Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 755 | 0,2 % |
| ≥50 % | 3.336 | 0,9 % |
| ≥10 % | 22.172 | 5,7 % |
| <10 % | 362.847 | 93,3 % |
CVE-2026-116576 | sebhildebrandt systeminformation up to 5.33.15 Service Processing lib/processes.js services service os command injection (EUVD-2026-110317)
A vulnerability has been found in sebhildebrandt systeminformation up to 5.33.15 and classified as critical. Affected by this issue is the function services of the file lib/processes.js of the component Service Processing. This manipulation
CVE-2021-4187 | vim use after free (EUVD-2021-34047 / Nessus ID 233548)
A vulnerability labeled as critical has been found in vim. This affects an unknown part. The manipulation results in use after free. This vulnerability is cataloged as CVE-2021-4187. The attack may be launched remotely. There is no exploit
CVE-2021-4204 | Linux Kernel eBPF out-of-bounds write (EUVD-2021-34062 / Nessus ID 211841)
A vulnerability classified as critical was found in Linux Kernel. Impacted is an unknown function of the component eBPF. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2021-4204. The attack can be lau
CVE-2021-4217 | unzip Unicode String null pointer dereference (EUVD-2021-34075 / Nessus ID 234300)
A vulnerability has been found in unzip and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Unicode String Handler. The manipulation leads to null pointer dereference. This vulnerabilit
CVE-2021-42322 | Microsoft Visual Studio Code privileges management (EUVD-2021-29297)
A vulnerability marked as problematic has been reported in Microsoft Visual Studio Code. This issue affects some unknown processing. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2021-42322. Th
CVE-2026-70388 | RT-Labs AB SOEM up to 2.0.0 allocation of resources (EUVD-2026-109659)
A vulnerability was found in RT-Labs AB SOEM up to 2.0.0. It has been rated as critical. This affects an unknown function. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-70388. Remote exploit
CVE-2021-43809 | Bundler up to 2.2.32 Gemfile argument injection (GHSA-fj7f-vq84-fh43 / EUVD-2021-2513)
A vulnerability has been found in Bundler up to 2.2.32 and classified as critical. This affects an unknown part of the component Gemfile Handler. Performing a manipulation results in argument injection. This vulnerability is reported as CVE
CVE-2021-43877 | Microsoft ASP.NET Core/Visual Studio privilege escalation (EUVD-2021-30739)
A vulnerability classified as critical has been found in Microsoft ASP.NET Core and Visual Studio. This vulnerability affects unknown code. This manipulation causes privilege escalation. This vulnerability is tracked as CVE-2021-43877. The
CVE-2024-7532 | Google Chrome up to 127.0.6533.88 ANGLE out-of-bounds (ID 350528 / Nessus ID 374924)
A vulnerability labeled as critical has been found in Google Chrome. This issue affects some unknown processing of the component ANGLE. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-7532. The attack
CVE-2023-4860 | Google Chrome Skia Remote Code Execution (Nessus ID 374924)
A vulnerability described as critical has been identified in Google Chrome. This impacts an unknown function of the component Skia. Such manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2023-4860
CVE-2026-93787 | Linux Kernel up to 6.12.110/6.18.52 smb cifs_filldir out-of-bounds (Nessus ID 374938)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.110/6.18.52. Impacted is the function cifs_filldir of the component smb. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely i
CVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938)
A vulnerability was found in Linux Kernel up to 7.1.4. It has been rated as problematic. Affected is the function netlink_net_capable of the component tipc. The manipulation leads to permission issues. This vulnerability is uniquely identif
CVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2-rc3. This vulnerability affects the function core_scsi3_emulate_pro_register_and_move of the component SCSI Target Core. The manipulation leads
CVE-2026-53615 | util-linux up to 2.41.3 libblkid dos.c parse_dos_extended integer overflow (Nessus ID 374940)
A vulnerability identified as critical has been detected in util-linux up to 2.41.3. This affects the function parse_dos_extended of the file libblkid/src/partitions/dos.c of the component libblkid. The manipulation leads to integer overflo
CVE-2026-20551 | MediaTek MT2737/MT6813/MT6980D/MT6982/MT6986/MT6988/MT6990 gnss out-of-bounds write (ALPS11309305 / EUVD-2026-115016)
A vulnerability was found in MediaTek MT2737, MT6813, MT6980D, MT6982, MT6986, MT6988 and MT6990. It has been classified as problematic. Affected by this issue is some unknown functionality of the component gnss. The manipulation leads to o
CVE-2026-116122 | NocoDB up to 2026.07.0 Sign-in Endpoint AuthService.validateUser salt information disclosure (Issue 14687 / EUVD-2026-109615)
A vulnerability, which was classified as problematic, has been found in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in i
CVE-2026-107030 | CraftXbox YubiClip XOR fork 1.0.1 OTP-clipboard permission (EUVD-2026-113182)
A vulnerability was found in CraftXbox YubiClip XOR fork 1.0.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component OTP-clipboard. Performing a manipulation results in permission issues.
