Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.223 | 0,9 % |
| ≥10 % | 22.115 | 6,0 % |
| <10 % | 342.373 | 92,9 % |
CVE-2022-46162 | discourse-bbcode CSS injection (GHSA-8c87-xpqv-c7mp / EUVD-2022-48993)
A vulnerability labeled as critical has been found in discourse-bbcode. The affected element is an unknown function of the component CSS Handler. Such manipulation leads to injection. This vulnerability is documented as CVE-2022-46162. The
CVE-2019-5460 | VideoLAN VLC Media Player up to 3.0.5 double free
A vulnerability has been found in VideoLAN VLC Media Player up to 3.0.5 and classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes double free. This vulnerability is handled as CVE-20
CVE-2019-5459 | VideoLAN VLC Media Player up to 3.0.6 out-of-bounds
A vulnerability, which was classified as critical, was found in VideoLAN VLC Media Player up to 3.0.6. Affected is an unknown function. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2019-5459. Attacking
CVE-2019-1563 | OpenSSL up to 1.0.2s/1.1.0k/1.1.1d Bleichenbacher missing encryption (K97324400 / Nessus ID 211827)
A vulnerability classified as critical has been found in OpenSSL up to 1.0.2s/1.1.0k/1.1.1d. This affects an unknown part. The manipulation leads to missing encryption of sensitive data (Bleichenbacher). This vulnerability is traded as CVE-
CVE-2019-14540 | Oracle Primavera Unifier up to 19.12 deserialization (Nessus ID 236697)
A vulnerability described as very critical has been identified in Oracle Primavera Unifier up to 19.12. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to deserialization. This vulnerability is
CVE-2019-14439 | FasterXML jackson-databind up to 2.9.9.1 Default Typing information disclosure (RHSA-2019:3200)
A vulnerability identified as problematic has been detected in FasterXML jackson-databind up to 2.9.9.1. The impacted element is an unknown function of the component Default Typing. The manipulation leads to information disclosure. This vul
CVE-2019-14379 | Oracle Primavera Unifier 16.1/16.2/17.12/18.8 jackson-databind prototype pollution
A vulnerability identified as very critical has been detected in Oracle Primavera Unifier 16.1/16.2/17.12/18.8. This issue affects some unknown processing of the component jackson-databind. Performing a manipulation results in improperly co
CVE-2019-14250 | GNU libiberty simple-object-elf.c simple_object_elf_match shstrndx integer overflow (USN-4326-1 / Nessus ID 236727)
A vulnerability was found in GNU libiberty. It has been classified as critical. Affected by this issue is the function simple_object_elf_match of the file simple-object-elf.c. This manipulation of the argument shstrndx causes integer overfl
CVE-2019-13602 | VideoLAN VLC Media Player up to 3.0.7.1 modules/demux/mp4/mp4.c MP4_EIA608_Convert MP4 File integer underflow (USN-4074-1 / BID-109158)
A vulnerability was found in VideoLAN VLC Media Player up to 3.0.7.1. It has been rated as critical. This issue affects the function MP4_EIA608_Convert of the file modules/demux/mp4/mp4.c. Performing a manipulation as part of MP4 File resul
CVE-2019-12972 | GNU binutils 2.32 libbfd bfd.c _bfd_doprnt out-of-bounds (USN-4336-1 / BID-108903)
A vulnerability was found in GNU binutils 2.32 and classified as critical. Affected by this issue is the function _bfd_doprnt of the file bfd.c of the component libbfd. The manipulation results in out-of-bounds read. This vulnerability is i
CVE-2019-12384 | FasterXML jackson-databind up to 2.9.8 logback-core deserialization (RHSA-2019:1820 / Nessus ID 236697)
A vulnerability was found in FasterXML jackson-databind up to 2.9.8. It has been rated as critical. This vulnerability affects the function logback-core. This manipulation causes deserialization. This vulnerability appears as CVE-2019-12384
CVE-2019-12086 | Oracle GoldenGate Internal Framework information disclosure (Nessus ID 236644 / ID 176941)
A vulnerability categorized as critical has been discovered in Oracle GoldenGate. This affects an unknown part of the component Internal Framework. Executing a manipulation can lead to information disclosure. This vulnerability is handled a
CVE-2018-16156 | Fujitsu PaperStream IP 1.42.0.5685 FJTWSVIC Service UninOldIS.dll ChangeUninstallString PATH untrusted search path (ID 160832 / EDB-49382)
A vulnerability classified as critical was found in Fujitsu PaperStream IP 1.42.0.5685. This affects the function ChangeUninstallString in the library UninOldIS.dll of the component FJTWSVIC Service. Such manipulation of the argument PATH a
CVE-2018-11307 | FasterXML jackson-databind up to 2.7.9.3/2.8.11.1/2.9.5 iBatis gadget Exfiltration deserialization (RHSA-2019:0782 / ID 176909)
A vulnerability was found in FasterXML jackson-databind up to 2.7.9.3/2.8.11.1/2.9.5. It has been classified as critical. Affected is the function gadget of the component iBatis. Performing a manipulation results in deserialization (Exfiltr
Atlassian CVE-2026-21589 Exploited Hours After Public Disclosure
Attackers started scanning the systems vulnerable to the Atlassian flaw several hours after the researchers published the technical details and proof-of-concept code. Assigned the identifier CVE-2026-21589, the vulnerability impacts sever