🛡️ Sicherheitslücken (CVE) – Cybersecurity News & Diskussionsportal

Cybersecurity News & Diskussionsportal

⚡ tsecurity.de Intelligence

448.573 Meldungen

LIVE …

Alle (448.573) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion

Sprache: Alle Sprachen Deutsch (de) English (en)

Gesucht hier: Überwachung 27.802 Android 11 14.493 Windows 10 13.455 CVE 32.762 Google Chrome 13.394 Malware 60.238 VPN 50.559 Exploit 24.385 RCE 13.854 [local] 14.968

Hersteller: Alle Hersteller Microsoft Linux / Kernel Apple Cisco Google Fortinet

Vektoren: Alle Vektoren Critical CVSS 9+ Threat PoC & Exploit Code ATT&CK 0-Day / CISA KEV Threat NIS-2 Meldepflicht Compliance Initial Access ATT&CK Privilege Escalation ATT&CK Auth Bypass ATT&CK Remote Code Execution Threat

Aktionen: RSS Feed CTI SENTINEL: LIVE

448.573 Meldungen

Heute

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-35168 | devcode-it openstamanager up to 2.10.1 Aggiornamenti sql injection (GHSA-2fr7-cc4f-wh98)

A vulnerability labeled as critical has been found in devcode-it openstamanager up to 2.10.1.

🛡️ CVE-2026-35168 High 8.8 TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-5338 | Tenda G103 1.0.0.5 Setting system.lua action_set_system_settings lanIp command injection

A vulnerability was found in Tenda G103 1.0.0.5. It has been declared as critical.

🛡️ CVE-2026-5338 Medium 5.1 TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-5334 | itsourcecode Online Enrollment System 1.0 Parameter index.php?view=edit&id=3 deptid sql injection

A vulnerability was found in itsourcecode Online Enrollment System 1.0. It has been classified as critical.

🛡️ CVE-2026-5334 Medium 6.9 TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-5333 | DefaultFuction Content-Management-System 1.0 /admin/tools.php host command injection

A vulnerability was found in DefaultFuction Content-Management-System 1.0 and classified as critical.

🛡️ CVE-2026-5333 Medium 6.9 TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-39738 | Linux Kernel up to 6.17-rc1 /fs/btrfs/extent-tree.c num_bytes privilege escalation (EUVD-2025-28973 / Nessus ID 264733)

A vulnerability described as problematic has been identified in Linux Kernel up to 6.17-rc1.

🛡️ CVE-2025-39738 High 7.3 TA0004 · T1068

vor 3 Std. 1 Min

Sicherheitslücken (CVE)

Security Weekly - A CRA Resource: CVE Remediation Is Getting Too Slow

CVE remediation compliance was once a useful way to measure vulnerability management. The timeline made…

vor 3 Std. 26 Views

Sicherheitslücken (CVE) BSI Warn- und Informationsd…

[NEU] [hoch] Cisco Secure Firewall Threat Defense und Cisco ASA: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Firewall Threat Defense und Cisco ASA (Adaptive Security Appliance)…

🛡️ Security Fix TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) BSI Warn- und Informationsd…

[NEU] [mittel] Norton Antivirus: Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in Norton Antivirus, Avast Antivirus und AVG Anti-Virus ausnutzen, um Daten zu manipulieren und seine…

🛡️ Security Fix TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) BSI Warn- und Informationsd…

[NEU] [niedrig] MLflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MLflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

🛡️ Security Fix TA0001 · T1190

vor 3 Std. 1 Min

Sicherheitslücken (CVE) BleepingComputer

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation…

TA0004 · T1068 Cloud & IT-Enterprise

vor 3 Std. 1 Min

Sicherheitslücken (CVE) AppleInsider News

Up to 350,000 Macs exposed by a forgotten Popcorn Time updater

An abandoned Popcorn Time updater left up to 350,000 Macs vulnerable to remote takeover, giving potential attackers a way to execute malicious code…

vor 4 Std. 1 Min

Sicherheitslücken (CVE) SecurityWeek

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation.

TA0004 · T1068 Cloud & IT-Enterprise

vor 4 Std. 1 Min

Sicherheitslücken (CVE) Cyber Security News

Hackers Exploit Critical Cisco SD-WAN 0-Day Flaw to Deploy KeyDrift Malware and Steal Encryption Keys

A state-linked hacking group used a maximum-severity Cisco SD-WAN zero-day flaw to break into network controllers and install a custom malware…

KEV ACTIVE EPSS 89.3% TA0001 · T1190

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-117864 | Mozilla Firefox up to 153.5/158 Form Manager privileges management (WID-SEC-2026-4216)

A vulnerability was found in Mozilla Firefox up to 153.5/158. It has been declared as critical.

🛡️ CVE-2026-117864

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-110247 | Mozilla Thunderbird up to 157 libmime heap-based overflow (WID-SEC-2026-4216)

A vulnerability classified as critical has been found in Mozilla Thunderbird up to 157.

🛡️ CVE-2026-110247 High 8.4

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-118681 | go-chi up to 5.4.x Middleware middleware.SupressNotFound improper authentication (Nessus ID 373448)

A vulnerability was found in go-chi chi up to 5.4.x and classified as problematic. Impacted is the function middleware.

🛡️ CVE-2026-118681

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-107814 | MariaDB up to 13.0.1 Service Account privileges management (Nessus ID 373441 / WID-SEC-2026-3856)

A vulnerability has been found in MariaDB up to 13.0.1 and classified as problematic.

🛡️ CVE-2026-107814 High 8.4

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-105042 | Apache Qpid Proton AMQP Message Parsing recursion (Nessus ID 373449)

A vulnerability has been found in Apache Qpid Proton and classified as problematic.

🛡️ CVE-2026-105042

vor 4 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-118688 | Bytecode Alliance Wasmtime up to 36.0.17/48.0.5/49.0.2 wasmtime-wasi sandbox (Nessus ID 373450)

A vulnerability described as problematic has been identified in Bytecode Alliance Wasmtime up to 36.0.17/48.0.5/49.0.2.

🛡️ CVE-2026-118688

vor 4 Std. 1 Min

Sicherheitslücken (CVE) Help Net Security

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw.

🛡️ CVE-2026-101767 Critical 9.8 TA0001 · T1190

vor 4 Std. 1 Min

Sicherheitslücken (CVE) Cyber Security News

Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense

China-linked Volt Typhoon hackers have used a covert network called Silent Train to hide zero-day attacks against U.S.

TA0001 · T1190 Gov & Defense

vor 5 Std. 1 Min

Sicherheitslücken (CVE) Computer Bild

Darum kann Ihr alter Fernseher zum Sicherheitsrisiko werden

Der Fernseher läuft noch tadellos, bekommt aber womöglich längst keine Sicherheitsupdates mehr.

TA0001 · T1190

vor 5 Std. 1 Min

Sicherheitslücken (CVE) Cyber Security News

China-Linked Hackers Exploit VMware ESXi Zero-Day to Target U.S. Law Firms

China-linked hackers exploited a VMware ESXi zero-day vulnerability during intrusions targeting U.S. organizations, including law firms.

🛡️ Security Fix TA0001 · T1190 Cloud & IT-Enterprise

vor 5 Std. 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2024-13362 | WP Notification Bell Plugin on WordPress Parameter url cross site scripting

A vulnerability was found in WP Notification Bell Plugin on WordPress. It has been rated as problematic.

🛡️ CVE-2024-13362 Medium 6.1

vor 5 Std. 1 Min

Weitere 36 Beiträge laden

Automatisches Endlos-Laden aktivieren

Seite 2 von 1.000 • Gesamt: 448.573 Artikel

Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.

🚀 Auf tsecurity.de entdecken

🕒 tsecurity.de Such-Trends & Chronologie

Sicherheitslücken (CVE)

SonicWall SMA1000: Kritische SSRF-Lücke & RCEs behoben - Security-Insider

Sicherheitslücke in TightVNC Viewer 2.8.88, RCE ohne CVE geschlossen

CVE-2026-21381 | Qualcomm Snapdragon Auto up to XRV9209 Connection buffer over-read

CVE-2026-33752 | curl_cffi prior 0.15.0 redirect

CVE-2026-34148 | fedify vocab-runtime up to 1.9.5/1.10.4/2.0.7/2.1.0 Outbound Request resource consumption (GHSA-gm9m-gwc4-hwgp)

CVE-2026-34211 | nyariv SandboxJS up to 0.8.35 restOfExp recursion (GHSA-8pfc-jjgw-6g26)

Filter & Sortierung

Heute

CVE-2026-35168 | devcode-it openstamanager up to 2.10.1 Aggiornamenti sql injection (GHSA-2fr7-cc4f-wh98)

CVE-2026-5338 | Tenda G103 1.0.0.5 Setting system.lua action_set_system_settings lanIp command injection

CVE-2026-5334 | itsourcecode Online Enrollment System 1.0 Parameter index.php?view=edit&id=3 deptid sql injection

CVE-2026-5333 | DefaultFuction Content-Management-System 1.0 /admin/tools.php host command injection

CVE-2025-39738 | Linux Kernel up to 6.17-rc1 /fs/btrfs/extent-tree.c num_bytes privilege escalation (EUVD-2025-28973 / Nessus ID 264733)

Security Weekly - A CRA Resource: CVE Remediation Is Getting Too Slow

[NEU] [hoch] Cisco Secure Firewall Threat Defense und Cisco ASA: Schwachstelle ermöglicht Denial of Service

[NEU] [mittel] Norton Antivirus: Schwachstelle ermöglicht Privilegieneskalation

[NEU] [niedrig] MLflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

Up to 350,000 Macs exposed by a forgotten Popcorn Time updater

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

Hackers Exploit Critical Cisco SD-WAN 0-Day Flaw to Deploy KeyDrift Malware and Steal Encryption Keys

CVE-2026-117864 | Mozilla Firefox up to 153.5/158 Form Manager privileges management (WID-SEC-2026-4216)

CVE-2026-110247 | Mozilla Thunderbird up to 157 libmime heap-based overflow (WID-SEC-2026-4216)

CVE-2026-118681 | go-chi up to 5.4.x Middleware middleware.SupressNotFound improper authentication (Nessus ID 373448)

CVE-2026-107814 | MariaDB up to 13.0.1 Service Account privileges management (Nessus ID 373441 / WID-SEC-2026-3856)

CVE-2026-105042 | Apache Qpid Proton AMQP Message Parsing recursion (Nessus ID 373449)

CVE-2026-118688 | Bytecode Alliance Wasmtime up to 36.0.17/48.0.5/49.0.2 wasmtime-wasi sandbox (Nessus ID 373450)

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense

Darum kann Ihr alter Fernseher zum Sicherheitsrisiko werden

China-Linked Hackers Exploit VMware ESXi Zero-Day to Target U.S. Law Firms

CVE-2024-13362 | WP Notification Bell Plugin on WordPress Parameter url cross site scripting

Sicherheitslücken (CVE)

Heute

ANALYST WORKBENCH

Wie funktioniert die Newsletter Anmeldung?

Wie funktioniert die Newsletter Abmeldung?