CVE-2026-20554 | MediaTek MT8893 Modem memory corruption (MOLY01911177 / EUVD-2026-115019)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT687
CVE-2026-120214 | Fastify http-proxy up to 11.6.2 path traversal (EUVD-2026-115115)
A vulnerability was found in Fastify http-proxy up to 11.6.2 and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-120214. It is po
CVE-2026-106803 | Kamailio 6.1.3/6.1.4 ims_registrar_pcscf process_contact alias stack-based overflow (EUVD-2026-115344)
A vulnerability identified as critical has been detected in Kamailio 6.1.3/6.1.4. Affected by this vulnerability is the function process_contact of the component ims_registrar_pcscf. The manipulation of the argument alias leads to stack-bas
CVE-2026-20566 | MediaTek MT8791 prior MOLY01923663/ALPS11315955 out-of-bounds write (MOLY01923663/ALPS11315955 / EUVD-2026-115031)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-20550 | MediaTek MT6990 gnss out-of-bounds write (ALPS11309816 / EUVD-2026-115015)
A vulnerability has been found in MediaTek MT2735, MT2737, MT6880, MT6890, MT6980D, MT6982, MT6986, MT6988 and MT6990 and classified as problematic. Affected is an unknown function of the component gnss. Performing a manipulation results in
CVE-2026-18800 | WSO2 API Manager Event Publisher Output Adapter information disclosure (EUVD-2026-115114)
A vulnerability, which was classified as problematic, has been found in WSO2 API Manager, API Control Plane, API Manager, Traffic Manager, Universal Gateway, Identity Server, Identity Server as Key Manager, Open Banking IAM, Open Banking AM
CVE-2026-105769 | chainguard-forks kaniko up to 1.25.19 Azure Container Registry Credential Helper incorrect regex (EUVD-2026-115331)
A vulnerability was found in chainguard-forks kaniko up to 1.25.19. It has been rated as critical. This impacts an unknown function of the component Azure Container Registry Credential Helper. Performing a manipulation results in incorrect
CVE-2026-20526 | MediaTek MT8893 out-of-bounds write (MOLY01898195 / EUVD-2026-92201)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-116223 | icret EasyImage up to 2.8.7 app/del.php hash privileges management (Issue 283 / EUVD-2026-109623)
A vulnerability classified as critical was found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. T
CVE-2026-88811 | SUSE Rancher up to 2.15.2 Meta Proxy access control (EUVD-2026-115330)
A vulnerability categorized as critical has been discovered in SUSE Rancher up to 2.11.18/2.12.14/2.13.10/2.14.6/2.15.2. Affected is an unknown function of the component Meta Proxy. Executing a manipulation can lead to improper access contr
CVE-2026-119085 – Template injection in the publishing component of Virtual Engineering Workbench
Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision t
CVE-2026-99234 | Linux Kernel up to 7.3.0 tracing event_hist_trigger_parse use after free (EUVD-2026-115276)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been classified as critical. This issue affects the function event_hist_trigger_parse of the component tracing. The manipulation leads to use after free. This vulnerability is un
CVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been declared as very critical. Impacted is the function event_hist_trigger_parse/hist_unreg_all of the component Histograms. The manipulation of the argument event_call/ref resu
CVE-2026-99236 | Linux Kernel up to 7.3.0 tracing predicate_parse out-of-bounds (EUVD-2026-115278)
A vulnerability classified as critical has been found in Linux Kernel up to 7.3.0. This impacts the function predicate_parse of the component tracing. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-202
CVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.3.0. The impacted element is the function event_hist_trigger_free of the component Tracing. Such manipulation leads to use after free. This vulnerabili
CVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.3.0. Affected is the function __l2cap_chan_add of the component L2CAP. The manipulation leads to time-of-check time-of-use. This vulnerability is listed as CV
CVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.59/7.2.13/7.3.0. This affects the function trace_module_record of the component Tracing. Performing a manipulation results in improper locking. This vu
CVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.59/7.2.13/7.3.0. This impacts the function update_last_data_if_empty of the component tracing. Executing a manipulation can lead to race condition. This vuln
CVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.13. Affected by this issue is the function ntfs_filemap_page_mkwrite of the component NTFS. This manipulation causes race condition. This vulnerability is
CVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.59/7.2.13/7.3.0. The affected element is the function damos_commit_quota_goal of the file mm/damon/core.c of the component Damon Core. Such manipulation of the
