Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 741 | 0,2 % |
| ≥50 % | 3.215 | 0,8 % |
| ≥10 % | 22.045 | 5,8 % |
| <10 % | 354.728 | 93,2 % |
CVE-2023-7324 | Linux Kernel up to 6.2.2 scsi ses_enclosure_data_process out-of-bounds (Nessus ID 271972 / WID-SEC-2025-2441)
A vulnerability classified as critical was found in Linux Kernel up to 6.2.2. This issue affects the function ses_enclosure_data_process of the component scsi. Executing a manipulation can lead to out-of-bounds read. This vulnerability is r
CVE-2023-53733 | Linux Kernel up to 6.1.41/6.4.6 cls_u32 privilege escalation (Nessus ID 276910 / WID-SEC-2025-2407)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.41/6.4.6. Affected by this vulnerability is an unknown functionality of the component cls_u32. Performing a manipulation results in privilege escalation. This v
CVE-2023-53727 | Linux Kernel up to 5.10.194/5.15.131/6.1.53/6.5.3 fq_pie_timer privilege escalation (Nessus ID 276841 / WID-SEC-2025-2394)
A vulnerability labeled as critical has been found in Linux Kernel up to 5.10.194/5.15.131/6.1.53/6.5.3. The affected element is the function fq_pie_timer. The manipulation results in privilege escalation. This vulnerability is identified a
CVE-2023-49440 | AhnLab EPP 1.0.15 preview sql injection
A vulnerability was found in AhnLab EPP 1.0.15. It has been classified as critical. Affected is an unknown function. Performing a manipulation of the argument preview results in sql injection. This vulnerability was named CVE-2023-49440. Th
CVE-2023-43000 | Apple macOS/iOS/iPadOS/Safari Web Content use after free (Nessus ID 276570 / WID-SEC-2025-2657)
A vulnerability has been found in Apple macOS, iOS, iPadOS and Safari and classified as critical. This issue affects some unknown processing of the component Web Content Handler. The manipulation leads to use after free. This vulnerability
CVE-2023-37749 | HubSpot 1.29441 REST API Endpoint access control
A vulnerability was found in HubSpot 1.29441 and classified as critical. This impacts an unknown function of the component REST API Endpoint. Such manipulation leads to improper access controls. This vulnerability is uniquely identified as
CVE-2023-53726 | Linux Kernel up to 6.5.2 arm64 arch/arm64/lib/csum.c do_csum out-of-bounds (Nessus ID 297598 / WID-SEC-2025-2394)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.194/5.15.131/6.1.52/6.4.15/6.5.2. This impacts the function do_csum in the library arch/arm64/lib/csum.c of the component arm64. Executing a manipulatio
CVE-2023-53725 | Linux Kernel up to 6.4.3 ttc_timer_probe memory leak (Nessus ID 276868 / WID-SEC-2025-2394)
A vulnerability was found in Linux Kernel up to 6.4.3. It has been classified as critical. This issue affects the function ttc_timer_probe. Performing a manipulation results in memory leak. This vulnerability is known as CVE-2023-53725. Acc
CVE-2023-53724 | Linux Kernel up to 6.2.2 mfd pcf50633_adc_async_read return value (Nessus ID 276847 / WID-SEC-2025-2394)
A vulnerability was found in Linux Kernel up to 6.2.2 and classified as critical. This vulnerability affects the function pcf50633_adc_async_read of the component mfd. Such manipulation leads to unchecked return value. This vulnerability is
CVE-2023-53723 | Linux Kernel up to 6.3.2 sdma_v4_0_ip denial of service (EUVD-2023-60005 / Nessus ID 276826)
A vulnerability was found in Linux Kernel up to 6.3.2. It has been classified as critical. The impacted element is the function sdma_v4_0_ip. The manipulation leads to denial of service. This vulnerability is traded as CVE-2023-53723. Acces
CVE-2023-53722 | Linux Kernel up to 6.5.4 md raid1_remove_disk out-of-bounds (Nessus ID 276794 / WID-SEC-2025-2394)
A vulnerability has been found in Linux Kernel up to 6.5.4 and classified as critical. This affects the function raid1_remove_disk of the component md. This manipulation causes out-of-bounds read. This vulnerability appears as CVE-2023-5372
