Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.559 | 0,9 % |
| ≥10 % | 13.139 | 3,2 % |
| <10 % | 396.072 | 95,8 % |
CVE-2026-18893 | IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3 privileges management (EUVD-2026-119705)
A vulnerability identified as problematic has been detected in IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3. This affects an unknown part. This manipulation causes improper privilege management. This vulnerability appears
CVE-2026-18546 | IBM CockroachDB PostgreSQL for VPC up to 26.2.3/25.4.12/25.2.20 server-side request forgery (EUVD-2026-119704)
A vulnerability was found in IBM CockroachDB PostgreSQL for VPC up to 26.2.3/25.4.12/25.2.20. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to server-side request forgery.
CVE-2026-2477 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data Backend Authorization access control (EUVD-2026-119708)
A vulnerability labeled as problematic has been found in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. This vulnerability affects unknown code of the component Backend Authorization. Such manipulation leads to
CVE-2026-19307 | IBM Sterling B2B Integrator/Sterling File Gateway up to 6.2.1.2_1/6.2.2.1_1 improper authorization (EUVD-2026-119707)
A vulnerability marked as problematic has been reported in IBM Sterling B2B Integrator and Sterling File Gateway up to 6.2.1.2_1/6.2.2.1_1. This issue affects some unknown processing. Performing a manipulation results in improper authorizat
CVE-2026-19133 | IBM Storage TS4500 Library up to 1.12.0.3 improper authorization (EUVD-2026-119706)
A vulnerability classified as very critical was found in IBM Storage TS4500 Library up to 1.12.0.3. The impacted element is an unknown function. The manipulation results in improper authorization. This vulnerability was named CVE-2026-19133
CVE-2026-2700 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data privileges management (EUVD-2026-119709)
A vulnerability classified as problematic has been found in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. The affected element is an unknown function. The manipulation leads to improper privilege management. Th
CVE-2025-0166 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data information disclosure (EUVD-2025-211277)
A vulnerability identified as problematic has been detected in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. This impacts an unknown function. Performing a manipulation results in information disclosure. This v
CVE-2024-41786 | IBM Engineering Requirements Management DOORS Next 7.1/7.2 information disclosure (EUVD-2024-55842)
A vulnerability was found in IBM Engineering Requirements Management DOORS Next 7.1/7.2. It has been rated as problematic. The impacted element is an unknown function. This manipulation causes information disclosure. This vulnerability is h
CVE-2025-36075 | IBM Safer Payments up to 6.8.0.00 information disclosure (EUVD-2025-211279)
A vulnerability was found in IBM Safer Payments up to 6.4.2.11/6.5.0.09/6.6.0.07/6.7.0.03/6.8.0.00. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to information disclosure. This vulnerability
CVE-2025-1837 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data privileges management (EUVD-2025-211278)
A vulnerability described as critical has been identified in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. Affected by this issue is some unknown functionality. The manipulation results in improper privilege ma
CVE-2026-109899 | Melapress Role Editor Plugin up to 1.3.0 on WordPress authorization (EUVD-2026-119612)
A vulnerability categorized as critical has been discovered in Melapress Role Editor Plugin up to 1.3.0 on WordPress. This affects an unknown function. Such manipulation leads to missing authorization. This vulnerability is uniquely identif
CVE-2026-3684 | IBM Cloud Pak for Data System permission (EUVD-2026-119710)
A vulnerability described as problematic has been identified in IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through 11.3.1.2 Interim Fix 002. Impacted is an unknown function. Executing a manipulation can lead to permission issues
CVE-2026-99273 | Linux Kernel up to 6.18.60/7.3.1 ksmbd get_file_stream_info buffer overflow (Nessus ID 377532)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.60/7.3.1. Impacted is the function get_file_stream_info of the component ksmbd. The manipulation results in buffer overflow. This vulnerability is cataloged
