Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.224 | 0,8 % |
| ≥10 % | 22.067 | 5,8 % |
| <10 % | 354.695 | 93,2 % |
CVE-2026-71490 | OPNsense up to 26.1.10 ACL hasPrivilege privileges management (WID-SEC-2026-2177)
A vulnerability, which was classified as problematic, has been found in OPNsense up to 26.1.10. This impacts the function OPNsense\Core\ACL::hasPrivilege of the component ACL. This manipulation causes improper privilege management. This vul
CVE-2026-63442 | OPNsense up to 26.1.10 WebGUI Login syslog-ng-lockout.conf readline usernamefld injection (WID-SEC-2026-2177)
A vulnerability was found in OPNsense up to 26.1.10 and classified as critical. The affected element is the function readline of the file syslog-ng-lockout.conf of the component WebGUI Login. The manipulation of the argument usernamefld res
CVE-2026-58395 | OPNsense up to 26.1.10 Safe-Delete config.xml delBase xpath injection (WID-SEC-2026-2177)
A vulnerability identified as problematic has been detected in OPNsense up to 26.1.10. This affects the function ApiMutableModelControllerBase::delBase of the file config.xml of the component Safe-Delete. Performing a manipulation results i
CVE-2024-13362 | XT Quick View for WooCommerce Plugin on WordPress Parameter url cross site scripting
A vulnerability was found in XT Quick View for WooCommerce Plugin on WordPress and classified as problematic. The affected element is an unknown function of the component Parameter Handler. Such manipulation of the argument url leads to cro
CVE-2026-33789 | Juniper Networks Junos OS/Junos OS Evolved rpd stack-based overflow (Nessus ID 374265)
A vulnerability classified as very critical was found in Juniper Networks Junos OS and Junos OS Evolved. The affected element is an unknown function of the component rpd. Such manipulation leads to stack-based buffer overflow. This vulnerab
CVE-2026-102175 | Juniper Junos OS/Junos OS Evolved sdxd heap-based overflow (Nessus ID 374265)
A vulnerability marked as very critical has been reported in Juniper Junos OS and Junos OS Evolved. Affected by this issue is some unknown functionality of the component sdxd. The manipulation leads to heap-based buffer overflow. This vulne
CVE-2026-33796 | Juniper Networks Junos OS/Junos OS Evolved rpd buffer overflow (Nessus ID 374265)
A vulnerability, which was classified as very critical, has been found in Juniper Networks Junos OS and Junos OS Evolved. The impacted element is an unknown function of the component rpd. Performing a manipulation results in buffer overflow
CVE-2026-84784 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 QUIC Stack allocation of resources (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability was found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 and classified as problematic. This vulnerability affects unknown code of the component QUIC Stack. Executing a manipulation can lead to allocation of resources. This vulner
CVE-2026-76641 | libexpat Expat up to 2.8.3 External Entity Parser XML_ExternalEntityParserCreate out-of-bounds (Nessus ID 374269 / WID-SEC-2026-2960)
A vulnerability classified as problematic has been found in libexpat Expat up to 2.8.3. Impacted is the function XML_ExternalEntityParserCreate of the component External Entity Parser. This manipulation causes out-of-bounds read. This vulne
CVE-2026-75804 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 QUIC Stack allocation of resources (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability, which was classified as problematic, was found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. Affected by this issue is some unknown functionality of the component QUIC Stack. Such manipulation leads to allocation of resources.
CVE-2022-48225 | Acuant AcuFill SDK prior 10.22.02.03 Installation uncontrolled search path (EUVD-2022-50934)
A vulnerability was found in Acuant AcuFill SDK. It has been classified as problematic. This vulnerability affects unknown code of the component Installation Handler. This manipulation causes uncontrolled search path. This vulnerability is
CVE-2022-48224 | Acuant AcuFill SDK prior 10.22.02.03 permission (EUVD-2022-50933)
A vulnerability, which was classified as critical, has been found in Acuant AcuFill SDK. Affected by this vulnerability is an unknown functionality. The manipulation leads to permission issues. This vulnerability is traded as CVE-2022-48224
CVE-2022-48223 | Acuant AcuFill SDK prior 10.22.02.03 certutil.exe race condition (EUVD-2022-50932)
A vulnerability marked as problematic has been reported in Acuant AcuFill SDK. The impacted element is an unknown function of the file certutil.exe. This manipulation causes race condition. This vulnerability is registered as CVE-2022-48223
CVE-2022-48222 | Acuant AcuFill SD prior 10.22.02.03 certutil.exe uncontrolled search path (EUVD-2022-50931)
A vulnerability labeled as critical has been found in Acuant AcuFill SD. The affected element is an unknown function of the file certutil.exe. The manipulation results in uncontrolled search path. This vulnerability is cataloged as CVE-2022
CVE-2022-48221 | Acuant AcuFill SDK prior 10.22.02.03 race condition (EUVD-2022-50930)
A vulnerability, which was classified as problematic, was found in Acuant AcuFill SDK. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to race condition. The identification of this vulnerability
CVE-2026-72897 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 TLS Context Switching SSL_set_SSL_CTX out-of-bounds write (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability classified as critical has been found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. This impacts the function SSL_set_SSL_CTX of the component TLS Context Switching. The manipulation leads to out-of-bounds write. This vulnerabil
CVE-2026-54875 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 SM2 timing discrepancy (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability described as problematic has been identified in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. This affects an unknown function of the component SM2. Executing a manipulation can lead to observable timing discrepancy. This vulnerabi
CVE-2026-103658 | GNU Aspell up to 0.60.8.2 Dictionary Loader common/string.hpp String::reserve heap-based overflow (Nessus ID 374270)
A vulnerability has been found in GNU Aspell up to 0.60.8.2 and classified as critical. The impacted element is the function String::reserve of the file common/string.hpp of the component Dictionary Loader. This manipulation causes heap-bas
CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server
CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server Vulnerability ID: CVE-2026-118761 CVSS Score: 7.5 Published: 2026-10-30 A high-severity Denial of Service (DoS) vulnerability exists in
CVE-2026-23361 | Linux Kernel up to 6.12.76/6.18.16/6.19.6/7.0-rc1 PCI dw_pcie_ep_raise_msix_irq out-of-bounds write (Nessus ID 303733 / WID-SEC-2026-0861)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.76/6.18.16/6.19.6/7.0-rc1. Affected by this issue is the function dw_pcie_ep_raise_msix_irq of the component PCI. The manipulation results in out-of-boun
CVE-2026-23330 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc2 nfc nci_close_device memory leak (Nessus ID 303737 / WID-SEC-2026-0861)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.16/6.19.6/7.0-rc2. Affected is the function nci_close_device of the component nfc. This manipulation causes memory leak. This vulnerability is tracked as CVE-20
CVE-2026-23004 | Linux Kernel up to 6.18.6/6.19-rc5 IPv4 lib/dump_stack.c rt6_uncached_list_del use after free (EUVD-2026-4614 / Nessus ID 296531)
A vulnerability was found in Linux Kernel up to 6.18.6/6.19-rc5 and classified as critical. The impacted element is the function rt6_uncached_list_del in the library lib/dump_stack.c of the component IPv4. The manipulation results in use af
CVE-2025-71138 | Linux Kernel up to 6.6.119/6.12.63/6.18.3/6.19-rc2 dpu_encoder_phys_wb_setup_ctl null pointer dereference (Nessus ID 284713 / WID-SEC-2026-0119)
A vulnerability was found in Linux Kernel up to 6.6.119/6.12.63/6.18.3/6.19-rc2. It has been classified as critical. This affects the function dpu_encoder_phys_wb_setup_ctl. This manipulation causes null pointer dereference. This vulnerabil
CVE-2025-71109 | Linux Kernel up to 6.12.63/6.18.2 MIPS UASM_i_LA_mostly memory corruption (Nessus ID 307007 / WID-SEC-2026-0119)
A vulnerability has been found in Linux Kernel up to 6.12.63/6.18.2 and classified as critical. Impacted is the function UASM_i_LA_mostly of the component MIPS. This manipulation causes memory corruption. This vulnerability is handled as CV
CVE-2025-71074 | Linux Kernel up to 6.18.2 ffs_epfile_open deserialization (WID-SEC-2026-0086)
A vulnerability described as critical has been identified in Linux Kernel up to 6.18.2. This vulnerability affects the function ffs_epfile_open. Executing a manipulation can lead to deserialization. This vulnerability appears as CVE-2025-71
CVE-2025-68755 | Linux Kernel up to 6.17.12/6.18.1 staging null pointer dereference (EUVD-2026-0895 / Nessus ID 281770)
A vulnerability was found in Linux Kernel up to 6.17.12/6.18.1 and classified as critical. This vulnerability affects unknown code of the component staging. Such manipulation leads to null pointer dereference. This vulnerability is listed a
CVE-2025-68379 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 rxe_srq_chk_attr null pointer dereference (EUVD-2025-205075 / Nessus ID 279802)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.62/6.17.12/6.18.1. This affects the function rxe_srq_chk_attr. Performing a manipulation results in null pointer dereference. This vulnerability is
CVE-2025-68342 | Linux Kernel up to 6.6.118/6.12.60/6.17.10 can gs_usb_receive_bulk_callback privilege escalation (EUVD-2025-204804 / Nessus ID 279638)
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.118/6.12.60/6.17.10. This vulnerability affects the function gs_usb_receive_bulk_callback of the component can. Executing a manipulation can lead to privile
CVE-2025-68321 | Linux Kernel up to 6.17.7 page_pool allocation of resources (Nessus ID 282382 / WID-SEC-2025-2868)
A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.196/6.1.158/6.6.116/6.12.57/6.17.7. Affected is the function page_pool. The manipulation leads to allocation of resources. This vulnerability is listed as C
CVE-2025-68320 | Linux Kernel up to 6.6.116/6.12.57/6.17.7 kernel/locking/mutex.c in_atomic stack-based overflow (Nessus ID 298917 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.6.116/6.12.57/6.17.7. It has been classified as critical. The affected element is the function in_atomic of the file kernel/locking/mutex.c. This manipulation causes stack-based buffer overf
CVE-2023-54107 | Linux Kernel pd_free_fn reference count (Nessus ID 279823 / WID-SEC-2025-2929)
A vulnerability labeled as critical has been found in Linux Kernel. The affected element is the function pd_free_fn. The manipulation results in improper update of reference count. This vulnerability is cataloged as CVE-2023-54107. The atta
CVE-2026-58394 | OPNsense up to 26.1.10 SSL Certificate Selector system_advanced_admin.php legacy_html_escape_form_data a_cert cross site scripting (WID-SEC-2026-2177)
A vulnerability, which was classified as problematic, was found in OPNsense up to 26.1.10. This issue affects the function legacy_html_escape_form_data of the file src/www/system_advanced_admin.php of the component SSL Certificate Selector.
CVE-2026-58393 | OPNsense up to 26.1.10 OpenVPN Client Specific Override client_connect.php openvpn_csc_conf_write common_name path traversal (WID-SEC-2026-2177)
A vulnerability categorized as problematic has been discovered in OPNsense up to 26.1.10. The impacted element is the function openvpn_csc_conf_write of the file client_connect.php of the component OpenVPN Client Specific Override. Such man
CVE-2026-58392 | OPNsense up to 26.1.10 Ntp Gps Page services_ntpd_gps.php base64_decode initcmd cross-site request forgery (WID-SEC-2026-2177)
A vulnerability, which was classified as problematic, has been found in OPNsense up to 26.1.10. This vulnerability affects the function base64_decode of the file src/www/services_ntpd_gps.php of the component Ntp Gps Page. Performing a mani
CVE-2026-58391 | OPNsense up to 26.1.10 Firewall Rules/NAT Views filter_rule.volt cross site scripting (WID-SEC-2026-2177)
A vulnerability described as problematic has been identified in OPNsense up to 26.1.10. Affected by this vulnerability is an unknown functionality of the file filter_rule.volt of the component Firewall Rules/NAT Views. The manipulation resu
CVE-2026-58390 | OPNsense up to 26.1.10 Dashboard Widget OpenVPNClients.js common_name cross site scripting (WID-SEC-2026-2177)
A vulnerability was found in OPNsense up to 26.1.10. It has been classified as problematic. The impacted element is an unknown function of the file src/opnsense/www/js/widgets/OpenVPNClients.js of the component Dashboard Widget. This manipu
CVE-2026-57155 | OPNsense up to 26.1.10 GeoIP Importer geoip.py process_zip/process_gzip country_code path traversal (WID-SEC-2026-2177)
A vulnerability labeled as very critical has been found in OPNsense up to 26.1.10. This impacts the function process_zip/process_gzip of the file src/opnsense/scripts/filter/lib/alias/geoip.py of the component GeoIP Importer. Executing a ma
CVE-2026-119423 | OPNsense up to 26.7.7 Lockout lockout_handler username neutralization for logs (WID-SEC-2026-2177)
A vulnerability categorized as critical has been discovered in OPNsense up to 26.7.7. Affected is the function lockout_handler of the component Lockout Handler. Executing a manipulation of the argument Username can lead to improper output n
CVE-2026-119279 | MariaDB Connector/J up to 3.3.6/3.4.4/3.5.9 Connection out-of-bounds (Nessus ID 374243)
A vulnerability classified as problematic has been found in MariaDB Connector and J up to 3.3.6/3.4.4/3.5.9. This affects the function ReadableByteBuf.readLength/ReadableByteBuf.readIntLengthEncodedNotNull of the component Connection Handle
CVE-2026-119189 | Digitalbazaar Forge up to 1.4.0 pki.verifyCertificateChain certificate validation (Nessus ID 374242)
A vulnerability identified as problematic has been detected in Digitalbazaar Forge up to 1.4.0. This impacts the function pki.verifyCertificateChain. Performing a manipulation results in improper certificate validation. This vulnerability i
CVE-2026-119261 | Google Chrome up to 156.0.8078.73 Skia input validation (Nessus ID 374244)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component Skia. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CVE-2026-1
CVE-2026-115456 | Red Hat Enterprise Linux libstdc++ std::from_chars out-of-bounds (Nessus ID 374245)
A vulnerability categorized as critical has been discovered in Red Hat Enterprise Linux. Affected by this issue is the function std::from_chars of the component libstdc++. Executing a manipulation can lead to out-of-bounds read. This vulner
CVE-2026-119197 | pyasn1 up to 0.6.4 Binary Real Decoding RealPayloadDecoder.valueDecoder resource consumption (Nessus ID 374248)
A vulnerability was found in pyasn1 up to 0.6.4. It has been declared as problematic. This impacts the function RealPayloadDecoder.valueDecoder of the component Binary Real Decoding. Such manipulation leads to resource consumption. This vul
CVE-2026-119193 | sebastianbergmann PHPUnit up to 13.4.3 PHPT Code Coverage TestCase.php coverageFilesDirectory temp file (Nessus ID 374247)
A vulnerability classified as problematic was found in sebastianbergmann PHPUnit up to 13.4.3. This vulnerability affects the function TestCase::coverageFilesDirectory of the file src/Runner/Phpt/TestCase.php of the component PHPT Code Cove
CVE-2026-119205 | py-pdf pypdf up to 6.21.3 infinite loop (Nessus ID 374249)
A vulnerability, which was classified as problematic, has been found in py-pdf pypdf up to 6.21.3. The impacted element is an unknown function. The manipulation leads to infinite loop. This vulnerability is referenced as CVE-2026-119205. Re
CVE-2026-119278 | MariaDB Corporation MariaDB Connector/J up to 3.3.6/3.4.4 Caching Sha2 Password DriverManager.getConnection memory corruption (Nessus ID 374250)
A vulnerability categorized as problematic has been discovered in MariaDB Corporation MariaDB Connector and J up to 3.3.6/3.4.4. This vulnerability affects the function DriverManager.getConnection of the component Caching Sha2 Password. The
CVE-2026-111357 | Ivanti Connect Secure 22.8R2.4 Broker privileges management
A vulnerability marked as very critical has been reported in Ivanti Connect Secure 22.8R2.4. This impacts an unknown function of the component Broker. The manipulation leads to improper privilege management. This vulnerability is referenced
CVE-2026-119283 | authlib joserfc up to 1.7.4 Recipients Array joserfc.jwe joserfc.jwe.decrypt_json resource consumption (Nessus ID 374251)
A vulnerability, which was classified as problematic, was found in authlib joserfc up to 1.7.4. Affected by this vulnerability is the function joserfc.jwe.decrypt_json of the file joserfc.jwe of the component Recipients Array. Such manipula
CVE-2026-119280 | MariaDB Corporation MariaDB Connector/J up to 3.3.6/3.4.4/3.5.10 XA Recovery input validation (Nessus ID 374254)
A vulnerability described as problematic has been identified in MariaDB Corporation MariaDB Connector and J up to 3.3.6/3.4.4/3.5.10. The impacted element is the function MariaDbPoolConnection.recover/MariaDbPoolPinnedConnection.recover of
CVE-2026-119133 | Bytecode Alliance Wasmtime up to 48.0.5/49.0.2 VMContext layout memory corruption (Nessus ID 374255)
A vulnerability was found in Bytecode Alliance Wasmtime up to 48.0.5/49.0.2. It has been classified as problematic. The affected element is an unknown function of the component VMContext layout. Performing a manipulation results in memory c
CVE-2025-68219 | Linux Kernel up to 6.6.117/6.12.59/6.17.9 cifs smb3_cleanup_fs_context_contents double free (Nessus ID 299530 / WID-SEC-2025-2868)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.117/6.12.59/6.17.9. This affects the function smb3_cleanup_fs_context_contents of the component cifs. Such manipulation leads to double free. This vulner
CVE-2025-68183 | Linux Kernel up to 6.6.116/6.12.57/6.17.7 ima privilege escalation (Nessus ID 298928 / WID-SEC-2025-2868)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.116/6.12.57/6.17.7. Affected is an unknown function of the component ima. Such manipulation leads to privilege escalation. This vulnerability is traded as
CVE-2025-40311 | Linux Kernel up to 6.6.116/6.12.57/6.17.7 dma_alloc_coherent allocation of resources (EUVD-2025-201634 / Nessus ID 298897)
A vulnerability was found in Linux Kernel up to 6.6.116/6.12.57/6.17.7. It has been classified as critical. This issue affects the function dma_alloc_coherent. The manipulation leads to allocation of resources. This vulnerability is referen
CVE-2025-13204 | silentmatt expr-eval up to 2.0.2 prototype pollution (EUVD-2025-197614 / Nessus ID 281897)
A vulnerability was found in silentmatt expr-eval up to 2.0.2. It has been classified as critical. This affects an unknown function. Performing a manipulation results in improperly controlled modification of object prototype attributes. Thi
CVE-2026-119260 | Google Chrome up to 156.0.8078.73 Frames use after free (Nessus ID 374256)
A vulnerability was found in Google Chrome. It has been declared as critical. The impacted element is an unknown function of the component Frames. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-119260. T
CVE-2026-119262 | Google Chrome up to 156.0.8078.73 input validation (Nessus ID 374257)
A vulnerability categorized as critical has been discovered in Google Chrome. This impacts an unknown function. Executing a manipulation can lead to improper input validation. This vulnerability is registered as CVE-2026-119262. It is possi
CVE-2026-119207 | py-pdf pypdf up to 6.21.2 Nested Parser memory allocation (Nessus ID 374259)
A vulnerability was found in py-pdf pypdf up to 6.21.2. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Nested Parser. Executing a manipulation can lead to uncontrolled memory alloc
CVE-2026-62303 | pistacheio Pistache up to 0.4.26 Router Normalization src/server/router.cc sanitizeResource stack-based overflow (EUVD-2026-114262)
A vulnerability classified as problematic was found in pistacheio Pistache up to 0.4.26. This affects the function SegmentTreeNode::sanitizeResource of the file src/server/router.cc of the component Router Normalization. Such manipulation l
CVE-2026-62298 | mouse07410 asn1c up to 1.2.4 Decoding OPEN_TYPE_aper.c OPEN_TYPE_aper_get memb_ptr2 memory corruption (EUVD-2026-114330)
A vulnerability, which was classified as problematic, was found in mouse07410 asn1c up to 1.2.4. Affected is the function OPEN_TYPE_aper_get of the file OPEN_TYPE_aper.c of the component Decoding. Executing a manipulation of the argument me
CVE-2026-7003 | WIT SynApps Runtime up to 1.4.11 parameters.js hard-coded credentials (EUVD-2026-114263)
A vulnerability has been found in WIT SynApps Runtime up to 1.4.11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file parameters.js. The manipulation leads to hard-coded credentials. This vuln