CVE-2023-53719 | Linux Kernel up to 6.3.3 serial arc_uart.c arc_serial_probe memory leak (Nessus ID 284758 / WID-SEC-2025-2394)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.3.3. Affected by this issue is the function arc_serial_probe of the file drivers/tty/serial/arc_uart.c of the component serial. The manipulation results in
CVE-2023-53718 | Linux Kernel up to 5.10.191/5.15.127/6.1.46/6.4.11 cpu_buffer null pointer dereference (Nessus ID 297090 / WID-SEC-2025-2394)
A vulnerability has been found in Linux Kernel up to 5.10.191/5.15.127/6.1.46/6.4.11 and classified as critical. Impacted is the function cpu_buffer. Performing a manipulation results in null pointer dereference. This vulnerability is repor
CVE-2023-53717 | Linux Kernel up to 6.2.2 ath9k_wmi_rsp_callback out-of-bounds write (Nessus ID 276910 / WID-SEC-2025-2394)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.2.2. This issue affects the function ath9k_wmi_rsp_callback. Such manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2023-5
CVE-2023-53716 | Linux Kernel up to 6.3.4 __skb_tstamp_tx memory leak (Nessus ID 284758 / WID-SEC-2025-2394)
A vulnerability was found in Linux Kernel up to 6.3.4. It has been declared as critical. This affects the function __skb_tstamp_tx. Such manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2023-53716. The att
CVE-2023-53715 | Linux Kernel up to 6.3.3 uninitialized pointer (Nessus ID 276910 / WID-SEC-2025-2394)
A vulnerability classified as critical has been found in Linux Kernel up to 6.3.3. The affected element is an unknown function. This manipulation causes uninitialized pointer. This vulnerability is registered as CVE-2023-53715. The attack r
CVE-2023-53712 | Linux Kernel up to 5.15.132/6.1.54/6.5.4 machine_crash_nonpanic_core denial of service (Nessus ID 302439 / WID-SEC-2025-2394)
A vulnerability classified as critical was found in Linux Kernel up to 5.15.132/6.1.54/6.5.4. Affected is the function machine_crash_nonpanic_core. Executing a manipulation can lead to denial of service. This vulnerability is registered as
CVE-2023-53707 | Linux Kernel up to 6.1.46/6.4.11 amdgpu amdgpu_cs_pass1 integer overflow (EUVD-2023-60021 / Nessus ID 276910)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.46/6.4.11. Affected by this issue is the function amdgpu_cs_pass1 of the component amdgpu. The manipulation leads to integer overflow. This vulnerability is lis
CVE-2023-53705 | Linux Kernel up to 6.3.4 ipv6 ipv6_find_tlv out-of-bounds (Nessus ID 276910 / WID-SEC-2025-2394)
A vulnerability described as critical has been identified in Linux Kernel up to 6.3.4. Affected by this vulnerability is the function ipv6_find_tlv of the component ipv6. Executing a manipulation can lead to out-of-bounds read. This vulnera
IT Security News Roundup: 2026-10-28 Evening
IT Security News: Evening roundup, 2026-10-28 Summary The evening was dominated by supply chain and infrastructure exposure. AWS published guidance on the Brotli decoder flaw (CVE-2026-111497) that has rippled across runtimes, a critical ED
CVE-2023-53704 | Linux Kernel up to 6.4.3 clk clk-imx8mq.c imx8mp_clocks_probe memory leak (WID-SEC-2025-2394)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.10.187/5.15.120/6.1.38/6.3.12/6.4.3. Affected is the function imx8mp_clocks_probe of the file clk-imx8mq.c of the component clk. Performing a manipulation results
CVE-2023-53700 | Linux Kernel up to 5.10.172/5.15.98/6.1.15/6.2.2 media media/i2c/max9286.c max9286_v4l2_register memory leak (Nessus ID 276839 / WID-SEC-2025-2394)
A vulnerability described as critical has been identified in Linux Kernel up to 5.10.172/5.15.98/6.1.15/6.2.2. Impacted is the function max9286_v4l2_register of the file media/i2c/max9286.c of the component media. The manipulation results i
CVE-2023-53696 | Linux Kernel up to 5.15.106/6.1.23/6.2.10 scsi qla2x00_probe_one initialization (Nessus ID 284764 / WID-SEC-2025-2394)
A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.106/6.1.23/6.2.10. Affected by this vulnerability is the function qla2x00_probe_one of the component scsi. Performing a manipulation results in improper ini