CVE-2026-99242 | Linux Kernel up to 7.2.13 ntfs ntfs_attr_fallocate information disclosure (EUVD-2026-115284)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.2.13. Impacted is the function ntfs_attr_fallocate of the component ntfs. This manipulation causes information disclosure. This vulnerability is tracked as
CVE-2026-62989 | Shopper Labs up to 2.9.x Variants Livewire Variants.php callTableAction/callTableBulkAction privileges management (EUVD-2026-114510)
A vulnerability labeled as problematic has been found in Shopper Labs Shopper up to 2.9.x. Affected by this vulnerability is the function callTableAction/callTableBulkAction of the file packages/admin/src/Livewire/Components/Products/Form/V
CVE-2026-119329 | Immich App up to 2.x Map Service map.service.ts information disclosure (EUVD-2026-114376)
A vulnerability classified as problematic was found in Immich App Immich up to 2.x. Affected by this vulnerability is an unknown functionality of the file server/src/services/map.service.ts of the component Map Service. Executing a manipula
CVE-2026-53614 | Linux util-linux mount privileges management (Nessus ID 374940)
A vulnerability was found in Linux util-linux. It has been rated as very critical. Affected is the function mount. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-53614. The attack can o
CVE-2026-53612 | Linux util-linux Mount mount toctou (Nessus ID 374940)
A vulnerability categorized as very critical has been discovered in Linux util-linux. Affected by this vulnerability is the function mount of the component Mount. The manipulation results in time-of-check time-of-use. This vulnerability is
CVE-2026-53613 | Linux util-linux mount toctou (Nessus ID 374940)
A vulnerability identified as very critical has been detected in Linux util-linux. Affected by this issue is the function mount. This manipulation causes time-of-check time-of-use. This vulnerability is tracked as CVE-2026-53613. The attack
CVE-2026-97688 | urllib3 up to 2.7.x Deflate decoder HTTPResponse.stream/HTTPResponse.read_chunked infinite loop (Nessus ID 374955)
A vulnerability was found in urllib3 up to 2.7.x. It has been declared as problematic. Impacted is the function HTTPResponse.stream/HTTPResponse.read_chunked of the component Deflate decoder. The manipulation results in infinite loop. This
CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax in SQL identifier construction could all
CVE-2022-48348 | Huawei Smart Phone MediaProvider improper authorization (EUVD-2022-51047)
A vulnerability was found in Huawei Smart Phone. It has been declared as critical. Impacted is an unknown function of the component MediaProvider Module. Such manipulation leads to improper authorization. This vulnerability is traded as CVE
CVE-2022-48347 | Huawei Smart Phone MediaProvider permission (EUVD-2022-51046)
A vulnerability has been found in Huawei Smart Phone and classified as critical. This affects an unknown part of the component MediaProvider Module. The manipulation leads to permission issues. This vulnerability is documented as CVE-2022-4
CVE-2022-48346 | Huawei Smart Phone HwContacts information disclosure (EUVD-2022-51045)
A vulnerability, which was classified as problematic, has been found in Huawei Smart Phone. Affected by this vulnerability is an unknown functionality of the component HwContacts Module. Performing a manipulation results in information disc
CVE-2022-48341 | ThingsBoard 3.4.1 Dashboard scopes access control (ID 238543 / EUVD-2022-51041)
A vulnerability, which was classified as critical, has been found in ThingsBoard 3.4.1. This affects an unknown part of the component Dashboard. The manipulation of the argument scopes leads to improper access controls. This vulnerability i
CVE-2022-48336 | Google Nexus 6 Widevine Trustlet PRDiagParseAndStoreData buffer overflow (EUVD-2022-51036)
A vulnerability marked as critical has been reported in Google Nexus 6. This affects the function PRDiagParseAndStoreData of the component Widevine Trustlet. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-202
CVE-2022-48335 | Google Nexus 6 Widevine Trustlet PRDiagVerifyProvisioning buffer overflow (EUVD-2022-51035)
A vulnerability described as critical has been identified in Google Nexus 6. This impacts the function PRDiagVerifyProvisioning of the component Widevine Trustlet. Such manipulation leads to buffer overflow. This vulnerability is listed as
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaw
Trust Me Bro Then Websites Went Offline (The php2shell story) | Threat Wire
YouTube VideoHow did one mysterious Hacker News post saying “Trust me bro” trigger a global cybersecurity panic and send major websites offline? In this episode of Threat Wire, we break down the PHP2Shell vulnerabilities, the race to uncove
Grype-Gate für Keycloak: 14 Schritte, 60 Min [2026] - shattered.io
Mehr Hintergrund zur Einordnung von Sicherheitsmeldungen und zu weiteren Praxisanleitungen bietet die Rubrik Cybersicherheit in diesem Magazin. Weiterlesen
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS