissa UAG (Nov. 2026)
Kurze Information an Nutzer von Omnissa UAG-Instanzen. Es gibt wohl eine kritische Schwachstelle im Omnissa® Unified Access Gateway™. Der Anbieter hat wohl intern Updates an Partner bereitgestellt, die zeitnah installiert werden sollten. De
CVE-2023-36049 | Microsoft .NET/.NET Framework/Visual Studio input validation (Nessus ID 239747)
A vulnerability classified as critical was found in Microsoft .NET, .NET Framework and Visual Studio. This impacts an unknown function. Such manipulation leads to improper input validation. This vulnerability is referenced as CVE-2023-36049
CVE-2023-29074 | Autodesk AutoCAD CATPART File Parser out-of-bounds write (ZDI-23-1437)
A vulnerability, which was classified as critical, has been found in Autodesk AutoCAD. Affected is an unknown function of the component CATPART File Parser. The manipulation leads to out-of-bounds write. This vulnerability is referenced as
CVE-2023-29073 | Autodesk AutoCAD MODEL File Parser heap-based overflow (ZDI-23-1439)
A vulnerability classified as critical was found in Autodesk AutoCAD. This impacts an unknown function of the component MODEL File Parser. Executing a manipulation can lead to heap-based buffer overflow. The identification of this vulnerabi
CVE-2023-23384 | Microsoft SQL Server heap-based overflow
A vulnerability categorized as critical has been discovered in Microsoft SQL Server. The affected element is an unknown function. The manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2023-23384. It is p
CVE-2022-48560 | Python up to 3.9 heapq heappushpop use after free (Nessus ID 213499 / WID-SEC-2024-1086)
A vulnerability, which was classified as critical, was found in Python up to 3.9. This vulnerability affects the function heappushpop of the component heapq. Such manipulation leads to use after free. This vulnerability is referenced as CVE
CVE-2026-119373 | SQLite up to 3.53.x FTS5 fts5MergeRowidLists heap-based overflow (Nessus ID 375476)
A vulnerability, which was classified as problematic, was found in SQLite up to 3.53.x. The impacted element is the function fts5MergeRowidLists of the component FTS5. The manipulation results in heap-based buffer overflow. This vulnerabili
CVE-2026-110193 | IBM Langflow OSS up to 1.12.8 os command injection (Nessus ID 375489)
A vulnerability identified as critical has been detected in IBM Langflow OSS up to 1.12.8. The affected element is an unknown function. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-11
CVE-2024-20289 | Cisco NX-OS up to 10.4(2) CLI os command injection (cisco-sa-nxos-cmdinj-Lq6jsZhH / Nessus ID 375488)
A vulnerability described as critical has been identified in Cisco NX-OS. The impacted element is an unknown function of the component CLI. Such manipulation leads to os command injection. This vulnerability is listed as CVE-2024-20289. The
CVE-2026-93680 | IBM Langflow OSS up to 1.12.8 improper authentication (Nessus ID 375489)
A vulnerability, which was classified as critical, was found in IBM Langflow OSS up to 1.12.8. This affects an unknown part. Executing a manipulation can lead to improper authentication. The identification of this vulnerability is CVE-2026-
CVE-2026-110186 | IBM Langflow OSS up to 1.12.8 code injection (Nessus ID 375489)
A vulnerability was found in IBM Langflow OSS up to 1.12.8. It has been classified as critical. Impacted is an unknown function. This manipulation causes code injection. This vulnerability is tracked as CVE-2026-110186. The attack is possib
CVE-2026-119084 – Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
Bulletin ID: 2026-168-AWS Publication Date: 11/03/2026 13:00 PM PST Description: We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0. Under certain conditions, the driver could load and execute arb
The Patch You Didn't Have to Install: Why Secure Configuration Outlasts the Zero-Day Race
Zero-day attacks often begin before vulnerabilities are disclosed. CIS Benchmarks and secure configuration provide protection that patching alone can't. Weiterlesen
CVE-2023-24908 | Microsoft Windows up to Server 2022 Remote Procedure Call Runtime integer overflow
A vulnerability identified as critical has been detected in Microsoft Windows. Impacted is an unknown function of the component Remote Procedure Call Runtime. The manipulation leads to integer overflow. This vulnerability is referenced as C
CVE-2023-1077 | Linux Kernel SCM kernel/sched/rt.c pick_next_rt_entity type confusion (Nessus ID 236642)
A vulnerability classified as critical has been found in Linux Kernel. This affects the function pick_next_rt_entity of the file kernel/sched/rt.c of the component SCM. The manipulation leads to type confusion. This vulnerability is referen
CVE-2022-41083 | Microsoft Jupyter Extension for Visual Studio Code privilege escalation (EUVD-2022-44327)
A vulnerability, which was classified as critical, has been found in Microsoft Jupyter Extension for Visual Studio Code. The affected element is an unknown function. The manipulation leads to privilege escalation. This vulnerability is docu
CVE-2022-41042 | Microsoft Visual Studio Code information disclosure (EUVD-2022-44287)
A vulnerability classified as problematic has been found in Microsoft Visual Studio Code. This issue affects some unknown processing. Performing a manipulation results in information disclosure. This vulnerability is cataloged as CVE-2022-4
CVE-2022-40755 | JasPer 3.0.6 jas_image.c inttobits denial of service (Issue 338)
A vulnerability was found in JasPer 3.0.6. It has been rated as problematic. The impacted element is the function inttobits of the file libjasper/base/jas_image.c. The manipulation leads to denial of service. This vulnerability is reference
CVE-2022-37959 | Microsoft Windows up to Server 2022 Azure Edition Core Hotpatch Network Device Enrollment Service information disclosure
A vulnerability labeled as problematic has been found in Microsoft Windows Server 2012 R2/Server 2016/Server 2019/Server 2022/Server 2022 Azure Edition Core Hotpatch. The affected element is an unknown function of the component Network Devi
CVE-2022-36280 | Linux Kernel vmwgfx Driver vmxgfx_kms.c buffer overflow (Bug 2071 / Nessus ID 214457)
A vulnerability described as critical has been identified in Linux Kernel. This vulnerability affects unknown code of the file drivers/gpu/vmxgfx/vmxgfx_kms.c of the component vmwgfx Driver. Such manipulation leads to buffer overflow. This
Keycloak Docker absichern: 13 Schritte, 75 Min [2026] - shattered.io
Weitere Themen aus dem Bereich finden Sie im Hub Cybersicherheit. Wer die Lücke zuvor selbst nachstellen will, baut das Labor aus dem Beitrag zum ... Weiterlesen
ZDI-26-865: Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th
ZDI-26-863: Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th
ZDI-26-864: Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS ratin
ZDI-26-860: Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-866: Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The followi
ZDI-26-856: Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-857: Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-853: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The
ZDI-26-855: Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-859: Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-851: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The fol
ZDI-26-861: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The fol
ZDI-26-854: Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The fol
ZDI-26-852: Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-858: Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The followi
ZDI-26-862: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2.
ZDI-26-867: Cisco Snort sf_unfold_header Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are a
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega