Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 760 | 0,2 % |
| ≥50 % | 3.388 | 0,9 % |
| ≥10 % | 22.544 | 5,7 % |
| <10 % | 365.602 | 93,2 % |
CVE-2026-98364 | Linux Kernel xfrm net/ipv6/xfrm6_policy.c xfrm6_fill_dst use after free (Nessus ID 375175)
A vulnerability was found in Linux Kernel and classified as very critical. This issue affects the function xfrm6_fill_dst of the file net/ipv6/xfrm6_policy.c of the component xfrm. The manipulation results in use after free. This vulnerabil
CVE-2026-17183 | Grafana up to 13.1.1 Unified Alerting authorization (Nessus ID 375182)
A vulnerability was found in Grafana up to 13.1.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component Unified Alerting. The manipulation leads to incorrect authorization. This vulnerabi
CVE-2026-119627 | Gitea up to 28.2.x Web Profile And RSS/Atom Feed Routes access control (WID-SEC-2026-4281)
A vulnerability identified as problematic has been detected in Gitea up to 28.2.x. Affected by this vulnerability is an unknown functionality of the component Web Profile And RSS/Atom Feed Routes. Performing a manipulation results in improp
CVE-2026-119625 | Gitea up to 28.2.x Feed privileges management (WID-SEC-2026-4281)
A vulnerability categorized as problematic has been discovered in Gitea up to 28.2.x. This affects an unknown part of the component Feed. Executing a manipulation can lead to improper privilege management. This vulnerability is registered a
CVE-2026-118697 | JetBrains IntelliJ IDEA/Toolbox App certificate validation (WID-SEC-2026-4280)
A vulnerability labeled as problematic has been found in JetBrains IntelliJ IDEA and Toolbox App. This vulnerability affects unknown code. Such manipulation leads to improper certificate validation. This vulnerability is listed as CVE-2026-
CVE-2026-119533 | Gitea up to 28.2.x Project Boards information disclosure (WID-SEC-2026-4281)
A vulnerability classified as problematic has been found in Gitea up to 28.2.x. The impacted element is an unknown function of the component Project Boards. Performing a manipulation results in information disclosure. This vulnerability is
CVE-2026-119441 | Gitea up to 28.2.x Routes access control (WID-SEC-2026-4281)
A vulnerability was found in Gitea up to 28.2.x. It has been classified as problematic. Affected is an unknown function of the component Routes. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-11
CVE-2026-118504 | Gitea up to 28.2.x REST API privileges management (WID-SEC-2026-4281)
A vulnerability classified as problematic was found in Gitea up to 28.2.x. This affects an unknown function of the component REST API. Executing a manipulation can lead to improper privilege management. This vulnerability is handled as CVE-
CVE-2026-118395 | Gitea up to 28.2.x authorization (WID-SEC-2026-4281)
A vulnerability was found in Gitea up to 28.2.x. It has been rated as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026
CVE-2022-48424 | Linux Kernel up to 6.1.2 Attribute Name fs/ntfs3/inode.c attr out-of-bounds write (EUVD-2022-51120 / Nessus ID 248401)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.2. The impacted element is an unknown function of the file fs/ntfs3/inode.c of the component Attribute Name Handler. Executing a manipulation of the argument attr ca
CVE-2017-2601 | Jenkins up to 2.32.1/2.43 names/descriptions cross site scripting (EUVD-2022-5111 / Nessus ID 96939)
A vulnerability classified as problematic has been found in Jenkins up to 2.32.1/2.43. This vulnerability affects unknown code. This manipulation of the argument names/descriptions as part of Parameter causes cross site scripting. This vuln
CVE-2022-48423 | Linux Kernel up to 6.1.2 Attribute Name fs/ntfs3/record.c mi_enum_attr out-of-bounds write (EUVD-2022-51119)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.2. The affected element is the function mi_enum_attr of the file fs/ntfs3/record.c of the component Attribute Name Handler. Performing a manipulation of the arg
CVE-2026-107024 | Archive Share 2 Archive Today Clipboard url permission (EUVD-2026-113179)
A vulnerability was found in Archive Share 2 Archive Today. It has been rated as problematic. Impacted is an unknown function of the component Clipboard. The manipulation of the argument url leads to permission issues. This vulnerability is
CVE-2026-120830 | Red Hat Enterprise Linux ICMP icmp_forward_error out-of-bounds (EUVD-2026-115651)
A vulnerability described as problematic has been identified in Red Hat Enterprise Linux, libslirp and OpenShift Container Platform. This issue affects the function icmp_forward_error of the component ICMP. Such manipulation leads to out-of
CVE-2026-107029 | rubenalfon Pile 1.1.3 permission (EUVD-2026-113183)
A vulnerability categorized as critical has been discovered in rubenalfon Pile 1.1.3. This issue affects some unknown processing. The manipulation results in permission issues. This vulnerability is known as CVE-2026-107029. It is possible
CVE-2026-107035 | Basov MBasov 3400 Page object/Page.java permission (EUVD-2026-113171)
A vulnerability was found in Basov MBasov 3400. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file object/Page.java of the component Page. Executing a manipulation can lead to permiss
CVE-2026-105770 | octo-sts Octo STS up to 0.11.1 TrustPolicy TrustPolicy.CheckToken information disclosure (EUVD-2026-115653)
A vulnerability classified as problematic was found in octo-sts Octo STS up to 0.11.1. The affected element is the function TrustPolicy.CheckToken of the component TrustPolicy. Executing a manipulation can lead to information disclosure. Th
CVE-2026-107441 | Zyxel GS1900 Series Switches up to 2.90(AAHK.2)C0 CGI out-of-bounds write (EUVD-2026-115654)
A vulnerability, which was classified as very critical, has been found in Zyxel GS1900 Series Switches up to 2.90(AAHK.2)C0. The impacted element is an unknown function of the component CGI. The manipulation leads to out-of-bounds write. Th
CVE-2026-111464 | emrevona WP Fastest Cache Plugin up to 1.5.3 on WordPress Caching wp-activate.php missing encryption (EUVD-2026-115657)
A vulnerability was found in emrevona WP Fastest Cache Plugin up to 1.5.3 on WordPress and classified as problematic. Affected is an unknown function of the file wp-activate.php of the component Caching. Such manipulation leads to missing e
CVE-2021-2351 | Oracle Communications MetaSolv Solution 6.3.1 JDBC risky encryption
A vulnerability identified as critical has been detected in Oracle Communications MetaSolv Solution 6.3.1. This impacts an unknown function of the component JDBC. The manipulation leads to risky cryptographic algorithm. This vulnerability i
CVE-2021-21353 | pug up to 2.0.2/3.0.0 on npm Template injection
A vulnerability labeled as problematic has been found in pug up to 2.0.2/3.0.0 on npm. Affected by this issue is some unknown functionality of the component Template Handler. Such manipulation leads to injection. This vulnerability is refer
CVE-2020-8231 | libcURL up to 7.71.1 Connection use after free (Nessus ID 236591)
A vulnerability was found in libcURL up to 7.71.1. It has been declared as critical. This issue affects some unknown processing of the component Connection Handler. Such manipulation leads to use after free. This vulnerability is traded as
CVE-2020-8169 | curl up to 7.70.0 DNS Server information disclosure
A vulnerability was found in curl up to 7.70.0 and classified as problematic. This affects an unknown part of the component DNS Server Handler. The manipulation results in information disclosure. This vulnerability is reported as CVE-2020-8
CVE-2026-109969 | Red Hat Enterprise Linux/OpenShift Container Platform afunix-socket-unlock permission (EUVD-2026-100954)
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as problematic. Affected by this issue is some unknown functionality of the component afunix-socket-unlock. The manipulation leads to
CVE-2026-76955 | Zyxel NWA110AX up to 7.12(ABTG.0)C0 buffer overflow (EUVD-2026-115655)
A vulnerability has been found in Zyxel NWA110AX up to 7.12(ABTG.0)C0 and classified as very critical. This impacts an unknown function. This manipulation causes buffer overflow. This vulnerability appears as CVE-2026-76955. The attack may
CVE-2026-120831 | Red Hat Enterprise Linux/OpenShift Container Platform libslirp if_output denial of service (EUVD-2026-115656)
A vulnerability, which was classified as critical, was found in Red Hat Enterprise Linux and OpenShift Container Platform. This affects the function if_output of the component libslirp. The manipulation results in denial of service. This vu
CVE-2026-102276 | juliangruber brace-expansion up to 1.1.18/2.1.4/3.0.6/5.0.9 Comma Parts parseCommaParts denial of service (Nessus ID 375193)
A vulnerability, which was classified as problematic, was found in juliangruber brace-expansion up to 1.1.18/2.1.4/3.0.6/5.0.9. Impacted is the function parseCommaParts of the component Comma Parts. Executing a manipulation can lead to deni
CVE-2026-78134 | strongSwan up to 6.0.7 eap-ttls/eap-peap access control (Nessus ID 375198)
A vulnerability, which was classified as very critical, was found in strongSwan up to 6.0.7. The affected element is an unknown function of the component eap-ttls/eap-peap. Such manipulation leads to improper access controls. This vulnerabi
CVE-2026-78132 | strongSwan up to 5.1.3/6.0.7 Attribute Certificate Parser infinite loop (Nessus ID 375198)
A vulnerability was found in strongSwan up to 5.1.3/6.0.7 and classified as critical. This affects an unknown function of the component Attribute Certificate Parser. Executing a manipulation can lead to infinite loop. This vulnerability is
CVE-2026-78131 | strongSwan up to 6.0.7 Attribute Certificate Parser memory leak (Nessus ID 375198)
A vulnerability has been found in strongSwan up to 6.0.7 and classified as critical. The impacted element is an unknown function of the component Attribute Certificate Parser. Performing a manipulation results in memory leak. This vulnerabi
CVE-2026-78130 | strongSwan up to 6.0.7 Attribute Certificate Parser null pointer dereference (Nessus ID 375198)
A vulnerability classified as critical has been found in strongSwan up to 6.0.7. This vulnerability affects unknown code of the component Attribute Certificate Parser. The manipulation leads to null pointer dereference. This vulnerability i
CVE-2026-78129 | strongSwan up to 6.0.x infinite loop (Nessus ID 375198)
A vulnerability marked as critical has been reported in strongSwan up to 6.0.x. Affected by this issue is some unknown functionality. Performing a manipulation results in infinite loop. This vulnerability is known as CVE-2026-78129. Remote
CVE-2020-8203 | Oracle Communications Session Border Controller Cz8.4 Routing allocation of resources (Nessus ID 297644)
A vulnerability identified as critical has been detected in Oracle Communications Session Border Controller Cz8.4. Affected by this vulnerability is an unknown functionality of the component Routing. This manipulation causes allocation of r
CVE-2019-20454 | PCRE up to 10.33 pcre2_jit_compile.c do_extuni_no_utf Pattern memory corruption (Bug 78338 / Nessus ID 236606)
A vulnerability identified as problematic has been detected in PCRE up to 10.33. Affected is the function do_extuni_no_utf of the file pcre2_jit_compile.c. The manipulation with the input \X as part of Pattern leads to memory corruption. Th
CVE-2019-14970 | VideoLAN VLC Media Player 3.0.7.1 MKV File mkv::event_thread_t memory corruption (USN-4131-1)
A vulnerability was found in VideoLAN VLC Media Player 3.0.7.1. It has been classified as critical. This affects the function mkv::event_thread_t of the component MKV File Handler. The manipulation leads to memory corruption. This vulnerabi
CVE-2019-14778 | VideoLAN VLC Media Player 3.0.7.1 virtual_segment.cpp seek use after free (USN-4131-1)
A vulnerability was found in VideoLAN VLC Media Player 3.0.7.1 and classified as critical. The impacted element is the function mkv::virtual_segment_c::seek of the file demux/mkv/virtual_segment.cpp. Executing a manipulation can lead to use
CVE-2026-118394 | Gitea up to 28.2.x OAuth2 Userinfo Endpoint /login/oauth/userinfo improper authorization (WID-SEC-2026-4281)
A vulnerability classified as problematic was found in Gitea up to 28.2.x. Impacted is an unknown function of the file /login/oauth/userinfo of the component OAuth2 Userinfo Endpoint. Such manipulation leads to improper authorization. This
CVE-2026-117685 | Gitea up to 28.2.x Cross-Repository Blob Mount privileges management (WID-SEC-2026-4281)
A vulnerability, which was classified as problematic, has been found in Gitea up to 28.2.x. The affected element is an unknown function of the component Cross-Repository Blob Mount. Performing a manipulation results in improper privilege ma
CVE-2026-117677 | Gitea up to 28.2.x Helm Chart Chart.yaml resource consumption (WID-SEC-2026-4281)
A vulnerability classified as problematic has been found in Gitea up to 28.2.x. This issue affects some unknown processing of the file Chart.yaml of the component Helm Chart. This manipulation causes resource consumption. This vulnerability
CVE-2026-117649 | Gitea up to 28.2.x Issue Timeline API information disclosure (WID-SEC-2026-4281)
A vulnerability described as problematic has been identified in Gitea up to 28.2.x. The affected element is an unknown function of the component Issue Timeline API. Such manipulation leads to information disclosure. This vulnerability is tr
CVE-2026-117646 | Gitea up to 28.2.x User Profile privileges management (WID-SEC-2026-4281)
A vulnerability marked as problematic has been reported in Gitea up to 28.2.x. This affects an unknown part of the component User Profile. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-117
CVE-2026-117635 | Gitea up to 28.2.x Admin API /api/v1/admin privileges management (WID-SEC-2026-4281)
A vulnerability has been found in Gitea up to 28.2.x and classified as critical. This affects an unknown function of the file /api/v1/admin of the component Admin API. The manipulation leads to improper privilege management. This vulnerabil
CVE-2019-7364 | Autodesk Autodesk Advanced Steel 2017/2018/2019/2020 DLL Loader uncontrolled search path
A vulnerability has been found in Autodesk Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP and AutoCAD Plant 3D 2017/2018/2019/2020 and classi
CVE-2019-1552 | OpenSSL up to 1.0.2s/1.1.0k/1.1.1c on Windows mingw OPENSSLDIR certificate validation (K94041354 / Nessus ID 211827)
A vulnerability was found in OpenSSL up to 1.0.2s/1.1.0k/1.1.1c on Windows. It has been declared as critical. This affects an unknown function of the component mingw. The manipulation of the argument OPENSSLDIR with the input C:/usr/local a
CVE-2019-15291 | Linux Kernel up to 5.2.9 USB Device flexcop-usb.c flexcop_usb_probe null pointer dereference (USN-4254-1)
A vulnerability described as problematic has been identified in Linux Kernel up to 5.2.9. Affected by this vulnerability is the function flexcop_usb_probe of the file drivers/media/usb/b2c2/flexcop-usb.c of the component USB Device Handler.
CVE-2019-14777 | VideoLAN VLC Media Player 3.0.7.1 demux/mkv/mkv.cpp use after free (USN-4131-1)
A vulnerability has been found in VideoLAN VLC Media Player 3.0.7.1 and classified as critical. The affected element is an unknown function of the file demux/mkv/mkv.cpp. Performing a manipulation results in use after free. This vulnerabili
CVE-2019-14776 | VideoLAN VLC Media Player 3.0.7.1 MKV File demux/asf/asf.c DemuxInit out-of-bounds (USN-4131-1)
A vulnerability, which was classified as critical, was found in VideoLAN VLC Media Player 3.0.7.1. Impacted is the function DemuxInit of the file demux/asf/asf.c of the component MKV File Handler. Such manipulation leads to out-of-bounds re
CVE-2019-14535 | VideoLAN VLC Media Player 3.0.7.1 WMV File demux/asf/asf.c SeekIndex divide by zero (USN-4131-1)
A vulnerability, which was classified as problematic, has been found in VideoLAN VLC Media Player 3.0.7.1. This issue affects the function SeekIndex of the file demux/asf/asf.c of the component WMV File Handler. This manipulation causes div
CVE-2019-14534 | VideoLAN VLC Media Player 3.0.7.1 demux/asf/asf.c SeekPercent null pointer dereference (USN-4131-1)
A vulnerability classified as problematic was found in VideoLAN VLC Media Player 3.0.7.1. This vulnerability affects the function SeekPercent of the file demux/asf/asf.c. The manipulation results in null pointer dereference. This vulnerabil
CVE-2019-14533 | VideoLAN VLC Media Player 3.0.7.1 demux/asf/asf.c use after free (USN-4131-1)
A vulnerability classified as critical has been found in VideoLAN VLC Media Player 3.0.7.1. This affects an unknown part of the file demux/asf/asf.c. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE
CVE-2019-14498 | VideoLAN VLC Media Player 3.0.7.1 CAF File demux/caf.c divide by zero (USN-4131-1)
A vulnerability described as problematic has been identified in VideoLAN VLC Media Player 3.0.7.1. Affected by this issue is some unknown functionality of the file demux/caf.c of the component CAF File Handler. Executing a manipulation can
CVE-2019-14438 | VideoLAN VLC Media Player 3.0.7.1 OGG File modules/demux/xiph.h xiph_PackHeaders out-of-bounds (USN-4131-1)
A vulnerability marked as critical has been reported in VideoLAN VLC Media Player 3.0.7.1. Affected by this vulnerability is the function xiph_PackHeaders of the file modules/demux/xiph.h of the component OGG File Handler. Performing a mani
CVE-2019-14437 | VideoLAN VLC Media Player 3.0.7.1 OGG File modules/demux/xiph.h xiph_SplitHeaders use after free (USN-4131-1 / Nessus ID 255092)
A vulnerability labeled as critical has been found in VideoLAN VLC Media Player 3.0.7.1. Affected is the function xiph_SplitHeaders of the file modules/demux/xiph.h of the component OGG File Handler. Such manipulation leads to use after fre
Alpine Linux incident shows why GitLab updates need Ruby verification
Alpine Linux had upgraded to GitLab 19.3.6, but its environment remained vulnerable to CVE-2026-97229. Its container image used standard Ruby, where the vulnerability resided. The incident shows why an application version alone cannot estab
CVE-2022-48422 | ONLYOFFICE Docs up to 7.3 on Linux libgcc_s.so.1 untrusted search path (EUVD-2022-51118)
A vulnerability was found in ONLYOFFICE Docs up to 7.3 on Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the file libgcc_s.so.1. Performing a manipulation results in untrusted search pa
CVE-2022-48364 | Mastodon 3.5.0/3.5.1/3.5.2 Status Update approve_appeal_service.rb undo_mark_statuses_as_sensitive information disclosure (EUVD-2022-51063)
A vulnerability marked as problematic has been reported in Mastodon 3.5.0/3.5.1/3.5.2. This affects the function undo_mark_statuses_as_sensitive of the file app/services/approve_appeal_service.rb of the component Status Update Handler. This
CVE-2022-48363 | MPD prior 0.23.8 PipeWire Output Plugin null pointer dereference (EUVD-2022-51062)
A vulnerability was found in MPD. It has been rated as problematic. Impacted is an unknown function of the component PipeWire Output Plugin. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-
CVE-2019-12874 | VideoLAN VLC Media Player up to 3.0.7 MKV util.cpp double free (USN-4074-1 / BID-108882)
A vulnerability labeled as critical has been found in VideoLAN VLC Media Player up to 3.0.7. Impacted is an unknown function in the library zlib_decompress_extra of the file modules/demux/mkv/util.cpp of the component MKV Handler. Executing
CVE-2019-10072 | Oracle Siebel Apps - Marketing 20.7 Mktg/Campaign Mgmt denial of service (BID-108874)
A vulnerability has been found in Oracle Siebel Apps - Marketing 20.7 and classified as critical. Impacted is an unknown function of the component Mktg/Campaign Mgmt. The manipulation leads to denial of service. This vulnerability is refere
CVE-2022-48362 | Zoho ManageEngine Desktop Central/Desktop Central MSP prior 10.1.2137.2 AgentLogUploadServlet computerName path traversal (EUVD-2022-51061)
A vulnerability, which was classified as critical, has been found in Zoho ManageEngine Desktop Central and Desktop Central MSP. The impacted element is an unknown function of the component AgentLogUploadServlet. The manipulation of the argu