CVE-2023-53695 | Linux Kernel up to 6.2.2 UDF File Parser privilege escalation (Nessus ID 276910 / WID-SEC-2025-2394)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.2.2. The impacted element is an unknown function of the component UDF File Parser. The manipulation results in privilege escalation. This vulnerability was
CVE-2023-53694 | Linux Kernel up to 6.1.22/6.2.2 riscv stop_machine denial of service (Nessus ID 276853 / WID-SEC-2025-2394)
A vulnerability described as critical has been identified in Linux Kernel up to 6.1.22/6.2.2. This affects the function stop_machine of the component riscv. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2
CVE-2023-53693 | Linux Kernel up to 5.10.189/5.15.123/6.1.42/6.4.7 mm/slab_common.c raw_queue_event memory leak (Nessus ID 276822 / WID-SEC-2025-2394)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.10.189/5.15.123/6.1.42/6.4.7. The impacted element is the function raw_queue_event of the file mm/slab_common.c. This manipulation causes memory leak. This vulnera
CVE-2023-53692 | Linux Kernel up to c0c8edbc8abbe8f16d80a1d794d1ba2c12b6f193 ext4 fs/ext4/extents.c ext4_clu_mapped use after free (Nessus ID 297598 / WID-SEC-2025-2394)
A vulnerability classified as critical was found in Linux Kernel up to c0c8edbc8abbe8f16d80a1d794d1ba2c12b6f193. The impacted element is the function ext4_clu_mapped of the file fs/ext4/extents.c of the component ext4. Such manipulation lea
CVE-2023-46718 | Fortinet FortiOS/FortiProxy CLI stack-based overflow (FG-IR-23-354 / Nessus ID 270361)
A vulnerability classified as critical was found in Fortinet FortiOS and FortiProxy. This affects an unknown part of the component CLI. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2023-467
CVE-2023-53687 | Linux Kernel up to 6.4.4 tty s3c24xx_serial_getclk memory leak (Nessus ID 276910 / WID-SEC-2025-2229)
A vulnerability classified as critical was found in Linux Kernel up to 6.4.4. This affects the function s3c24xx_serial_getclk of the component tty. The manipulation results in memory leak. This vulnerability is identified as CVE-2023-53687.
CVE-2023-53685 | Linux Kernel up to 6.1.29/6.3.3 write memory leak (Nessus ID 297598 / WID-SEC-2025-2229)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.29/6.3.3. The affected element is the function write. Such manipulation leads to memory leak. This vulnerability is documented as CVE-2023-53685. The att
CVE-2023-53684 | Linux Kernel up to 5.15.105/6.1.22/6.2.9 xfrm xfrm_user privilege escalation (Nessus ID 302439 / WID-SEC-2025-2229)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.15.105/6.1.22/6.2.9. This vulnerability affects the function xfrm_user of the component xfrm. This manipulation causes privilege escalation. This v
CVE-2023-53683 | Linux Kernel up to 6.3.3 assertion (EUVD-2025-31927 / WID-SEC-2025-2229)
A vulnerability described as critical has been identified in Linux Kernel up to 6.3.3. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to reachable assertion. The identification of this vulnerab
CVE-2023-53680 | Linux Kernel up to 5.10.219/5.15.106/6.1.23/6.2.10 OPDESC nfsd4_ops out-of-bounds (Nessus ID 277757 / WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 5.10.219/5.15.106/6.1.23/6.2.10. It has been declared as critical. Affected is the function OPDESC. The manipulation of the argument nfsd4_ops results in out-of-bounds read. This vulnerability
CVE-2023-53679 | Linux Kernel up to 6.2.2 wifi mt7601u_rx_skb_from_seg dma_len null pointer dereference (WID-SEC-2025-2229)
A vulnerability classified as critical has been found in Linux Kernel up to 5.4.234/5.10.172/5.15.98/6.1.15/6.2.2. This vulnerability affects the function mt7601u_rx_skb_from_seg of the component wifi. The manipulation of the argument dma_l
CVE-2023-53677 | Linux Kernel up to 6.3.1 fake_get_pages memory leak (EUVD-2025-31958 / WID-SEC-2025-2229)
A vulnerability described as critical has been identified in Linux Kernel up to 6.3.1. This affects the function fake_get_pages. Executing a manipulation can lead to memory leak. This vulnerability is tracked as CVE-2023-53677. The attack i
CVE-2023-53676 | Linux Kernel up to 6.5.4 scsi lio_target_nacl_info_show buffer overflow (EUVD-2025-31973 / Nessus ID 279063)
