Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.089 | 5,9 % |
| <10 % | 347.458 | 93,0 % |
OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems
OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published October 23, the findings describ
CVE-2023-28666 | InPost Gallery Plugin up to 2.2.1 on WordPress add_inpost_gallery_slide_item imgurl cross site scripting (EUVD-2023-32327)
A vulnerability described as problematic has been identified in InPost Gallery Plugin up to 2.2.1 on WordPress. This issue affects the function add_inpost_gallery_slide_item. Such manipulation of the argument imgurl leads to cross site scri
CVE-2023-28663 | Formidable PRO2PDF Plugin up to 3.10 on WordPress fpropdf_export_file fieldmap sql injection (EUVD-2023-32324)
A vulnerability was found in Formidable PRO2PDF Plugin up to 3.10 on WordPress. It has been rated as critical. This affects the function fpropdf_export_file. The manipulation of the argument fieldmap leads to sql injection. This vulnerabili
CVE-2023-27536 | libcurl up to 7.x Connection Reuse authentication bypass (FEDORA-2023-7e7414e64d / EUVD-2023-31291)
A vulnerability labeled as problematic has been found in libcurl up to 7.x. Affected by this issue is some unknown functionality of the component Connection Reuse Handler. Such manipulation leads to authentication bypass by primary weakness
CVE-2023-27534 | Oracle Hyperion Infrastructure Technology 11.2.14.0.000 path traversal (EUVD-2023-31289 / Nessus ID 238296)
A vulnerability, which was classified as critical, was found in Oracle Hyperion Infrastructure Technology 11.2.14.0.000. Affected by this vulnerability is an unknown functionality of the component Infrastructure. The manipulation results in
CVE-2023-27463 | Siemens RUGGEDCOM CROSSBOW up to 5.2 Audit Log Form sql injection (ssa-320629)
A vulnerability has been found in Siemens RUGGEDCOM CROSSBOW up to 5.2 and classified as critical. This affects an unknown function of the component Audit Log Form. This manipulation causes sql injection. This vulnerability is tracked as CV
CVE-2023-27405 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds (ssa-847261)
A vulnerability marked as problematic has been reported in Siemens Tecnomatix Plant Simulation 16.0.5. Impacted is an unknown function of the component SPP File Handler. Performing a manipulation results in out-of-bounds read. This vulnerab
CVE-2022-47924 | Secvisogram csaf-validator-lib prior 0.1.0 Arguments denial of service (bsi-2022-0004)
A vulnerability was found in Secvisogram csaf-validator-lib and classified as problematic. Affected by this issue is some unknown functionality of the component Arguments Handler. Such manipulation leads to denial of service. This vulnerabi
CVE-2026-94075 | Tribulant Newsletters Plugin up to 4.18.1 on WordPress deserialization (EUVD-2026-109249)
A vulnerability classified as critical was found in Tribulant Newsletters Plugin up to 4.18.1 on WordPress. Impacted is an unknown function. The manipulation results in deserialization. This vulnerability is known as CVE-2026-94075. It is p
CVE-2026-112869 | Noah Hearle We’re Open! Plugin up to 2.6 on WordPress cross site scripting (EUVD-2026-109248)
A vulnerability was found in Noah Hearle We’re Open! Plugin up to 2.6 on WordPress. It has been rated as problematic. This impacts an unknown function. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026
CVE-2026-114190 | LiteSpeed Cache Plugin up to 7.9 on WordPress information disclosure (EUVD-2026-109251)
A vulnerability, which was classified as problematic, was found in LiteSpeed Cache Plugin up to 7.9 on WordPress. This issue affects some unknown processing. The manipulation results in information disclosure. This vulnerability was named C
CVE-2026-112866 | WPFactory Product Filter by WBW Plugin up to 3.4.6 on WordPress sql injection (EUVD-2026-109250)
A vulnerability has been found in WPFactory Product Filter by WBW Plugin up to 3.4.6 on WordPress and classified as critical. Impacted is an unknown function. This manipulation causes sql injection. The identification of this vulnerability
CVE-2026-114697 | QuarkA QA Analytics Plugin up to 5.3.0.1 on WordPress cross site scripting (EUVD-2026-109253)
A vulnerability marked as problematic has been reported in QuarkA QA Analytics Plugin up to 5.3.0.1 on WordPress. This affects an unknown part. Performing a manipulation results in cross site scripting. This vulnerability is reported as CVE
CVE-2026-114178 | Bold Grid W3 Total Cache Plugin up to 2.10.7 on WordPress cross site scripting (EUVD-2026-109252)
A vulnerability was found in Bold Grid W3 Total Cache Plugin up to 2.10.7 on WordPress. It has been declared as problematic. This affects an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability is
CVE-2026-110892 | Brainstorm Force SureDash Plugin up to 1.12.2 on WordPress authorization (EUVD-2026-109254)
A vulnerability, which was classified as problematic, has been found in Brainstorm Force SureDash Plugin up to 1.12.2 on WordPress. This vulnerability affects unknown code. The manipulation leads to missing authorization. This vulnerability
CVE-2026-114694 | Pixelite Events Manager Plugin up to 7.4.8 on WordPress cross site scripting (EUVD-2026-109256)
A vulnerability labeled as problematic has been found in Pixelite Events Manager Plugin up to 7.4.8 on WordPress. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is d
CVE-2026-114693 | Plugins360 Labs All-in-One Video Gallery Plugin up to 4.9.7 on WordPress cross site scripting (EUVD-2026-109255)
A vulnerability classified as problematic has been found in Plugins360 Labs All-in-One Video Gallery Plugin up to 4.9.7 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. This vulnerabi
CVE-2026-114695 | Infomaniak Network Vod Infomaniak Plugin up to 1.5.14 on WordPress cross site scripting (EUVD-2026-109257)
A vulnerability identified as problematic has been detected in Infomaniak Network Vod Infomaniak Plugin up to 1.5.14 on WordPress. Affected by this vulnerability is an unknown functionality. This manipulation causes cross site scripting. Th
CVE-2026-114196 | Paytiumsupport Paytium Plugin up to 5.0.5 on WordPress deserialization (EUVD-2026-109258)
A vulnerability described as critical has been identified in Paytiumsupport Paytium Plugin up to 5.0.5 on WordPress. This vulnerability affects unknown code. Executing a manipulation can lead to deserialization. This vulnerability appears a
CVE-2026-115993 | CervantesSec Cervantes up to 1.3-beta Notes cross site scripting (EUVD-2026-109259)
A vulnerability, which was classified as problematic, has been found in CervantesSec Cervantes up to 1.3-beta. The affected element is an unknown function of the component Notes. This manipulation causes cross site scripting. This vulnerabi
CVE-2026-111497: Brotli-Decoder-Fall erreicht Node.js, Bun, Python und Envoy
LONDON (IT BOLTWISE) – Eine Speicherfehler-Schwachstelle im Google-Brotli-Decoder (CVE-2026-111497) kann laut Beschreibung durch präparierte Brotli-Daten Buffer überlaufen lassen. Betroffen sind unter anderem Node.js, Bun, Python-Brotli- bz
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical Arista Ve
CVE-2023-27404 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File stack-based overflow (ssa-847261)
A vulnerability labeled as critical has been found in Siemens Tecnomatix Plant Simulation 16.0.5. This issue affects some unknown processing of the component SPP File Handler. Such manipulation leads to stack-based buffer overflow. This vul
CVE-2023-27403 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File memory corruption (ssa-847261)
A vulnerability identified as critical has been detected in Siemens Tecnomatix Plant Simulation 16.0.5. This vulnerability affects unknown code of the component SPP File Handler. This manipulation causes memory corruption. This vulnerabilit
CVE-2023-27402 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SPP File Handler. The manipulation leads to out-of-bounds read.
CVE-2023-27310 | Siemens RUGGEDCOM CROSSBOW up to 5.1 Client Query authorization (ssa-260625)
A vulnerability, which was classified as critical, has been found in Siemens RUGGEDCOM CROSSBOW up to 5.1. The affected element is an unknown function of the component Client Query Handler. The manipulation leads to missing authorization. T
CVE-2023-25957 | Siemens Mendix SAML up to 3.2.3 incorrect implementation of authentication algorithm (ssa-851884)
A vulnerability classified as critical has been found in Siemens Mendix SAML up to 3.2.3. This issue affects some unknown processing. Performing a manipulation results in incorrect implementation of authentication algorithm. This vulnerabil
CVE-2023-23916 | cURL up to 7.87.x HTTP Compression allocation of resources (DLA 3341-1 / Nessus ID 215380)
A vulnerability, which was classified as problematic, has been found in cURL up to 7.87.x. Affected by this vulnerability is an unknown functionality of the component HTTP Compression Handler. The manipulation leads to allocation of resourc
CVE-2023-22972 | OpenEMR up to 6.x eye_mag_functions.php REQUEST_URI cross site scripting (EUVD-2023-27072)
A vulnerability identified as problematic has been detected in OpenEMR up to 6.x. The impacted element is an unknown function of the file interface/forms/eye_mag/php/eye_mag_functions.php. The manipulation of the argument REQUEST_URI leads
CVE-2023-24995 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability has been found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. The impacted element is an unknown function of the component SPP File Handler. This manipulation causes out-of-bounds write. The identi
CVE-2023-24993 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability, which was classified as critical, has been found in Siemens Tecnomatix Plant Simulation 16.0.5. Impacted is an unknown function of the component SPP File Handler. The manipulation leads to out-of-bounds write. This vulnerab
CVE-2023-24989 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability marked as critical has been reported in Siemens Tecnomatix Plant Simulation 16.0.5. Affected by this issue is some unknown functionality of the component SPP File Handler. This manipulation causes out-of-bounds write. This v
CVE-2023-24987 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability identified as critical has been detected in Siemens Tecnomatix Plant Simulation 16.0.5. Affected is an unknown function of the component SPP File Handler. The manipulation leads to out-of-bounds write. This vulnerability is
CVE-2023-24984 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5. It has been declared as critical. The impacted element is an unknown function of the component SPP File Handler. Such manipulation leads to out-of-bounds write. This v
CVE-2023-24982 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability was found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. Impacted is an unknown function of the component SPP File Handler. The manipulation results in out-of-bounds write. This vulnerability is id
CVE-2023-24981 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability has been found in Siemens Tecnomatix Plant Simulation 16.0.5 and classified as critical. This issue affects some unknown processing of the component SPP File Handler. The manipulation leads to out-of-bounds write. This vulne
CVE-2023-24980 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability, which was classified as critical, was found in Siemens Tecnomatix Plant Simulation 16.0.5. This vulnerability affects unknown code of the component SPP File Handler. Executing a manipulation can lead to out-of-bounds write.
CVE-2023-24979 | Siemens Tecnomatix Plant Simulation 16.0.5 SPP File out-of-bounds write (ssa-847261)
A vulnerability, which was classified as critical, has been found in Siemens Tecnomatix Plant Simulation 16.0.5. This affects an unknown part of the component SPP File Handler. Performing a manipulation results in out-of-bounds write. This
CVE-2023-24581 | Siemens Solid Edge SE2022/Solid Edge SE2023 STP File use after free (ssa-491245)
A vulnerability classified as critical has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. Affected by this vulnerability is an unknown functionality of the component STP File Handler. This manipulation causes use after free.
Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities affect PAN-OS and previously impacted two cloud services. Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws have prompted planned firewall
AIStore's legacy ETL API accepted Kubernetes security settings from the caller
AIStore's legacy ETL API accepted Kubernetes security settings from the caller Storage systems for AI workloads sit between a cluster and a dataset, and increasingly they do more than store bytes: they run transformation jobs next to t
CVE-2026-92709 | rsyslog up to 8.2610.0 Dynafacility path traversal (WID-SEC-2026-4119)
A vulnerability identified as very critical has been detected in rsyslog up to 8.2610.0. This affects an unknown function of the component Dynafacility. Performing a manipulation results in path traversal. This vulnerability is identified a
CVE-2026-102253 | esnet iperf3 up to 3.21 denial of service (WID-SEC-2026-4121)
A vulnerability, which was classified as problematic, was found in esnet iperf3 up to 3.21. Affected is an unknown function. Executing a manipulation can lead to denial of service. The identification of this vulnerability is CVE-2026-102253
CVE-2026-20338 | Cisco ClamAV up to 8.4.5.30483 Zip Archive Parser double free (Nessus ID 335452 / WID-SEC-2026-2708)
A vulnerability described as critical has been identified in Cisco ClamAV. The impacted element is an unknown function of the component Zip Archive Parser. The manipulation results in double free. This vulnerability is reported as CVE-2026-
CVE-2026-20337 | Cisco ClamAV Zip Archive Parser out-of-bounds write (Nessus ID 335452 / WID-SEC-2026-2708)
A vulnerability labeled as critical has been found in Cisco ClamAV. Impacted is an unknown function of the component Zip Archive Parser. Executing a manipulation can lead to out-of-bounds write. This vulnerability is registered as CVE-2026-
CVE-2026-111813 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 magick plugin data authenticity (WID-SEC-2026-4112)
A vulnerability was found in Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0. It has been declared as critical. Affected is an unknown function of the component magick plugin. The manipulation results in insufficient verification of
CVE-2026-111812 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 origin_server_auth plugin privileges management (WID-SEC-2026-4112)
A vulnerability described as critical has been identified in Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0. This affects an unknown function of the component origin_server_auth plugin. Such manipulation leads to improper privilege
CVE-2022-47859 | SourceCodester Lead Management System 1.0 changePassword.php user_id sql injection (EUVD-2022-50616)
A vulnerability was found in SourceCodester Lead Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file changePassword.php. Such manipulation of the argument user_id leads to sql injection. Thi
CVE-2022-47854 | i-librarian 4.10 ajaxsupplement.php unrestricted upload (Issue 155 / EUVD-2022-50611)
A vulnerability described as critical has been identified in i-librarian 4.10. Affected by this vulnerability is an unknown functionality of the file ajaxsupplement.php. Executing a manipulation can lead to unrestricted upload. This vulnera
CVE-2022-47853 | TOTOlink A7100RU 7.4cu.2313_B20191024 httpd Service command injection (EUVD-2022-50610)
A vulnerability described as critical has been identified in TOTOlink A7100RU 7.4cu.2313_B20191024. Affected by this issue is some unknown functionality of the component httpd Service. Such manipulation leads to command injection. This vuln
CVE-2022-47848 | Bezeq Vtech NB403-IL/Vtech IAD604-IL UPnP Service rootDesc.xml information disclosure (EUVD-2022-50605)
A vulnerability was found in Bezeq Vtech NB403-IL and Vtech IAD604-IL. It has been rated as problematic. Impacted is an unknown function of the file rootDesc.xml of the component UPnP Service. This manipulation causes information disclosure
CVE-2022-47790 | SourceCodester Dynamic Transaction Queuing System 1.0 index.php?page=display id sql injection (EUVD-2022-50547)
A vulnerability identified as critical has been detected in SourceCodester Dynamic Transaction Queuing System 1.0. This affects an unknown function of the file /queuing/index.php?page=display. The manipulation of the argument ID leads to sq
CVE-2022-31259 | beego up to 2.0.2 Route Lookup /p1/p2/:name access control (Issue 4946 / EUVD-2022-5053)
A vulnerability was found in beego up to 2.0.2. It has been declared as critical. The affected element is an unknown function of the file /p1/p2/:name of the component Route Lookup Handler. The manipulation results in improper access contro
CVE-2022-47780 | Bangresto 1.0 itemID sql injection (EUVD-2022-50537)
A vulnerability classified as critical was found in Bangresto 1.0. Affected is an unknown function. Executing a manipulation of the argument itemID can lead to sql injection. This vulnerability is handled as CVE-2022-47780. The attack can o
CVE-2023-24564 | Siemens Solid Edge SE2022/Solid Edge SE2023 DWG File memory corruption (ssa-491245)
A vulnerability marked as critical has been reported in Siemens Solid Edge SE2022 and Solid Edge SE2023. This impacts an unknown function of the component DWG File Handler. The manipulation leads to memory corruption. This vulnerability is
CVE-2023-24562 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File uninitialized pointer (ssa-491245)
A vulnerability identified as critical has been detected in Siemens Solid Edge SE2022 and Solid Edge SE2023. The impacted element is an unknown function of the component PAR File Handler. Performing a manipulation results in uninitialized p
CVE-2023-24556 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds (ssa-491245)
A vulnerability has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023 and classified as problematic. Affected by this issue is some unknown functionality of the component PAR File Handler. Performing a manipulation results in ou
CVE-2023-24552 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File out-of-bounds (ssa-491245)
A vulnerability classified as problematic has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. This affects an unknown function of the component PAR File Handler. The manipulation leads to out-of-bounds read. This vulnerabilit
CVE-2023-24550 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File heap-based overflow (ssa-491245)
A vulnerability marked as critical has been reported in Siemens Solid Edge SE2022 and Solid Edge SE2023. The affected element is an unknown function of the component PAR File Handler. Performing a manipulation results in heap-based buffer o
CVE-2023-24549 | Siemens Solid Edge SE2022/Solid Edge SE2023 PAR File stack-based overflow (ssa-491245)
A vulnerability labeled as critical has been found in Siemens Solid Edge SE2022 and Solid Edge SE2023. Impacted is an unknown function of the component PAR File Handler. Such manipulation leads to stack-based buffer overflow. This vulnerabi