🛡️ Sicherheitslücken (CVE) – Cybersecurity News & Diskussionsportal

Cybersecurity News & Diskussionsportal

⚡ tsecurity.de Intelligence

Alle (3.500.000) 🚨 0-Days & KEV 📺 Videos Podcasts 🐙 Tools 💬 Interaktion

Hersteller: Alle Hersteller Microsoft Linux / Kernel Apple Cisco Google Fortinet

Vektoren: Alle Vektoren Critical CVSS 9+ Threat PoC & Exploit Code ATT&CK 0-Day / CISA KEV Threat NIS-2 Meldepflicht Compliance Initial Access ATT&CK Privilege Escalation ATT&CK Auth Bypass ATT&CK Remote Code Execution Threat Ransomware & APT Threat

Aktionen:

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-82783 | Contec Programmable Remote I/O Coupler Unit CPSN-PCB271-S1-041 missing encryption (CNNVD-2026-98851012)

A vulnerability, which was classified as problematic, has been found in Contec Remote IO Coupler Unit CPSN-MCB271-*, O Coupler Unit CPSN-EOB471EI…

🛡️ CVE-2026-82783

vor 4 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-82431 | Apache Storm Nimbus authorization (CNNVD-2026-98874501)

A vulnerability, which was classified as critical, has been found in Apache Storm. This affects an unknown function of the component Nimbus.

🛡️ CVE-2026-82431

vor 4 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Exploit Development

Heap-Buffer-Überlauf im Discord-Backend

32768 × 32768 × 4 = 2^32 In 32-bit arithmetic: 0. That's how the size check in discord/lilliput computes its output buffer requirement.

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8770-1: SimpleSAMLphp vulnerabilities

It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML messages.

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) DEV Community

Before You Trust a Vulnerability Report, Check This Page First

A vulnerability report can look polished and still leave out the context you need to make a good decision.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) ComputerWeekly.com

Cisco users urged to patch email gateway flaw

Cisco warns defenders to patch a critical vulnerability in its Secure Email Gateway appliance that may be used by attackers to gain root privileges.

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) theregister.com

Cisco email security boxes can be rooted by... an email

Criminals are exploiting a critical Cisco Secure Email Gateway flaw that can turn a malicious email into root access.

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) SecurityWeek

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8769-1: phpseclib vulnerability

It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) CyberScoop

Cisco warns customers of actively exploited zero-day in email gateways

Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and…

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8768-1: Shibboleth vulnerability

Florian Stuhlmann discovered that Shibboleth incorrectly escaped input when using the ODBC storage plugin.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-73180 | Apache Tomcat up to 11.0.24 Session Expiration session expiration (EUVD-2026-66192 / Nessus ID 345835)

A vulnerability described as critical has been identified in Apache Tomcat up to 7.0.109/8.5.100/9.0.120/10.1.57/11.0.24.

🛡️ CVE-2026-73180

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-12548 | Red Hat libsoup HTTP Headers Parsing soup_headers_parse length out-of-bounds (Nessus ID 345832)

A vulnerability identified as critical has been detected in Red Hat libsoup.

🛡️ CVE-2026-12548

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-68763 | Apache Tomcat up to 11.0.24/10.1.57/9.0.120/8.5.100 HTTP/2 Backlog Tracking allocation of resources (EUVD-2026-66190 / Nessus ID 345835)

A vulnerability marked as problematic has been reported in Apache Tomcat up to 11.0.24/10.1.57/9.0.120/8.5.100.

🛡️ CVE-2026-68763

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-68525 | Apache Tomcat up to 11.0.24 Form Authentication improper authorization (EUVD-2026-66132 / Nessus ID 345835)

A vulnerability was found in Apache Tomcat up to 7.0.109/8.5.100/9.0.120/10.1.57/11.0.24. It has been declared as critical.

🛡️ CVE-2026-68525

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-84445 | gRPC-Go prior 1.82.2/1.83.2 xDS Routing Interceptor out-of-bounds (Nessus ID 345841)

A vulnerability classified as problematic was found in gRPC-Go. This issue affects some unknown processing of the component xDS Routing Interceptor.

🛡️ CVE-2026-84445

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-66422 | Apache Tomcat up to 11.0.24 Request.isUserInRole improper authorization (EUVD-2026-66131 / Nessus ID 345835)

A vulnerability was found in Apache Tomcat up to 7.0.109/8.5.100/9.0.120/10.1.57/11.0.24. It has been classified as critical.

🛡️ CVE-2026-66422

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8767-1: Snapcast vulnerability

It was discovered that Snapcast incorrectly handled crafted JSON-RPC requests.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-44017 | Simmeth Lieferantenmanager up to 5.5 /LMS/LM/#main user session (EUVD-2022-46980)

A vulnerability described as critical has been identified in Simmeth Lieferantenmanager up to 5.5.

🛡️ CVE-2022-44017

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-44011 | ClickHouse heap-based overflow (EUVD-2022-46974)

A vulnerability categorized as critical has been discovered in ClickHouse. This affects an unknown part.

🛡️ CVE-2022-44011

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-44010 | ClickHouse HTTP Endpoint heap-based overflow (EUVD-2022-46973)

A vulnerability classified as critical has been found in ClickHouse. The impacted element is an unknown function of the component HTTP Endpoint.

🛡️ CVE-2022-44010

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-44009 | StackStorm 3.7.0 Key-Value RBAC information disclosure (EUVD-2022-46972)

A vulnerability classified as problematic was found in StackStorm 3.7.0.

🛡️ CVE-2022-44009

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-44008 | BACKCLICK Professional 5.9.63 Back-End Tomcat Server information disclosure (SYSS-2022-037 / EUVD-2022-46971)

A vulnerability, which was classified as problematic, has been found in BACKCLICK Professional 5.9.63.

🛡️ CVE-2022-44008

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8766-1: Suricata-Update vulnerability

Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule…

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-9236 | Portabilis i-Educar up to 2.10 Tipos de usuàrio Page educar_tipo_usuario_lst.php nm_tipo/descrição sql injection (EUVD-2025-25381)

A vulnerability classified as critical was found in Portabilis i-Educar up to 2.10.

🛡️ CVE-2025-9236

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44957 | Linux Kernel up to 6.6.45/6.10.4 privcmd irqfd_wakeup deadlock (c2775ae4d922/49f2a5da6785/1c682593096a / Nessus ID 212724)

A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.45/6.10.4.

🛡️ CVE-2024-44957

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44959 | Linux Kernel up to 6.6.45/6.10.4 tracefs i_lru initialization (726f4c241e17/061da60716ce/0b6743bd60a5 / Nessus ID 212724)

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.45/6.10.4.

🛡️ CVE-2024-44959

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44954 | Linux Kernel up to 6.10.4 line6 race condition (Nessus ID 208245 / WID-SEC-2024-2057)

A vulnerability classified as problematic has been found in Linux Kernel up to 6.10.4.

🛡️ CVE-2024-44954

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44956 | Linux Kernel up to 6.10.4 preempt_fence_work_func deadlock (458bb83119df/3cd1585e5790 / Nessus ID 212724)

A vulnerability was found in Linux Kernel up to 6.10.4 and classified as critical. This vulnerability affects the function preempt_fence_work_func.

🛡️ CVE-2024-44956

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44955 | Linux Kernel up to 6.10.4 AMD Display is_dsc_need_re_compute null pointer dereference (39b217193729/fcf6a49d7992 / Nessus ID 234782)

This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

🛡️ CVE-2024-44955

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-44953 | Linux Kernel up to 6.10.4 scsi kworker/0 ufshcd_rpm_get_sync deadlock (f13f1858a28c/3911af778f20 / Nessus ID 212724)

A vulnerability described as critical has been identified in Linux Kernel up to 6.10.4.

🛡️ CVE-2024-44953

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Cyber Security News

CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are…

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) BleepingComputer

Hackers target WordPress sites via third-party WooCommerce plugin

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP…

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Cyber Security News

Japan’s Digital Agency Breach Exposes 240,000+ Users’ Personal Records to Hackers

Japan’s Digital Agency has confirmed a significant data breach affecting the Government Solution Service (GSS), a shared IT platform used across…

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8765-1: python-sql vulnerability

Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Sicherheitslücken (CVE) Ubuntu security notices

USN-8762-1: polkit vulnerability

It was discovered that polkit incorrectly handled cookie input.

🛡️ Security Fix

vor 5 Tagen 1 Min

Weiterlesen ↗

Weitere 36 Beiträge laden

Automatisches Endlos-Laden aktivieren

Seite 42 von 1.000 • Gesamt: 3.500.000 Artikel

🚀 Auf tsecurity.de entdecken

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

Sicherheitslücken (CVE)

Sicherheitslücken (CVE)

FCKGW: Ex-Microsoft-Entwickler enthüllt die wahre Geschichte hinter dem legendären Code

US-Modelle zu teuer? Federal Register setzte auf günstigeres KI-Modell aus China

I upgraded three Flutter apps to API 36. Here is what actually broke

I got tired of rebuilding the same Angular mobile app setup, so I built LaunchKit Mobile

Site-Wide Structured Data and Social Graph Integration

Exact Match Or Fuzzy Logic For OFAC? 1,400 Tests Changed My Mind.

What Makes You Trust an APK Download?

Good News For Backend And Devops Buddy

Securely Authenticate Users with the Telegram Login Widget in PHP and Yii2

Beginner Guide: What Is Linux Mint and Why It Is So Popular

Wie man eine Brandmauer einreißt & wie wir darüber reden - Rechte Mehrheiten im Europaparlament (DS2026)

StageOne Ventures gibt den Abschluss seines fünften Fonds in Höhe von 165 Millionen US ...

IT-Security Newsletter abonnieren

IT-Security Newsletter abmelden

tsecurity.de App

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

Community Radar & Live Chat

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

🔖 Gespeicherte Artikel

Heiß diskutierte Einreichungen