A vulnerability classified as critical was found in Linux Kernel up to 6.5.4. Affected by this issue is the function lio_target_nacl_info_show of the component scsi. Executing a manipulation can lead to buffer overflow. This vulnerability i
CVE-2023-53675 | Linux Kernel up to 6.2.2 scsi ses_enclosure_data_process out-of-bounds (EUVD-2025-31966 / Nessus ID 283685)
A vulnerability classified as critical has been found in Linux Kernel up to 6.2.2. Affected by this issue is the function ses_enclosure_data_process of the component scsi. The manipulation leads to out-of-bounds read. This vulnerability is
CVE-2023-53674 | Linux Kernel up to 5.15.120/6.1.38/6.3.12/6.4.3 clk devm_clk_notifier_register memory leak (EUVD-2025-31940 / WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 5.15.120/6.1.38/6.3.12/6.4.3 and classified as critical. This affects the function devm_clk_notifier_register of the component clk. Executing a manipulation can lead to memory leak. This vulne
CVE-2023-53664 | Linux Kernel up to 6.5.2 OPP drivers/opp/core.c dev_pm_opp_get_required_pstate null pointer dereference (EUVD-2025-31949 / WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 6.5.2. It has been classified as critical. This issue affects the function dev_pm_opp_get_required_pstate of the file drivers/opp/core.c of the component OPP. Performing a manipulation results
CVE-2023-53662 | Linux Kernel up to 6.1.53/6.5.3 ext4 ext4_fname_setup_filename memory leak (EUVD-2025-31971 / Nessus ID 303082)
A vulnerability was found in Linux Kernel up to 6.1.53/6.5.3. It has been declared as critical. Impacted is the function ext4_fname_setup_filename of the component ext4. Executing a manipulation can lead to memory leak. This vulnerability a
CVE-2023-53661 | Linux Kernel up to 5.15.112/6.1.29/6.3.3 bnxt bnxt_get_nvram_directory buffer overflow (EUVD-2025-31948 / Nessus ID 278484)
A vulnerability was found in Linux Kernel up to 5.15.112/6.1.29/6.3.3. It has been declared as critical. The impacted element is the function bnxt_get_nvram_directory of the component bnxt. Executing a manipulation can lead to buffer overfl
CVE-2023-53658 | Linux Kernel up to 6.4.3 platform_get_drvdata use after free (EUVD-2025-31957 / Nessus ID 270263)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.4.3. This affects the function platform_get_drvdata. The manipulation results in use after free. This vulnerability is identified as CVE-2023-53658. The attack can o
CVE-2023-34119 | Zoom Rooms up to 5.14.5 temp file
A vulnerability classified as problematic was found in Zoom Rooms up to 5.14.5. This affects an unknown part. The manipulation results in insecure temporary file. This vulnerability is known as CVE-2023-34119. Attacking locally is a require
CVE-2023-33181 | Xibo CMS up to 3.3.4 information exposure (GHSA-c9cx-ghwr-x58m)
A vulnerability marked as problematic has been reported in Xibo CMS up to 3.3.4. This issue affects some unknown processing. This manipulation causes information exposure through error message. This vulnerability is handled as CVE-2023-3318
CVE-2023-31101 | Apache InLong information disclosure
A vulnerability has been found in Apache InLong and classified as problematic. This impacts an unknown function. This manipulation causes information disclosure. This vulnerability is registered as CVE-2023-31101. The attack requires access
CVE-2023-30742 | SAP CRM up to 801 WebClient UI cross site scripting
A vulnerability marked as problematic has been reported in SAP CRM up to 801. Affected by this issue is some unknown functionality of the component WebClient UI. This manipulation causes cross site scripting. This vulnerability is registere
CVE-2023-30741 | SAP BusinessObjects Business Intelligence Platform 420/430 redirect
A vulnerability classified as problematic was found in SAP BusinessObjects Business Intelligence Platform 420/430. This impacts an unknown function. The manipulation results in open redirect. This vulnerability is known as CVE-2023-30741. I
