Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.089 | 5,9 % |
| <10 % | 347.507 | 93,0 % |
CVE-2023-2911 | ISC BIND up to 9.16.41/9.16.41-S1/9.18.15/9.18.15-S1 Recursive-clients Quota stack-based overflow (FEDORA-2023-1d526d551c)
A vulnerability labeled as critical has been found in ISC BIND up to 9.16.41/9.16.41-S1/9.18.15/9.18.15-S1. Affected is an unknown function of the component Recursive-clients Quota Handler. Such manipulation leads to stack-based buffer over
CVE-2023-2829 | ISC BIND up to 9.16.41-S1/9.18.15-S1 NSEC Record denial of service
A vulnerability was found in ISC BIND up to 9.16.41-S1/9.18.15-S1. It has been classified as critical. Impacted is an unknown function of the component NSEC Record Handler. Performing a manipulation results in denial of service. This vulner
CVE-2022-44276 | Responsive Filemanager up to 9.11.x unrestricted upload
A vulnerability, which was classified as critical, has been found in Responsive Filemanager up to 9.11.x. This impacts an unknown function. Performing a manipulation results in unrestricted upload. This vulnerability is reported as CVE-2022
CVE-2021-25828 | Emby Server prior 4.6.0.50 GET Request /web cross site scripting (Issue 3785)
A vulnerability classified as problematic was found in Emby Server. Impacted is an unknown function of the file /web of the component GET Request Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is hand
CVE-2026-114704 | Christoph Vielgrader Relevanssi Plugin up to 4.28.4 on WordPress deserialization (EUVD-2026-109297)
A vulnerability was found in Christoph Vielgrader Relevanssi Plugin up to 4.28.4 on WordPress. It has been rated as problematic. The impacted element is an unknown function. The manipulation leads to deserialization. This vulnerability is r
CVE-2026-114192 | Magepeople WpEvently Plugin up to 5.7.8 on WordPress access control (EUVD-2026-109296)
A vulnerability categorized as critical has been discovered in Magepeople WpEvently Plugin up to 5.7.8 on WordPress. This affects an unknown function. The manipulation results in improper access controls. This vulnerability is identified as
CVE-2026-114191 | Knit Pay UPI QR Code Payment Gateway Plugin up to 1.6.3 on WordPress authorization (EUVD-2026-109298)
A vulnerability was found in Knit Pay UPI QR Code Payment Gateway Plugin up to 1.6.3 on WordPress. It has been declared as problematic. The affected element is an unknown function. Executing a manipulation can lead to missing authorization.
CVE-2026-115970 | Travisun Opptrix 0.4.0 Import Endpoint import code injection (EUVD-2026-109308)
A vulnerability, which was classified as critical, was found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. This
CVE-2026-115972 | FaveoSuite Faveo Helpdesk up to 2.0.3 UnAuthController.php id/status authorization (EUVD-2026-109312)
A vulnerability was found in FaveoSuite Faveo Helpdesk up to 2.0.3 and classified as problematic. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.res
CVE-2026-115971 | Travisun Opptrix 0.4.0 preParsing handler /api/channels/webhook/ Buffer.concat denial of service (EUVD-2026-109309)
A vulnerability has been found in Travisun Opptrix 0.4.0 and classified as problematic. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in deni
CVE-2026-115557 | PSF Python ssl certificate validation (EUVD-2026-109299)
A vulnerability classified as problematic was found in PSF Python. This vulnerability affects unknown code of the component ssl. The manipulation results in improper certificate validation. This vulnerability is reported as CVE-2026-115557.
CVE-2026-115973 | FaveoSuite Faveo Helpdesk 2.0.3 ForgotPasswordController.php reset password recovery (EUVD-2026-109313)
A vulnerability was found in FaveoSuite Faveo Helpdesk 2.0.3. It has been classified as critical. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers
CVE-2026-114820 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JSSE privileges management (EUVD-2026-109314)
A vulnerability, which was classified as critical, was found in Oracle GraalVM Enterprise Edition, GraalVM for JDK and Java SE up to 27.0.1.0.2. Impacted is an unknown function of the component JSSE. Such manipulation leads to improper priv
CVE-2023-32214 | Mozilla Firefox up to 112 Protocol denial of service (Bug 1828716)
A vulnerability was found in Mozilla Firefox up to 112. It has been classified as problematic. This vulnerability affects unknown code of the component Protocol Handler. This manipulation causes denial of service. This vulnerability appears
CVE-2023-2828 | ISC BIND up to 9.19.13 Cache resource consumption (FEDORA-2023-1d526d551c / Nessus ID 240012)
A vulnerability has been found in ISC BIND up to 9.16.41/9.16.41-S1/9.18.15/9.18.15-S1/9.19.13 and classified as critical. This vulnerability affects unknown code of the component Cache Handler. This manipulation causes resource consumption
PHP-Sicherheitslücke php2shell: KI beschleunigt die Entdeckung und verschärft den Notfall
LONDON (IT BOLTWISE) – In PHP wurde eine kritische Sicherheitslücke unter dem Namen php2shell öffentlich gemacht. Forschende identifizierten zwei Schwachstellen (CVE-2026-109618 und CVE-2026-109619), die unter bestimmten Bedingungen Server
PHP-Kritische Schwachstelle: Patches kommen, Angriffe steigen rasant
SINGAPUR / LONDON (IT BOLTWISE) – Eine kritische Sicherheitslücke in PHP sorgt weltweit für Notfall-Updates. Laut Angaben aus der Sicherheitsforschung betrifft die betroffene Programmiersprache rund 70% der Websites. In den ersten Minuten n
CVE-2023-33124 | Siemens Teamcenter Visualization/JT2Go CGM File memory corruption (ssa-538795)
A vulnerability, which was classified as critical, was found in Siemens Teamcenter Visualization and JT2Go. This affects an unknown function of the component CGM File Handler. Such manipulation leads to memory corruption. This vulnerability
CVE-2023-33122 | Siemens JT2Go/Teamcenter Visualization CGM File out-of-bounds (ssa-538795)
A vulnerability classified as problematic was found in Siemens JT2Go and Teamcenter Visualization. This vulnerability affects unknown code of the component CGM File Handler. Executing a manipulation can lead to out-of-bounds read. This vuln
CVE-2023-33121 | Siemens Teamcenter Visualization/JT2Go CGM File null pointer dereference (ssa-538795)
A vulnerability labeled as problematic has been found in Siemens Teamcenter Visualization and JT2Go. This affects an unknown part of the component CGM File Handler. Such manipulation leads to null pointer dereference. This vulnerability is
CVE-2023-28829 | Siemens SIMATIC NET PC Software obsolete function (ssa-508677)
A vulnerability marked as problematic has been reported in Siemens SIMATIC NET PC Software, SIMATIC NET PC Software, SIMATIC PCS and SIMATIC WinCC. This vulnerability affects unknown code. Performing a manipulation results in use of obsolet
CVE-2023-27465 | Siemens SIMOTION C240 5.4 exposure of sensitive information (ssa-482956)
A vulnerability described as problematic has been identified in Siemens SIMOTION C240, SIMOTION D445-2 DP-PN and SIMOTION P320-4 S 5.4. Affected by this issue is some unknown functionality. Such manipulation leads to exposure of sensitive i
CVE-2023-29129 | Siemens Mendix SAML Incomplete Fix CVE-2023-25957 incorrect implementation of authentication algorithm (ssa-851884)
A vulnerability classified as critical has been found in Siemens Mendix SAML. This affects an unknown part of the component Incomplete Fix CVE-2023-25957. Performing a manipulation results in incorrect implementation of authentication algor
CVE-2006-2073 | ISC BIND up to 9.3.2 Zone Transfer TSIG denial of service (VU#955777 / Nessus ID 22311)
A vulnerability was found in ISC BIND up to 9.3.2 and classified as critical. Affected is an unknown function of the component Zone Transfer Handler. Executing a manipulation of the argument TSIG can lead to denial of service. This vulnerab
CVE-2026-90060 | Linux Kernel up to 6.1.187/6.12.109/6.18.51/7.2.5 ALSA Control LED Layer snd_ctl_led_notify null pointer dereference (WID-SEC-2026-3444)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.187/6.12.109/6.18.51/7.2.5. Impacted is the function snd_ctl_led_notify of the component ALSA Control LED Layer. This manipulation causes null pointer dereferenc
CVE-2026-90059 | Linux Kernel up to 6.18.51/7.2.5 stmmac icmp_echo stack-based overflow (WID-SEC-2026-3444)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.18.51/7.2.5. This vulnerability affects the function icmp_echo of the component stmmac. The manipulation leads to stack-based buffer overflow. This vulnerabili
CVE-2026-90058 | Linux Kernel up to 7.2.5 Qdisc net/sched qdisc_get_stab TCA_STAB infinite loop (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as problematic. Affected by this issue is the function qdisc_get_stab of the file net/sched of the component Qdisc. Such manipulation of the argument TCA_STAB leads to inf
CVE-2026-90057 | Linux Kernel up to 7.2.5 slip slip_receive_buf use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. It has been classified as very critical. Affected is the function slip_receive_buf of the component slip. This manipulation causes use after free. This
CVE-2026-90056 | Linux Kernel up to 7.2.5 FEC PTP fec.c fec_ptp_stop bufdesc_ex initialization (WID-SEC-2026-3444)
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.5. This issue affects the function fec_ptp_stop of the file drivers/net/ethernet/freescale/fec.c of the component FEC PTP. The manipulation of the argument bu
CVE-2026-90055 | Linux Kernel up to 7.2.5 usbatm net/atm/common.c __vcc_connect ci_range out-of-bounds (WID-SEC-2026-3444)
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.5. The impacted element is the function __vcc_connect of the file net/atm/common.c of the component usbatm. Executing a manipulation of the argument
CVE-2026-90054 | Linux Kernel up to 7.2.5 TCP Retransmit __tcp_retransmit_skb out-of-bounds (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as critical. This impacts the function __tcp_retransmit_skb of the component TCP Retransmit. The manipulation results in out-of-bounds read. This vulnerability is identifi
CVE-2026-90053 | Linux Kernel up to 7.2.5 HTB Scheduler net/sched/sch_htb.c htb_classify infinite loop (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 7.2.5. Impacted is the function htb_classify of the file net/sched/sch_htb.c of the component HTB Scheduler. Such manipulation leads to infinite loop. This vulnerability
CVE-2026-90052 | Linux Kernel dm-integrity integrity_sector_checksum buffer overflow (WID-SEC-2026-3444)
A vulnerability, which was classified as very critical, has been found in Linux Kernel. The affected element is the function integrity_sector_checksum of the component dm-integrity. Performing a manipulation results in buffer overflow. This
CVE-2026-90051 | Linux Kernel up to 6.18.51/7.2.5/7.3-rc2 TCP tcp_sendmsg_locked locking (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5/7.3-rc2 and classified as very critical. This affects the function tcp_sendmsg_locked of the component TCP. The manipulation leads to improper locking. This vulnerability is
CVE-2023-33524 | Advent Tamale RMS up to 23.0 Configuration Backup File path traversal (EUVD-2023-37683)
A vulnerability identified as critical has been detected in Advent Tamale RMS up to 23.0. Affected by this issue is some unknown functionality of the component Configuration Backup File Handler. Performing a manipulation results in path tra
CVE-2023-32212 | Mozilla Firefox up to 112 Address Bar clickjacking (Bug 1826622 / Nessus ID 239763)
A vulnerability has been found in Mozilla Firefox up to 112 and classified as problematic. Affected by this issue is some unknown functionality of the component Address Bar Handler. The manipulation leads to clickjacking. This vulnerability
CVE-2023-32207 | Mozilla Firefox up to 112 Popup Notification permission (Bug 1826116 / Nessus ID 239763)
A vulnerability described as problematic has been identified in Mozilla Firefox up to 112. The impacted element is an unknown function of the component Popup Notification Handler. The manipulation results in permission issues. This vulnerab
CVE-2023-2187 | Triangle MicroWorks SCADA Data Gateway up to 5.01.03 WebMonitor missing authentication
A vulnerability classified as critical has been found in Triangle MicroWorks SCADA Data Gateway up to 5.01.03. Affected is an unknown function of the component WebMonitor. The manipulation leads to missing authentication. This vulnerability
CVE-2023-2186 | Triangle MicroWorks SCADA Data Gateway up to 5.01.03 Broadcast Message GTWWebMonitor.exe format string
A vulnerability described as critical has been identified in Triangle MicroWorks SCADA Data Gateway up to 5.01.03. This impacts an unknown function of the file GTWWebMonitor.exe of the component Broadcast Message Handler. Executing a manipu
CVE-2023-29539 | Mozilla Thunderbird up to 102.9 Content-Disposition Header null pointer dereference (Bug 1784348 / EUVD-2023-33081)
A vulnerability labeled as critical has been found in Mozilla Thunderbird up to 102.9. The affected element is an unknown function of the component Content-Disposition Header Handler. Executing a manipulation can lead to null pointer derefe
CVE-2023-29536 | Mozilla Thunderbird up to 102.9 Javascript Code memory corruption (Bug 1821959 / EUVD-2023-33078)
A vulnerability was found in Mozilla Thunderbird up to 102.9. It has been rated as critical. This vulnerability affects unknown code of the component Javascript Code Handler. This manipulation causes memory corruption. The identification of
CVE-2023-29535 | Mozilla Firefox up to 111 Garbage Collector memory corruption (Bug 1820543 / EUVD-2023-33077)
A vulnerability classified as critical was found in Mozilla Firefox up to 111. This issue affects some unknown processing of the component Garbage Collector. Executing a manipulation can lead to memory corruption. This vulnerability appears
CVE-2023-28176 | Mozilla Thunderbird up to 102.8 memory corruption (EUVD-2023-31884 / Nessus ID 239802)
A vulnerability categorized as critical has been discovered in Mozilla Thunderbird up to 102.8. This impacts an unknown function. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2023-28176. The a
CVE-2023-28164 | Mozilla Firefox up to 110 URL (Bug 1809122 / EUVD-2023-31872)
A vulnerability labeled as problematic has been found in Mozilla Firefox up to 110. This affects an unknown function of the component URL Handler. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as
CVE-2023-28163 | Mozilla Thunderbird up to 102.8 on Windows Save As Dialog Remote Code Execution (Bug 1817768 / EUVD-2023-31871)
A vulnerability was found in Mozilla Thunderbird up to 102.8 on Windows. It has been rated as critical. This affects an unknown function of the component Save As Dialog Handler. Performing a manipulation results in Remote Code Execution. Th
CVE-2023-28162 | Mozilla Thunderbird up to 102.8 AudioWorklet denial of service (Bug 1811327 / EUVD-2023-31870)
A vulnerability was found in Mozilla Thunderbird up to 102.8. It has been classified as problematic. The affected element is an unknown function of the component AudioWorklet Handler. This manipulation causes denial of service. The identifi
CVE-2023-25752 | Mozilla Thunderbird up to 102.8 Throttled Stream memory corruption (Bug 1811627 / EUVD-2023-29659)
A vulnerability was found in Mozilla Thunderbird up to 102.8. It has been declared as critical. The impacted element is an unknown function of the component Throttled Stream Handler. Such manipulation leads to memory corruption. This vulner
CVE-2023-25751 | Mozilla Thunderbird up to 102.8 JIT Code denial of service (Bug 1814899 / EUVD-2023-29658)
A vulnerability has been found in Mozilla Thunderbird up to 102.8 and classified as problematic. This issue affects some unknown processing of the component JIT Code Handler. The manipulation leads to denial of service. This vulnerability i
Brotli-Schwachstelle in Python (CVE-2026-111497), so prüfst du deine Version
Cybersicherheit. Pasquale Pillitteri. 24/10/2026 10 Min. Lesezeit. Cybersicherheit cybersicherheit it-sicherheit brotli python ... Weiterlesen
CVE-2026-111402 | Tribulant Newsletters Plugin up to 4.18.1 on WordPress sql injection (EUVD-2026-109247)
A vulnerability was found in Tribulant Newsletters Plugin up to 4.18.1 on WordPress. It has been classified as critical. The impacted element is an unknown function. Performing a manipulation results in sql injection. This vulnerability is
CVE-2026-115969 | Travisun Opptrix 0.4.0 Schedule API /api/auth/setup command injection (EUVD-2026-109306)
A vulnerability, which was classified as critical, has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. This vulner
The Anatomy of CVE-2024-4577: Why You Shouldn’t Abandon PHP Over a CGI Best-Fit Code Page Exploit
When a critical Remote Code Execution (RCE) vulnerability hits a language that powers a large share of the web, the headlines predictably declare the death of the ecosystem. But CVE-2024-4577 is not a flaw in modern PHP itself. It is a subt
CVE-2026-114603 | OpenTelemetry Python up to 1.45.0 TraceContextTextMapPropagator span.py TraceState.from_header resource consumption (Nessus ID 371635)
A vulnerability labeled as problematic has been found in OpenTelemetry Python up to 1.45.0. Affected by this issue is the function TraceState.from_header of the file opentelemetry/trace/span.py of the component TraceContextTextMapPropagator
CVE-2026-94422 | Red Hat xdg-dbus-proxy up to 0.1.8 Message Filtering privileges management (Nessus ID 371658)
A vulnerability, which was classified as very critical, was found in Red Hat xdg-dbus-proxy up to 0.1.8. Affected by this issue is some unknown functionality of the component Message Filtering. Executing a manipulation can lead to improper
CVE-2026-78663 | Go net http internal http2 x net http2 HTTP/2 Server Flow Control multiple operations on resource in single-operation context (ID 847187 / EUVD-2026-95427)
A vulnerability, which was classified as problematic, was found in Go net http internal http2 x net http2. Affected by this vulnerability is an unknown functionality of the component HTTP2 Server Flow Control. Executing a manipulation can l
CVE-2026-80663 | Linux Kernel up to 7.1.4 intel-speed-select fstat link following (Nessus ID 371666 / WID-SEC-2026-3075)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function fstat of the file tools/power/x86/intel-speed-select of the component intel-speed-select. E
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Bu
CVE-2023-25743 | Mozilla Firefox Focus up to 109 Fullscreen Notification authentication spoofing (Bug 1800203 / EUVD-2023-29650)
A vulnerability classified as critical has been found in Mozilla Firefox Focus up to 109. This issue affects some unknown processing of the component Fullscreen Notification Handler. This manipulation causes authentication bypass by spoofin
CVE-2023-25742 | Mozilla Firefox up to 109 SPKI RSA Public Key denial of service (Bug 1813424 / EUVD-2023-29649)
A vulnerability classified as problematic has been found in Mozilla Firefox up to 109. The impacted element is an unknown function of the component SPKI RSA Public Key Handler. Performing a manipulation results in denial of service. This vu
CVE-2023-25739 | Mozilla Thunderbird up to 102.7 ~ScriptLoadContext use after free (EUVD-2023-29646 / Nessus ID 245197)
A vulnerability was found in Mozilla Thunderbird up to 102.7. It has been rated as critical. Affected by this vulnerability is the function ~ScriptLoadContext. The manipulation leads to use after free. This vulnerability is referenced as CV