Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.559 | 0,9 % |
| ≥10 % | 13.142 | 3,2 % |
| <10 % | 396.069 | 95,8 % |
Bits und so #1032 (Tigersuppe)
MacBook Pro PROLED Hands-On / iPhone Duo & iPad mini OLED / Siri AI & Skills / Kernel RCE & *sshhole / Danfoss & Blutkonserven / iPhone Classic Emulation / Phasenumtastung / Web Push / Unwatched für YouTube und Podcasts / Pr
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...] Weiterlesen
CVE-2023-1101 | SonicWALL SonicOS SSL VPN excessive authentication (SNWLID-2023-0005 / EUVD-2023-23388)
A vulnerability described as problematic has been identified in SonicWALL SonicOS. This issue affects some unknown processing of the component SSL VPN. Such manipulation leads to improper restriction of excessive authentication attempts. Th
CVE-2022-22278 | SonicWALL SonicOS 403 Content Filtering Service allocation of resources (SNWLID-2022-0004)
A vulnerability was found in SonicWALL SonicOS 403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Content Filtering Service. The manipulation results in allocation of resources. Th
CVE-2022-22277 | SonicWALL SonicOS SNMP Service information disclosure (SNWLID-2022-0004)
A vulnerability was found in SonicWALL SonicOS. It has been classified as problematic. This issue affects some unknown processing of the component SNMP Service. Performing a manipulation results in information disclosure. This vulnerability
CVE-2022-22276 | SonicWALL SonicOS SNMP Service information disclosure (SNWLID-2022-0004)
A vulnerability was found in SonicWALL SonicOS and classified as problematic. This vulnerability affects unknown code of the component SNMP Service. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2022
CVE-2022-22275 | SonicWALL SonicOS TCP Communication Channel resource consumption (SNWLID-2022-0004)
A vulnerability has been found in SonicWALL SonicOS and classified as problematic. This affects an unknown part of the component TCP Communication Channel. This manipulation causes resource consumption. This vulnerability is tracked as CVE-
CVE-2022-22274 | SonicWALL SonicOS HTTP Request stack-based overflow (SNWLID-2022-0003)
A vulnerability described as critical has been identified in SonicWALL SonicOS. Impacted is an unknown function of the component HTTP Request Handler. The manipulation results in stack-based buffer overflow. This vulnerability is identified
CVE-2021-20048 | SonicWALL SonicOS 5/6/7 HTTP Response Header stack-based overflow (SNWLID-2021-0028)
A vulnerability was found in SonicWALL SonicOS 5/6/7. It has been classified as critical. The impacted element is an unknown function of the component HTTP Response Header Handler. The manipulation leads to stack-based buffer overflow. This
CVE-2021-20046 | SonicWALL SonicOS 5/6/7 HTTP Content-Length stack-based overflow (SNWLID-2021-0027)
A vulnerability was found in SonicWALL SonicOS 5/6/7 and classified as critical. The affected element is an unknown function of the component HTTP Content-Length Handler. Executing a manipulation can lead to stack-based buffer overflow. The
CVE-2021-20027 | SonicWALL SonicOS buffer overflow (SNWLID-2021-0016)
A vulnerability, which was classified as critical, was found in SonicWALL SonicOS. Affected by this issue is some unknown functionality. Executing a manipulation can lead to buffer overflow. This vulnerability is handled as CVE-2021-20027.
CVE-2026-123792 | SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 Inline/Parser denial of service (Nessus ID 377464)
A vulnerability classified as problematic was found in SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10. Affected by this vulnerability is an unknown functionality of the component Inline/Parser. The manipulation results in denial of se
CVE-2026-122053 | Sensiolabs Symfony up to 8.1.10 Serializer ObjectNormalizer isAllowedAttribute privileges management (Nessus ID 377465)
A vulnerability has been found in Sensiolabs Symfony up to 5.4.55/6.4.49/7.0.x/7.4.22/8.1.10 and classified as critical. This issue affects the function ObjectNormalizer::isAllowedAttribute of the component Serializer ObjectNormalizer. The
CVE-2026-112913 | tox-dev filelock up to 4.2.0 ReadWriteLock _read_write.py _connect privileges management (Nessus ID 377466)
A vulnerability categorized as problematic has been discovered in tox-dev filelock up to 4.2.0. Affected by this issue is the function _connect of the file src/filelock/_read_write.py of the component ReadWriteLock. Such manipulation leads
CVE-2026-122329 | libsdl-org SDL_mixer up to 3.2.4 AIFF Decoder src/decoder_aiff.c FetchXLaw stack-based overflow (Nessus ID 377467)
A vulnerability has been found in libsdl-org SDL_mixer up to 3.2.4 and classified as problematic. This affects the function FetchXLaw of the file src/decoder_aiff.c of the component AIFF Decoder. The manipulation leads to stack-based buffer
CVE-2026-97371 | ntop ntopng up to 6.7.260720 reloadBlacklist src/IpAddress.cpp ndpi_get_custom_category_match stack-based overflow (Nessus ID 377468)
A vulnerability was found in ntop ntopng up to 6.7.260720 and classified as problematic. The impacted element is the function ndpi_get_custom_category_match of the file src/IpAddress.cpp of the component reloadBlacklist. The manipulation re
CVE-2026-100082 | Linux Kernel up to 7.3.2 xen-blkback use after free (Nessus ID 377469)
A vulnerability was found in Linux Kernel up to 7.3.2. It has been classified as very critical. This issue affects some unknown processing of the component xen-blkback. This manipulation causes use after free. This vulnerability appears as
Sicherheitslücke in Microsoft Paint: Update kommt nicht überall an - it-daily.net
Verwirrung um die Versionsnummer. Paint wird über den Microsoft Store aktualisiert, nicht über Windows Update. Zunächst nannte Microsoft im Security ... Weiterlesen
Sicherheitslücke in Microsoft Paint: Update kommt nicht überall an
Microsoft hat eine Codeausführungslücke in Paint geschlossen. Die korrigierte Version 11.2609.401.0 kommt aber teils nicht über den Microsoft Store an. In der Windows-App Paint steckt eine Sicherheitslücke, über die Angreifer aus der Ferne
CVE-2026-43251 | Linux Kernel up to 6.19.5 input_mapping denial of service
A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.5. Affected by this vulnerability is the function input_mapping. Executing a manipulation can lead to denial of service. The identification of this vulnerability
CVE-2026-43243 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 AMD Display get_phyd32clk_src denial of service
A vulnerability was found in Linux Kernel up to 6.12.74/6.18.15/6.19.5. It has been rated as critical. This affects the function get_phyd32clk_src of the component AMD Display. This manipulation causes denial of service. This vulnerability