CVE-2023-3055 | AZEXO Page Builder Plugin up to 1.27.133 on WordPress azh_save cross-site request forgery
A vulnerability has been found in AZEXO Page Builder Plugin up to 1.27.133 on WordPress and classified as problematic. This impacts the function azh_save. This manipulation causes cross-site request forgery. The identification of this vulne
CVE-2023-2468 | Google Chrome up to 112.0.5615.137 PictureInPicture Remote Code Execution (FEDORA-2023-12b28d0d37)
A vulnerability labeled as critical has been found in Google Chrome. This issue affects some unknown processing of the component PictureInPicture. Executing a manipulation can lead to Remote Code Execution. This vulnerability is tracked as
CVE-2023-2462 | Google Chrome up to 112.0.5615.137 Prompts Remote Code Execution (FEDORA-2023-12b28d0d37)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Prompts. Executing a manipulation can lead to Remote Code Execution. This vulnerability is handled as CVE-2023-2462. Th
CVE-2023-22789 | Aruba InstantOS/ArubaOS 10 Command Line command injection (PSA-2023-006)
A vulnerability identified as critical has been detected in Aruba InstantOS and ArubaOS 10. This impacts an unknown function of the component Command Line Handler. Performing a manipulation results in command injection. This vulnerability i
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Cisco Talos has identified UAT-11473, a highly sophisticated advanced persistent threat (APT) actor, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication
CVE-2026-98174 | Linux Kernel up to 7.3-rc3 smb cifs_signal_cifsd_for_reconnect null pointer dereference (Nessus ID 372925 / WID-SEC-2026-3743)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.157/6.12.111/6.18.53/7.2.7/7.3-rc3. The affected element is the function cifs_signal_cifsd_for_reconnect of the component smb. The manipulation leads to
CVE-2026-98222 | Linux Kernel up to 6.12.111/6.18.53/7.2.7/7.3-rc3 KEYS encrypted_key_alloc integer overflow (Nessus ID 372925)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.111/6.18.53/7.2.7/7.3-rc3. This affects the function encrypted_key_alloc of the component KEYS. The manipulation leads to integer overflow. This vulner
CVE-2026-63928 | Linux Kernel up to 7.0.11 Serial Omninet memory corruption (Nessus ID 372926)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. This vulnerability affects unknown code of the component Serial Omninet. This manipulation causes memory corruption. The identification of this vulnera
CVE-2026-88806 | x.org libX11 up to 1.8.13 XkbGetMap buffer overflow (Nessus ID 372929 / WID-SEC-2026-3503)
A vulnerability marked as critical has been reported in x.org libX11 up to 1.8.13. Affected by this vulnerability is an unknown functionality of the component XkbGetMap Handler. Performing a manipulation results in buffer overflow. This vul
OffSec startet kostenloses PHP2Shell-Lab in PG Play nach kritischen CVEs
NEW YORK / LONDON (IT BOLTWISE) – OffSec stellt in Proving Grounds Play ein kostenloses, interaktives Lab bereit, um PHP2Shell-Angriffe anhand der kritischen CVE-2026-109618 und CVE-2026-109619 praktisch zu untersuchen. Die Lücken hängen mi
CVE-2023-27270 | SAP NetWeaver Application Server for ABAP and ABAP Platform resource consumption
A vulnerability marked as problematic has been reported in SAP NetWeaver Application Server for ABAP and ABAP Platform up to 791. This issue affects some unknown processing. This manipulation of the argument certain causes resource consumpt
CVE-2023-23815 | Alan Jackson Multi-column Tag Map Plugin up to 17.0.24 on WordPress cross site scripting
A vulnerability was found in Alan Jackson Multi-column Tag Map Plugin up to 17.0.24 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. This vu
CVE-2023-20627 | MediaTek MT6879/MT6895/MT6983/MT8167/MT8168 pqframework out-of-bounds write (ALPS07629585 / EUVD-2023-24806)
A vulnerability, which was classified as critical, has been found in MediaTek MT6879, MT6895, MT6983, MT8167 and MT8168. The impacted element is an unknown function of the component pqframework. This manipulation causes out-of-bounds write.