Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 780 | 0,2 % |
| ≥50 % | 3.517 | 0,9 % |
| ≥10 % | 22.972 | 5,7 % |
| <10 % | 377.768 | 93,3 % |
CVE-2026-80946 | Linux Kernel up to 6.18.50/7.2.3 FUSE fs/fuse/dev_uring.c fuse_uring_copy_to_ring stack-based overflow (WID-SEC-2026-3321)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.50/7.2.3. The impacted element is the function fuse_uring_copy_to_ring of the file fs/fuse/dev_uring.c of the component FUSE. Performing a manipulation results
CVE-2026-80942 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 rtl8192du rtl92du_init_sw_vars memory leak (WID-SEC-2026-3321)
A vulnerability has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3 and classified as critical. This affects the function rtl92du_init_sw_vars of the component rtl8192du. Performing a manipulation results in memory leak. This vulner
CVE-2026-120959 | MongoDB Atlas SQL up to 3.0.0 memory corruption (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Atlas SQL up to 3.0.0. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE
Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication
Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances. Tracked as CVE-2026-98432, the flaw requires access to the management network, an
CVE-2026-120954 | MongoDB C Driver up to 2.5.7 BSON Vector integer overflow (WID-SEC-2026-4328)
A vulnerability labeled as problematic has been found in MongoDB C Driver up to 2.5.7. The affected element is an unknown function of the component BSON Vector Handler. The manipulation results in integer overflow. This vulnerability is cat
CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Atlas SQL JDBC Driver up to 4.0.0. Affected by this issue is some unknown functionality of the component Authentication Component. The manipulation results in open r
CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Atlas SQL ODBC Driver up to 3.0.0. This affects an unknown function. The manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-120
CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328)
A vulnerability identified as problematic has been detected in MongoDB C Driver up to 1.30.14/2.5.7. Impacted is an unknown function of the component GridFS. The manipulation leads to uninitialized pointer. This vulnerability is listed as C
CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328)
A vulnerability classified as critical has been found in MongoDB C Driver up to 1.30.14/2.5.7. This impacts an unknown function. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-120678. The attack
CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328)
A vulnerability marked as problematic has been reported in MongoDB Rust Driver up to 3.9.0. The impacted element is an unknown function of the component Diagnostic Tracing. This manipulation causes information disclosure. This vulnerability
CVE-2026-120567 | MongoDB Entity Framework Core Provider up to 9.1.4/10.0.4 sql injection (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Entity Framework Core Provider up to 9.1.4/10.0.4. It has been rated as critical. This impacts an unknown function. This manipulation causes sql injection. The identification of this vulnerability is CVE
CVE-2026-119776 | FRRouting OSPFv3 improper authentication (Nessus ID 376170)
A vulnerability, which was classified as very critical, was found in FRRouting. This affects an unknown function of the component OSPFv3. The manipulation results in improper authentication. This vulnerability is identified as CVE-2026-1197
CVE-2026-114627 | Web::Simple up to 0.35 String Interpolation cross site scripting (Nessus ID 376171)
A vulnerability described as problematic has been identified in Web::Simple up to 0.35. The impacted element is an unknown function of the component String Interpolation. Executing a manipulation can lead to cross site scripting. This vulne
CVE-2026-120758 | HDF Group HDF5 up to 2.2.x Local Heap src/H5HL.c H5HL_unprotect null pointer dereference (Nessus ID 376172)
A vulnerability was found in HDF Group HDF5 up to 2.2.x and classified as problematic. Affected by this issue is the function H5HL_unprotect of the file src/H5HL.c of the component Local Heap. Executing a manipulation can lead to null point
CVE-2026-119675 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
A vulnerability has been found in MongoDB Database Tools up to 100.20.0 and classified as problematic. This impacts an unknown function of the component mongorestore. Performing a manipulation results in improper authorization. This vulnera
CVE-2026-119674 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Database Tools up to 100.20.0 and classified as problematic. The impacted element is an unknown function of the component mongorestore. Such manipulation leads to improper authorization. This vulnerabili
CVE-2026-119673 | MongoDB Database Tools up to 100.20.0 mongofiles symlink (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Database Tools up to 100.20.0. It has been declared as problematic. This impacts an unknown function of the component mongofiles. Executing a manipulation can lead to symlink following. This vulnerabilit
CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328)
A vulnerability labeled as problematic has been found in MongoDB Database Tools up to 100.20.0. This affects an unknown part of the component mongofiles. Such manipulation leads to improper privilege management. This vulnerability is traded
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Node.js Driver up to 6.21.x/7.7.x. This affects an unknown part of the component Connection Management. The manipulation results in information disclosure. This vuln
CVE-2026-77690 | ZohoCorp ManageEngine Key Manager Plus up to 7150 Deployment Target Configuration command injection (EUVD-2026-116757)
A vulnerability was found in ZohoCorp ManageEngine Key Manager Plus up to 7150. It has been rated as problematic. This affects an unknown function of the component Deployment Target Configuration. The manipulation leads to command injection
CVE-2026-84730 | ASUS Router AiCloud buffer overflow (EUVD-2026-116688)
A vulnerability categorized as very critical has been discovered in ASUS Router. The affected element is an unknown function of the component AiCloud. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CV
CVE-2026-76506 | Cisco Unified Computing System Central Software up to 2.1(2b) Web-based Management Interface information disclosure (EUVD-2026-116971)
A vulnerability was found in Cisco Unified Computing System Central Software. It has been rated as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. This manipulation causes information di
CVE-2026-121621 | Red Hat OpenShift GitOps Argo CD Image Updater command injection (EUVD-2026-116381)
A vulnerability was found in Red Hat OpenShift GitOps and classified as critical. This impacts an unknown function of the component Argo CD Image Updater. Executing a manipulation can lead to command injection. The identification of this vu
CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http.go improper authorization (EUVD-2026-117331)
A vulnerability categorized as problematic has been discovered in Gogs 0.14.3. This affects an unknown function of the file internal/route/repo/http.go of the component Git Smart HTTP Authorization Layer. Executing a manipulation can lead t
CVE-2026-123014 | iTerm2 up to 3.7.7beta1 URL argument injection (EUVD-2026-117332)
A vulnerability identified as critical has been detected in iTerm2 up to 3.7.7beta1. This impacts an unknown function of the component URL Handler. The manipulation leads to argument injection. This vulnerability is listed as CVE-2026-12301
Debian and Ubuntu Fix APT Security Flaw That Could Give Attackers Root Access
Debian and Ubuntu released security updates addressing CVE-2026-109518, an APT package manager flaw that lets an attacker controlling HTTP traffic replace downloaded packages and execute arbitrary code with root privileges. Published on Nov
CISA nimmt Apple-Sicherheitslücke CVE-2024-27834 in KEV auf: Angreifer stehlen Daten
VANCOUVER / LONDON (IT BOLTWISE) – CISA hat die Apple-Sicherheitslücke CVE-2024-27834 in den KEV-Katalog aufgenommen, nachdem über aktive Ausnutzung berichtet wurde. Die Schwachstelle umgeht Pointer Authentication über fehlerhafte Authentif
CVE-2026-121009 | SQL::Abstract up to 2.000001_03 Injection Guard func sql injection (Nessus ID 376177)
A vulnerability, which was classified as critical, has been found in SQL::Abstract up to 2.000001_03. Affected is an unknown function of the component Injection Guard. This manipulation of the argument func causes sql injection. The identif
CVE-2026-120755 | HDF Group HDF5 up to 2.2.x Szip Filter src/H5Zszip.c H5Z__filter_szip out-of-bounds (Nessus ID 376175)
A vulnerability marked as problematic has been reported in HDF Group HDF5 up to 2.2.x. Affected is the function H5Z__filter_szip of the file src/H5Zszip.c of the component Szip Filter. The manipulation leads to out-of-bounds read. This vuln
CVE-2026-120757 | HDF Group HDF5 up to 2.2.x External Link Traversal src/H5Lexternal.c H5L__extern_traverse heap-based overflow (Nessus ID 376178)
A vulnerability, which was classified as critical, has been found in HDF Group HDF5 up to 2.2.x. This impacts the function H5L__extern_traverse of the file src/H5Lexternal.c of the component External Link Traversal. This manipulation causes
CVE-2026-121007 | dbsrgits SQL::Abstract 1.90_01/2.000001_03 Nested Statement Processing where sql injection (Nessus ID 376180)
A vulnerability classified as critical was found in dbsrgits SQL::Abstract 1.90_01/2.000001_03. This impacts an unknown function of the component Nested Statement Processing. The manipulation of the argument where results in sql injection.
Oracle WebLogic ermöglicht Datenzugriff ohne Anmeldung
Eine kritische Sicherheitslücke in Oracle WebLogic Server ermöglicht Angreifern, über HTTP ohne Anmeldung Daten zu lesen, zu verändern oder zu löschen. Sie betrifft vier unterstützte Versionen von Oracle WebLogic Server, Updates stehen bere
CVE-2026-80939 | Linux Kernel up to 7.2.3 rtw89 rtw89_ops_rfkill_poll improper synchronization (WID-SEC-2026-3321)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.2.3. Affected by this vulnerability is the function rtw89_ops_rfkill_poll of the component rtw89. This manipulation causes improper synchronization
CVE-2026-80934 | Linux Kernel up to 6.18.49/7.2.3 MT7996 Driver mt76_connac_txp_skb_unmap memory leak (WID-SEC-2026-3321)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.49/7.2.3. Affected by this issue is the function mt76_connac_txp_skb_unmap of the component MT7996 Driver. Executing a manipulation can lead to memory le
CVE-2026-120756 | HDF Group HDF5 up to 2.2.x Object Header Decoding src/H5Ocache.c H5O__chunk_deserialize heap-based overflow (Nessus ID 376181)
A vulnerability described as problematic has been identified in HDF Group HDF5 up to 2.2.x. The affected element is the function H5O__chunk_deserialize of the file src/H5Ocache.c of the component Object Header Decoding. Executing a manipula
CVE-2026-120956 | MongoDB C Driver up to 1.30.14/2.5.7 uninitialized resource (Nessus ID 376183)
A vulnerability was found in MongoDB C Driver up to 1.30.14/2.5.7 and classified as critical. This vulnerability affects unknown code. Such manipulation leads to uninitialized resource. This vulnerability is uniquely identified as CVE-2026-
CVE-2026-120955 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS exceptional condition (Nessus ID 376182)
A vulnerability has been found in MongoDB C Driver up to 1.30.14/2.5.7 and classified as critical. This affects an unknown part of the component GridFS. This manipulation causes handling of exceptional conditions. This vulnerability is hand
CVE-2026-121520 | Moby BuildKit up to 0.34.0 Build Request privileges management (Nessus ID 376184)
A vulnerability was found in Moby BuildKit up to 0.34.0. It has been declared as very critical. This affects an unknown function of the component Build Request. Such manipulation leads to improper privilege management. This vulnerability is
Hackers Exploit Zyxel GS1900 Zero-Day RCE Flaw to Compromise Nearly 1,000 Network Switches
Zyxel has patched an unauthenticated out-of-bounds write in the web management interface of its GS1900 series switches. The flaw, tracked as CVE-2026-107441, allows pre-authentication OS command execution through crafted HTTP requests and a
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches
Attackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel patched the flaw. Binarly researchers found that the exploit abused a previously unknown bug
CVE-2025-59701 | Entrust nShield Connect XC/nShield 5c/nShield HSMi up to 13.6.11/13.7 Appliance SSD information disclosure
A vulnerability, which was classified as problematic, has been found in Entrust nShield Connect XC, nShield 5c and nShield HSMi up to 13.6.11/13.7. Affected is an unknown function of the component Appliance SSD. This manipulation causes inf
CVE-2025-59700 | Entrust nShield Connect XC/nShield 5c/nShield HSMi up to 13.6.11/13.7 Recovery Partition data authenticity (EUVD-2025-200254)
A vulnerability classified as critical has been found in Entrust nShield Connect XC, nShield 5c and nShield HSMi up to 13.6.11/13.7. This affects an unknown function of the component Recovery Partition. The manipulation leads to insufficien
CVE-2025-59695 | Entrust nShield Connect XC/nShield 5c/nShield HSMi Chassis Management Board improper authentication
A vulnerability marked as critical has been reported in Entrust nShield Connect XC, nShield 5c and nShield HSMi. The affected element is an unknown function of the component Chassis Management Board. Performing a manipulation results in imp
CVE-2026-121522 | Moby BuildKit up to 0.34.1 input validation (Nessus ID 376185)
A vulnerability was found in Moby BuildKit up to 0.34.1. It has been classified as critical. The impacted element is an unknown function. This manipulation causes improper input validation. This vulnerability is registered as CVE-2026-12152
CVE-2026-19029 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset heap-based overflow (EUVD-2026-93981 / Nessus ID 376187)
A vulnerability was found in HDF Group HDF5 up to 2.2.0 and classified as critical. This affects the function H5Z__filter_scaleoffset of the file src/H5Zscaleoffset.c of the component Scale-Offset Filter. Such manipulation leads to heap-bas
CVE-2026-120754 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset uninitialized pointer (Nessus ID 376187)
A vulnerability categorized as problematic has been discovered in HDF Group HDF5 up to 2.2.0. The impacted element is the function H5Z__filter_scaleoffset of the file src/H5Zscaleoffset.c of the component Scale-Offset Filter. Such manipulat
CVE-2025-65858 | Calibre-Web 0.6.25 /ajax/listusers username cross site scripting (EUVD-2025-200242)
A vulnerability identified as problematic has been detected in Calibre-Web 0.6.25. This issue affects some unknown processing of the file /ajax/listusers. This manipulation of the argument Username causes cross site scripting. This vulnerab
CVE-2025-65836 | PublicCMS 5.202506.b Chat Interface SimpleAiAdminController server-side request forgery
A vulnerability categorized as critical has been discovered in PublicCMS 5.202506.b. This impacts the function SimpleAiAdminController of the component Chat Interface. The manipulation results in server-side request forgery. This vulnerabil
CVE-2025-51683 | mJobtime 15.7.2 update_profile_Server sql injection
A vulnerability, which was classified as critical, has been found in mJobtime 15.7.2. Affected is an unknown function of the file /Default.aspx/update_profile_Server. Performing a manipulation results in sql injection. This vulnerability is
CVE-2025-65403 | LightFTP 2.0 g_cfg.MaxUsers buffer overflow
A vulnerability classified as problematic has been found in LightFTP 2.0. Impacted is an unknown function of the component g_cfg.MaxUsers. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-65403. Access to
CVE-2025-64030 | Eximbills Enterprise 4.1.5 WSTrxManager TMPL_INFO cross site scripting
A vulnerability classified as problematic has been found in Eximbills Enterprise 4.1.5. This affects an unknown part of the file /EximBillWeb/servlets/WSTrxManager. Performing a manipulation of the argument TMPL_INFO results in cross site s
CVE-2025-63535 | Blood Bank Management System 1.0 abs.php search sql injection
A vulnerability classified as critical was found in Blood Bank Management System 1.0. Affected by this vulnerability is an unknown functionality of the file abs.php. Such manipulation of the argument Search leads to sql injection. This vuln
CVE-2025-63534 | Blood Bank Management System 1.0 login.php error cross site scripting
A vulnerability, which was classified as problematic, was found in Blood Bank Management System 1.0. This affects an unknown part of the file login.php. Executing a manipulation of the argument Error can lead to cross site scripting. The id
CVE-2025-63532 | Blood Bank Management System 1.0 cancel.php search sql injection
A vulnerability classified as critical has been found in Blood Bank Management System 1.0. Affected is an unknown function of the file cancel.php. This manipulation of the argument Search causes sql injection. This vulnerability is handled
CVE-2025-63095 | Tempus Ex hello-video-codec 0.1.0 write_bits denial of service
A vulnerability was found in Tempus Ex hello-video-codec 0.1.0. It has been declared as problematic. This impacts the function BitstreamWriter::write_bits. Executing a manipulation can lead to denial of service. This vulnerability is tracke
CVE-2025-57489 | Shirt Pocket SuperDuper 3.10 SDAgent access control
A vulnerability has been found in Shirt Pocket SuperDuper 3.10 and classified as critical. The affected element is an unknown function of the component SDAgent. This manipulation causes improper access controls. The identification of this v
CVE-2025-63522 | FeehiCMS 2.1.1 reverse tabnabbing (Issue 76)
A vulnerability was found in FeehiCMS 2.1.1. It has been rated as critical. Affected is an unknown function. The manipulation leads to use of web link to untrusted target with window.opener access. This vulnerability is listed as CVE-2025-6
CVE-2026-122049 | Campcodes Bitcoin Wallet System 1.0 ForgotPasswordController.php random_int excessive authentication (EUVD-2026-117196)
A vulnerability identified as problematic has been detected in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes impro
CVE-2026-71364 | Red Hat Ansible Automation Platform Archive Extraction project_archive path traversal (EUVD-2026-64918 / Nessus ID 339184)
A vulnerability was found in Red Hat Ansible Automation Platform. It has been declared as very critical. The affected element is the function project_archive of the component Archive Extraction. Executing a manipulation can lead to path tra
CVE-2026-71365 | Red Hat Ansible Automation Platform Webhook Status Callback server-side request forgery (EUVD-2026-61015 / Nessus ID 339184)
A vulnerability, which was classified as problematic, has been found in Red Hat Ansible Automation Platform. Affected is an unknown function of the component Webhook Status Callback. This manipulation causes server-side request forgery. The