Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.224 | 0,8 % |
| ≥10 % | 22.067 | 5,8 % |
| <10 % | 354.695 | 93,2 % |
CVE-2026-119279 | MariaDB Connector/J up to 3.3.6/3.4.4/3.5.9 Connection out-of-bounds (Nessus ID 374243)
A vulnerability classified as problematic has been found in MariaDB Connector and J up to 3.3.6/3.4.4/3.5.9. This affects the function ReadableByteBuf.readLength/ReadableByteBuf.readIntLengthEncodedNotNull of the component Connection Handle
CVE-2026-119189 | Digitalbazaar Forge up to 1.4.0 pki.verifyCertificateChain certificate validation (Nessus ID 374242)
A vulnerability identified as problematic has been detected in Digitalbazaar Forge up to 1.4.0. This impacts the function pki.verifyCertificateChain. Performing a manipulation results in improper certificate validation. This vulnerability i
CVE-2026-119261 | Google Chrome up to 156.0.8078.73 Skia input validation (Nessus ID 374244)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component Skia. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CVE-2026-1
CVE-2026-115456 | Red Hat Enterprise Linux libstdc++ std::from_chars out-of-bounds (Nessus ID 374245)
A vulnerability categorized as critical has been discovered in Red Hat Enterprise Linux. Affected by this issue is the function std::from_chars of the component libstdc++. Executing a manipulation can lead to out-of-bounds read. This vulner
CVE-2026-119197 | pyasn1 up to 0.6.4 Binary Real Decoding RealPayloadDecoder.valueDecoder resource consumption (Nessus ID 374248)
A vulnerability was found in pyasn1 up to 0.6.4. It has been declared as problematic. This impacts the function RealPayloadDecoder.valueDecoder of the component Binary Real Decoding. Such manipulation leads to resource consumption. This vul
CVE-2026-119193 | sebastianbergmann PHPUnit up to 13.4.3 PHPT Code Coverage TestCase.php coverageFilesDirectory temp file (Nessus ID 374247)
A vulnerability classified as problematic was found in sebastianbergmann PHPUnit up to 13.4.3. This vulnerability affects the function TestCase::coverageFilesDirectory of the file src/Runner/Phpt/TestCase.php of the component PHPT Code Cove
CVE-2026-119205 | py-pdf pypdf up to 6.21.3 infinite loop (Nessus ID 374249)
A vulnerability, which was classified as problematic, has been found in py-pdf pypdf up to 6.21.3. The impacted element is an unknown function. The manipulation leads to infinite loop. This vulnerability is referenced as CVE-2026-119205. Re
CVE-2026-119278 | MariaDB Corporation MariaDB Connector/J up to 3.3.6/3.4.4 Caching Sha2 Password DriverManager.getConnection memory corruption (Nessus ID 374250)
A vulnerability categorized as problematic has been discovered in MariaDB Corporation MariaDB Connector and J up to 3.3.6/3.4.4. This vulnerability affects the function DriverManager.getConnection of the component Caching Sha2 Password. The
CVE-2026-111357 | Ivanti Connect Secure 22.8R2.4 Broker privileges management
A vulnerability marked as very critical has been reported in Ivanti Connect Secure 22.8R2.4. This impacts an unknown function of the component Broker. The manipulation leads to improper privilege management. This vulnerability is referenced
CVE-2026-119283 | authlib joserfc up to 1.7.4 Recipients Array joserfc.jwe joserfc.jwe.decrypt_json resource consumption (Nessus ID 374251)
A vulnerability, which was classified as problematic, was found in authlib joserfc up to 1.7.4. Affected by this vulnerability is the function joserfc.jwe.decrypt_json of the file joserfc.jwe of the component Recipients Array. Such manipula
CVE-2026-119280 | MariaDB Corporation MariaDB Connector/J up to 3.3.6/3.4.4/3.5.10 XA Recovery input validation (Nessus ID 374254)
A vulnerability described as problematic has been identified in MariaDB Corporation MariaDB Connector and J up to 3.3.6/3.4.4/3.5.10. The impacted element is the function MariaDbPoolConnection.recover/MariaDbPoolPinnedConnection.recover of
CVE-2026-119133 | Bytecode Alliance Wasmtime up to 48.0.5/49.0.2 VMContext layout memory corruption (Nessus ID 374255)
A vulnerability was found in Bytecode Alliance Wasmtime up to 48.0.5/49.0.2. It has been classified as problematic. The affected element is an unknown function of the component VMContext layout. Performing a manipulation results in memory c
CVE-2025-68219 | Linux Kernel up to 6.6.117/6.12.59/6.17.9 cifs smb3_cleanup_fs_context_contents double free (Nessus ID 299530 / WID-SEC-2025-2868)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.117/6.12.59/6.17.9. This affects the function smb3_cleanup_fs_context_contents of the component cifs. Such manipulation leads to double free. This vulner
CVE-2025-68183 | Linux Kernel up to 6.6.116/6.12.57/6.17.7 ima privilege escalation (Nessus ID 298928 / WID-SEC-2025-2868)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.116/6.12.57/6.17.7. Affected is an unknown function of the component ima. Such manipulation leads to privilege escalation. This vulnerability is traded as
CVE-2025-40311 | Linux Kernel up to 6.6.116/6.12.57/6.17.7 dma_alloc_coherent allocation of resources (EUVD-2025-201634 / Nessus ID 298897)
A vulnerability was found in Linux Kernel up to 6.6.116/6.12.57/6.17.7. It has been classified as critical. This issue affects the function dma_alloc_coherent. The manipulation leads to allocation of resources. This vulnerability is referen
CVE-2025-13204 | silentmatt expr-eval up to 2.0.2 prototype pollution (EUVD-2025-197614 / Nessus ID 281897)
A vulnerability was found in silentmatt expr-eval up to 2.0.2. It has been classified as critical. This affects an unknown function. Performing a manipulation results in improperly controlled modification of object prototype attributes. Thi
CVE-2026-119260 | Google Chrome up to 156.0.8078.73 Frames use after free (Nessus ID 374256)
A vulnerability was found in Google Chrome. It has been declared as critical. The impacted element is an unknown function of the component Frames. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-119260. T
CVE-2026-119262 | Google Chrome up to 156.0.8078.73 input validation (Nessus ID 374257)
A vulnerability categorized as critical has been discovered in Google Chrome. This impacts an unknown function. Executing a manipulation can lead to improper input validation. This vulnerability is registered as CVE-2026-119262. It is possi
CVE-2026-119207 | py-pdf pypdf up to 6.21.2 Nested Parser memory allocation (Nessus ID 374259)
A vulnerability was found in py-pdf pypdf up to 6.21.2. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Nested Parser. Executing a manipulation can lead to uncontrolled memory alloc
CVE-2026-62303 | pistacheio Pistache up to 0.4.26 Router Normalization src/server/router.cc sanitizeResource stack-based overflow (EUVD-2026-114262)
A vulnerability classified as problematic was found in pistacheio Pistache up to 0.4.26. This affects the function SegmentTreeNode::sanitizeResource of the file src/server/router.cc of the component Router Normalization. Such manipulation l
CVE-2026-62298 | mouse07410 asn1c up to 1.2.4 Decoding OPEN_TYPE_aper.c OPEN_TYPE_aper_get memb_ptr2 memory corruption (EUVD-2026-114330)
A vulnerability, which was classified as problematic, was found in mouse07410 asn1c up to 1.2.4. Affected is the function OPEN_TYPE_aper_get of the file OPEN_TYPE_aper.c of the component Decoding. Executing a manipulation of the argument me
CVE-2026-7003 | WIT SynApps Runtime up to 1.4.11 parameters.js hard-coded credentials (EUVD-2026-114263)
A vulnerability has been found in WIT SynApps Runtime up to 1.4.11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file parameters.js. The manipulation leads to hard-coded credentials. This vuln
CVE-2026-7004 | WIT SynApps Runtime up to 1.4.11 Session /System/Session-1 LINK cross site scripting (EUVD-2026-114265)
A vulnerability was found in WIT SynApps Runtime up to 1.4.11. It has been rated as problematic. This issue affects some unknown processing of the file /System/Session-1 of the component Session. Performing a manipulation of the argument Li
CVE-2025-40160 | Linux Kernel up to 6.6.112/6.12.53/6.17.3 find_virq privilege escalation (Nessus ID 277808 / WID-SEC-2025-2579)
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.112/6.12.53/6.17.3. This affects the function find_virq. Such manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2025-40160
CVE-2023-4813 | GNU C Library gaih_inet use after free (RHSA-2023:5453 / Nessus ID 236691)
A vulnerability described as problematic has been identified in GNU C Library. This affects the function gaih_inet. The manipulation results in use after free. This vulnerability was named CVE-2023-4813. The attack needs to be approached lo
CVE-2013-1840 | OpenStack Compute V1 Backend information disclosure (USN-1764-1 / Nessus ID 65574)
A vulnerability described as problematic has been identified in OpenStack Compute V1. This affects an unknown function of the component Backend. The manipulation results in information disclosure. This vulnerability is reported as CVE-2013-
CVE-2012-5625 | OpenStack Grizzly information disclosure (USN-1663-1 / Nessus ID 63261)
A vulnerability categorized as problematic has been discovered in OpenStack Grizzly. Affected is an unknown function. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2012-5625. It is possible to la
CVE-2012-5605 | Red Hat CloudForms 1.0 Cache access control (Bug 882138 / XFDB-80550)
A vulnerability identified as problematic has been detected in Red Hat CloudForms 1.0. This issue affects some unknown processing in the library var/lib/pulp/cache/grinder/ of the component Cache. This manipulation causes improper access co
CVE-2012-4574 | Red Hat CloudForms 1.0 pulp.conf credentials management (Bug 872487 / XFDB-80548)
A vulnerability was found in Red Hat CloudForms 1.0. It has been declared as problematic. Affected by this issue is some unknown functionality of the file pulp.conf. Executing a manipulation can lead to credentials management. This vulnerab
CVE-2012-3427 | Red Hat JBoss Enterprise Application Platform 5 EL6 /var/cache/jboss-ec2-eap access control (RHSA-2012:1376-1 / Nessus ID 64058)
A vulnerability categorized as problematic has been discovered in Red Hat JBoss Enterprise Application Platform 5 EL6. Affected by this vulnerability is an unknown functionality of the file /var/cache/jboss-ec2-eap. The manipulation results
CVE-2011-4346 | Red Hat Network Satellite 5.4.1 cross site scripting (RHSA-2011:1794 / Nessus ID 64010)
A vulnerability was found in Red Hat Network Satellite 5.4.1. It has been declared as problematic. This issue affects some unknown processing. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2011-43
CVE-2009-4139 | Red Hat Network Satellite Server up to 5.4.1 cross-site request forgery (RHSA-2011:0879 / Nessus ID 63982)
A vulnerability, which was classified as problematic, was found in Red Hat Network Satellite Server up to 5.4.1. This affects an unknown function. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-20
CVE-2026-119408 | n8n-io n8n up to 2.42.5/2.43.2/3.0.0 Function/Function Item/LangChain Code code injection (WID-SEC-2026-4192)
A vulnerability, which was classified as critical, was found in n8n-io n8n up to 2.42.5/2.43.2/3.0.0. This issue affects some unknown processing of the component Function/Function Item/LangChain Code. Executing a manipulation can lead to co
CVE-2026-119364 | ProFTPD Project up to 1.3.9e/1.3.10rc4 mod_copy symlink (WID-SEC-2026-4259)
A vulnerability was found in ProFTPD Project ProFTPD up to 1.3.9e/1.3.10rc4. It has been declared as problematic. This affects an unknown function of the component mod_copy. Such manipulation leads to symlink following. This vulnerability i
CVE-2026-119147 | ProFTPD Project up to 1.3.9d/1.3.10rc4 mod_sftp copy-file extension handler authorization (WID-SEC-2026-4259)
A vulnerability was found in ProFTPD Project ProFTPD up to 1.3.9d/1.3.10rc4. It has been classified as critical. The impacted element is an unknown function of the component mod_sftp copy-file extension handler. This manipulation causes aut
CVE-2025-40137 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 fs/inode.c f2fs_truncate infinite loop (Nessus ID 298897 / WID-SEC-2025-2579)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. The impacted element is the function f2fs_truncate of the file fs/inode.c. Performing a manipulation results in infinite loop. This vulnerab
CVE-2025-40135 | Linux Kernel up to 6.17.2 ipv6 ip6_xmit use after free (Nessus ID 279677 / WID-SEC-2025-2579)
A vulnerability was found in Linux Kernel up to 6.17.2 and classified as critical. This issue affects the function ip6_xmit of the component ipv6. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-202
CVE-2025-40077 | Linux Kernel up to 6.17.2 f2fs pgoff_t buffer overflow (Nessus ID 271880 / WID-SEC-2025-2431)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.2. This issue affects the function pgoff_t of the component f2fs. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-20
CVE-2025-40071 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 gsm_queue privilege escalation (Nessus ID 271865 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. It has been rated as critical. Affected by this vulnerability is the function gsm_queue. This manipulation causes privilege escalation. This vulnerability appears as CV
CVE-2025-40067 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 ntfs3 rename BITMAP allocation of resources (Nessus ID 271904 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. It has been declared as critical. Affected is the function rename of the component ntfs3. The manipulation of the argument BITMAP results in allocation of resources. Th
CVE-2025-39952 | Linux Kernel up to 6.6.107/6.12.48/6.16.8 wifi wlan_cfg.c wilc_wlan_parse_response_frame len buffer overflow (Nessus ID 302764 / WID-SEC-2025-2194)
A vulnerability classified as critical was found in Linux Kernel up to 6.6.107/6.12.48/6.16.8. Affected is the function wilc_wlan_parse_response_frame of the file drivers/net/wireless/microchip/wilc1000/wlan_cfg.c of the component wifi. Exe
CVE-2025-39886 | Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5 BPF Call bpf_timer_init stack-based overflow (Nessus ID 265877 / WID-SEC-2025-2107)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5. The impacted element is the function bpf_timer_init of the component BPF Call Handler. The manipulation leads to stack-based buf
CVE-2025-39797 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 xfrm_alloc_spi iteration (Nessus ID 264708 / WID-SEC-2025-2051)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. This issue affects the function xfrm_alloc_spi. The manipulation leads to excessive iteration. This vulnerability is traded as CVE-20
CVE-2023-53447 | Linux Kernel up to 6.4.4 f2fs f2fs_remount race condition (Nessus ID 265503 / WID-SEC-2025-2092)
A vulnerability was found in Linux Kernel up to 6.4.4 and classified as critical. This issue affects the function f2fs_remount of the component f2fs. Such manipulation leads to race condition. This vulnerability is traded as CVE-2023-53447.
CVE-2023-53394 | Linux Kernel up to 6.4.9 mlx5e flush denial of service (Nessus ID 265572 / WID-SEC-2025-2092)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.4.9. Affected by this vulnerability is the function flush of the component mlx5e. Performing a manipulation results in denial of service. This vulnera
CVE-2023-53261 | Linux Kernel up to 6.5.2 coresight acpi_get_dsd_graph memory leak (Nessus ID 270738 / WID-SEC-2025-2053)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.5.2. The impacted element is the function acpi_get_dsd_graph of the component coresight. The manipulation results in memory leak. This vulnerability is cat
CVE-2025-39767 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 module_frob_arch_sections deadlock (Nessus ID 264756 / WID-SEC-2025-2040)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. The impacted element is the function module_frob_arch_sections. The manipulation results in deadlock. This vulnerability is
CVE-2025-39726 | Linux Kernel up to 6.6.100/6.12.40/6.15.8 ism_cmd state issue (Nessus ID 261634 / WID-SEC-2025-1988)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.100/6.12.40/6.15.8. This affects the function ism_cmd. This manipulation causes state issue. This vulnerability is handled as CVE-2025-39726. The attack can onl
CVE-2025-39720 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 ksmbd ksmbd_conn_releasing reference count (Nessus ID 261598 / WID-SEC-2025-1988)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. Impacted is the function ksmbd_conn_releasing of the component ksmbd. Executing a manipulation can lead to improper update o
CVE-2025-38734 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 net smc_listen_out null pointer dereference (Nessus ID 261597 / WID-SEC-2025-1988)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. This affects the function smc_listen_out of the component net. Performing a manipulation results in null pointer derefe
CVE-2025-38675 | Linux Kernel prior 6.12.41/6.15.9 xfrm state_ptrs initialization (EUVD-2025-27937 / Nessus ID 260272)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.40/6.15.8/dd4c2a174994238d55ab54da2545543d36f4e0d0. This vulnerability affects the function state_ptrs of the component xfrm. The manipulation leads to i
CVE-2023-53111 | Linux Kernel up to 5.15.103/6.1.20/6.2.7 loop do_req_filebacked use after free (Nessus ID 246856 / WID-SEC-2025-0932)
A vulnerability was found in Linux Kernel up to 5.15.103/6.1.20/6.2.7. It has been classified as critical. This vulnerability affects the function do_req_filebacked of the component loop. The manipulation leads to use after free. This vulne
CVE-2022-50167 | Linux Kernel up to 5.18.17/5.19.1 bpf elem_size integer overflow (Nessus ID 270035 / WID-SEC-2025-1350)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 5.18.17/5.19.1. The affected element is the function elem_size of the component bpf. Such manipulation leads to integer overflow. This vulnerability is tr
CVE-2024-58096 | Linux Kernel up to 6.14.1 wifi ath11k_dp_rx_mon_dest_process initialization (EUVD-2025-11277 / Nessus ID 240657)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.14.1. This issue affects the function ath11k_dp_rx_mon_dest_process of the component wifi. This manipulation causes improper initialization. The id
CVE-2022-49622 | Linux Kernel up to 5.18.12 NF_STOLEN use after free (Nessus ID 238183)
A vulnerability identified as critical has been detected in Linux Kernel up to 5.18.12. Affected by this issue is some unknown functionality. Performing a manipulation of the argument NF_STOLEN results in use after free. This vulnerability
CVE-2022-49106 | Linux Kernel up to 5.15.33/5.16.19/5.17.2 vchiq_get_state null pointer dereference
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.33/5.16.19/5.17.2. This affects the function vchiq_get_state. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2
CVE-2013-2056 | Red Hat Network Satellite 5.5 improper authentication (RHSA-2013:0848 / Nessus ID 66537)
A vulnerability was found in Red Hat Network Satellite 5.5. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation results in improper authentication. This vulnerability is reported as
CVE-2006-4339 | VMware Server 1.x Pipe Object cryptographic issue (VU#845620 / Nessus ID 20055)
A vulnerability described as problematic has been identified in VMware Server 1.x. Affected by this vulnerability is an unknown functionality of the component Pipe Object Handler. Executing a manipulation can lead to cryptographic issues. T
CVE-2026-119117 – Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library
CVE-2026-119568 | vsftpd up to 3.0.5 SSL Data ssl_data_accept improper authentication (EUVD-2026-113833)
A vulnerability categorized as critical has been discovered in vsftpd up to 3.0.5. Impacted is the function ssl_data_accept of the component SSL Data Handler. Such manipulation leads to improper authentication. This vulnerability is listed