CVE-2026-99282 | Linux Kernel up to 6.18.60/7.3.1 sch_teql net/sched/sch_teql.c teql_master_xmit use after free (Nessus ID 377533)
A vulnerability was found in Linux Kernel up to 6.18.60/7.3.1. It has been rated as very critical. This affects the function teql_master_xmit of the file net/sched/sch_teql.c of the component sch_teql. Performing a manipulation results in u
CVE-2026-116630 | openjs undici up to 7.30.1/8.12.3 Redirect improper authorization (Nessus ID 377534)
A vulnerability was found in openjs undici up to 7.30.1/8.12.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Redirect. Executing a manipulation can lead to improper authorization. This
CVE-2026-99275 | Linux Kernel SMB Client smb2_check_message/decode_ntlmssp_challenge SecurityBufferOffset/SecurityBufferLength out-of-bounds (Nessus ID 377535)
A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected by this vulnerability is the function smb2_check_message/decode_ntlmssp_challenge of the component SMB Client. The manipulation of the argument Securi
CVE-2026-99279 | Linux Kernel up to 7.3.1 ksmbd denial of service (Nessus ID 377536)
A vulnerability has been found in Linux Kernel up to 7.3.1 and classified as very critical. This impacts an unknown function of the component ksmbd. The manipulation leads to denial of service. This vulnerability is uniquely identified as C
CVE-2026-99281 | Linux Kernel up to 6.18.60/7.3.1 tun privileges management (Nessus ID 377537)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.60/7.3.1. This vulnerability affects unknown code of the component tun. Executing a manipulation can lead to improper privilege management. This vul
CVE-2026-114134 | Python Software Foundation Black pyproject.toml code injection (Nessus ID 377538)
A vulnerability identified as critical has been detected in Python Software Foundation Black. The affected element is an unknown function of the file pyproject.toml. Performing a manipulation results in code injection. This vulnerability wa
CVE-2026-99280 | Linux Kernel up to 7.3.1 ksmbd proc_remove race condition (Nessus ID 377540)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.3.1. This affects the function proc_remove of the component ksmbd. Performing a manipulation results in race condition. This vulnerability is reported as CVE
CVE-2026-99274 | Linux Kernel up to 6.18.60/7.3.1 SMB Client smb3_fiemap out-of-bounds (Nessus ID 377539)
A vulnerability was found in Linux Kernel up to 6.18.60/7.3.1 and classified as problematic. Affected is the function smb3_fiemap of the component SMB Client. The manipulation results in out-of-bounds read. This vulnerability was named CVE-
CVE-2026-99272 | Linux Kernel up to 7.3.1 smb SMB2_read DataOffset/DataLength out-of-bounds (Nessus ID 377541)
A vulnerability identified as critical has been detected in Linux Kernel up to 7.3.1. This issue affects the function SMB2_read of the component smb. The manipulation of the argument DataOffset/DataLength leads to out-of-bounds read. This v
CVE-2026-104267 | randombit Botan up to 3.12.x Scrypt implementation heap-based overflow (Nessus ID 377542)
A vulnerability was found in randombit Botan up to 3.12.x. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Scrypt implementation. This manipulation causes heap-based buffer ove
CVE-2026-123339 | Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 RouterListener onKernelFinishRequest input validation (Nessus ID 377543)
A vulnerability was found in Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10. It has been rated as problematic. This impacts the function RouterListener::onKernelFinishRequest of the component RouterListener. This manipulation causes i
CVE-2026-124317 | Libexpat up to 2.10.0 xmltok.c unknown_toUtf8/unknown_toUtf16 out-of-bounds (Nessus ID 377546)
A vulnerability described as critical has been identified in Libexpat up to 2.10.0. Affected is the function unknown_toUtf8/unknown_toUtf16 of the file xmltok.c. Executing a manipulation can lead to out-of-bounds read. This vulnerability is
Linux MPTCP Inventory: Turning a 3.1 Million Product Match into a Review Queue
Linux MPTCP Inventory: Turning a 3.1 Million Product Match into a Review Queue A broad search result can create more work than clarity. ZoomEye returned 3,138,477 matches for product="Linux" while researching CVE-2026-98438, and t
SonicWall Patches Exploited VPN Authentication Flaw
SonicWall has released security updates addressing a high severity vulnerability in SonicOS that could allow attackers to bypass SAML authentication and its associated multifactor authentication requirements. Tracked as CVE-2026-19868, th
IT Security News Hourly Summary 2026-11-08 18h : 7 posts
7 posts published in the last hour 16:04Iris Ohyama data cloud breach exposes info of 7.7 million customers 16:03Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th) 16:03Data Sovereignty Is Essential for India’s Digital Infrast
CVE-2026-31765 | Linux Kernel up to 6.12.80/6.18.21/6.19.11 amdgpu null pointer dereference
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.80/6.18.21/6.19.11. This affects an unknown function of the component amdgpu. Executing a manipulation can lead to null pointer dereference. This vulnerabi
CVE-2026-31661 | Linux Kernel up to 6.19.12 wifi dma_free_coherent allocation of resources
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.12. Affected is the function dma_free_coherent of the component wifi. This manipulation causes allocation of resources. The identification of this
Barracuda Patches Two Security Flaws That Could Let Attackers Take Over Email Security Gateways
Experts have shown how two vulnerabilities in Barracuda's Email Security Gateway can be chained to execute arbitrary commands with root privileges without requiring an attacker to log in. The vulnerabilities, tracked as CVE-2026-116606
CVE-2026-39810 | Fortinet FortiClientEMS up to 7.4.1/7.4.5 hard-coded key (FG-IR-26-107)
A vulnerability, which was classified as problematic, was found in Fortinet FortiClientEMS up to 7.4.1/7.4.5. Affected by this issue is some unknown functionality. Such manipulation leads to use of hard-coded cryptographic key . This vulner
CVE-2026-124498 | Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72 dummy_launcher.jsp REDIRECT_URL cross site scripting
A vulnerability was found in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. It has been declared as problematic. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipulation of t
CVE-2025-63622 | code-projects Online Complaint Site 1.0 subcategory.php category sql injection
A vulnerability described as critical has been identified in code-projects Online Complaint Site 1.0. This affects an unknown function of the file /cms/admin/subcategory.php. The manipulation of the argument Category results in sql injectio
CVE-2025-61429 | NCR Atleos Terminal Manager ConfigApp 3.4.0 privileges management
A vulnerability was found in NCR Atleos Terminal Manager ConfigApp 3.4.0. It has been rated as critical. This impacts an unknown function. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2025-614
CVE-2025-61161 | Evope Collector 1.1.6.9.0 Evope.Service.exe uncontrolled search path
A vulnerability described as problematic has been identified in Evope Collector 1.1.6.9.0. Impacted is an unknown function in the library wtsapi32.dll of the file Evope.Service.exe. Executing a manipulation can lead to uncontrolled search p
CVE-2025-61105 | FRRouting FRR up to 10.4.1 OSPF Packet ospf_ext.c show_vty_link_info null pointer dereference (ID 19471 / Nessus ID 271823)
A vulnerability classified as problematic has been found in FRRouting FRR up to 10.4.1. Affected is the function show_vty_link_info of the file ospf_ext.c of the component OSPF Packet Handler. This manipulation causes null pointer dereferen
CVE-2025-61102 | FRRouting FRR up to 10.4.1 OSPF Packet ospf_ext.c show_vty_ext_link_adj_sid null pointer dereference (ID 19471 / Nessus ID 271824)
A vulnerability classified as problematic was found in FRRouting FRR up to 10.4.1. Affected by this vulnerability is the function show_vty_ext_link_adj_sid of the file ospf_ext.c of the component OSPF Packet Handler. Such manipulation leads
CVE-2025-61101 | FRRouting FRR up to 10.4.1 OSPF Packet ospf_ext.c show_vty_ext_link_rmt_itf_addr null pointer dereference (ID 19471 / Nessus ID 271817)
A vulnerability described as problematic has been identified in FRRouting FRR up to 10.4.1. This impacts the function show_vty_ext_link_rmt_itf_addr of the file ospf_ext.c of the component OSPF Packet Handler. The manipulation results in nu
CVE-2025-60805 | BESSystem BES Application Server up to 9.5.x bes-web.xml information disclosure
A vulnerability marked as problematic has been reported in BESSystem BES Application Server up to 9.5.x. This affects an unknown function of the file bes-web.xml. Performing a manipulation results in information disclosure. This vulnerabili
CVE-2025-60800 | jshERP GET Request /jshERP-boot/user/info access control
A vulnerability was found in jshERP. It has been rated as critical. This issue affects some unknown processing of the file /jshERP-boot/user/info of the component GET Request Handler. The manipulation leads to improper access controls. This
CVE-2025-60354 | blog-vue-springboot improper authorization
A vulnerability categorized as critical has been discovered in blog-vue-springboot. Impacted is an unknown function. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-2025-60354. The attack must orig
CVE-2026-124502 | yungifez Skuul School Management System up to 2.6.3 Delete GraduationController.php resetGraduation student authorization
A vulnerability labeled as problematic has been found in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationCo
CVE-2022-4191 | Google Chrome up to 107.0.5304.121 Sign-In use after free (EUVD-2022-51552)
A vulnerability was found in Google Chrome and classified as problematic. The impacted element is an unknown function of the component Sign-In. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-202
CVE-2022-4190 | Google Chrome up to 107.0.5304.121 Directory input validation (EUVD-2022-51551)
A vulnerability has been found in Google Chrome and classified as problematic. The affected element is an unknown function of the component Directory. Performing a manipulation results in improper input validation. This vulnerability is cat
CVE-2022-4189 | Google Chrome up to 107.0.5304.121 DevTools privilege escalation (EUVD-2022-51550)
A vulnerability, which was classified as problematic, was found in Google Chrome. Impacted is an unknown function of the component DevTools. Such manipulation leads to privilege escalation. This vulnerability is listed as CVE-2022-4189. The
CVE-2022-4188 | Google Chrome up to 107.0.5304.121 CORS cross-domain policy (EUVD-2022-51549)
A vulnerability, which was classified as critical, has been found in Google Chrome. This issue affects some unknown processing of the component CORS. This manipulation causes permissive cross-domain policy with untrusted domains. This vulne
CVE-2022-4187 | Google Chrome up to 107.0.5304.121 DevTools Remote Code Execution (EUVD-2022-51548)
A vulnerability classified as critical was found in Google Chrome. This vulnerability affects unknown code of the component DevTools. The manipulation results in Remote Code Execution. This vulnerability is identified as CVE-2022-4187. The
CVE-2022-4186 | Google Chrome up to 107.0.5304.121 Downloads input validation (EUVD-2022-51547)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown part of the component Downloads. The manipulation leads to improper input validation. This vulnerability is referenced as CVE-2022-4186. Remote
CVE-2022-4185 | Google Chrome up to 107.0.5304.121 Navigation Remote Code Execution (EUVD-2022-51546)
A vulnerability described as critical has been identified in Google Chrome. Affected by this issue is some unknown functionality of the component Navigation. Executing a manipulation can lead to Remote Code Execution. The identification of
CVE-2026-43598 | AMD ROCm Communication Collectives Library up to 7.13 null pointer dereference (Nessus ID 377567)
A vulnerability was found in AMD ROCm Communication Collectives Library up to 7.13. It has been declared as very critical. This issue affects some unknown processing. Executing a manipulation can lead to null pointer dereference. This vulne
CVE-2026-68498 | FasterXML jackson-core Name Parsing ReaderBasedJsonParser._parseName2 allocation of resources (Nessus ID 377568)
A vulnerability classified as problematic was found in FasterXML jackson-core. This vulnerability affects the function ReaderBasedJsonParser._parseName2 of the component Name Parsing. The manipulation results in allocation of resources. Thi
CVE-2026-119741 | RsyncProject rsync up to 3.5.1 Delta Transfer Sender match.c hash_search denial of service (Nessus ID 377571)
A vulnerability was found in RsyncProject rsync up to 3.5.1. It has been rated as problematic. This impacts the function hash_search of the file match.c of the component Delta Transfer Sender. Performing a manipulation results in denial of