Navigation

  • Schnelluebersicht mit Zeitraum und Severity: Startseite
  • Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

13292 Eintraege gefunden · 50 pro Seite · Seite 1 von 266.

Veroeffentlicht Quelle Titel Severity CVEs EPSS-Pctl Kategorie
2026-10-21 12:00

ncsc_news

Critical security issue affecting PHP

-

—

government_cert
2026-10-21 10:14

bleeping_c

Microsoft says October updates didn’t actually fix VPN issues

-

—

security_news
2026-10-21 10:07

golem_security

Meta Muse: Forscher finden Tausende geteilte KI-Chats über DNS-Datenbanken

-

—

security_news
2026-10-21 10:00

cert_bund

[UPDATE] [mittel] TYPO3 Extensions: Mehrere Schwachstellen

MEDIUM

CVE-2026-112064
CVE-2026-112065
CVE-2026-112066 +12

government_cert
2026-10-21 10:00

security_insider

Wie Observability im TLS-Zeitalter überlebt

-

—

security_news
2026-10-21 09:50

bsi_csw

Version 1.0: PHP - Kritische Schwachstellen bedrohen Webanwendungen weltweit

HIGH

CVE-2026-109618
CVE-2026-109619

government_cert
2026-10-21 09:49

heise_sec

Patchday bei Oracle: 1295 Sicherheitspatches quer durch die Bank

-

—

security_news
2026-10-21 09:30

debian_pts_linux

Debci reports failed tests

-

—

package_tracker
2026-10-21 09:25

cert_bund

[NEU] [hoch] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen

HIGH

CVE-2026-101898
CVE-2026-101901
CVE-2026-101903 +72

government_cert
2026-10-21 09:15

cert_bund

[NEU] [hoch] PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

HIGH

CVE-2026-109618
CVE-2026-109619

government_cert
2026-10-21 09:05

thn_global

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

-

—

security_news
2026-10-21 09:01

thn_global

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

-

—

security_news
2026-10-21 09:00

cert_bund

[NEU] [UNGEPATCHT] [hoch] expat: Schwachstelle ermöglicht Denial of Service

HIGH

CVE-2026-113351

government_cert
2026-10-21 09:00

security_insider

Warum der Sicherheitsbetrieb über digitale Souveränität entscheidet

-

—

security_news
2026-10-21 08:36

bleeping_c

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

-

—

security_news
2026-10-21 08:30

debian_pts_linux

21 bugs tagged patch in the BTS

-

—

package_tracker
2026-10-21 08:22

heise_sec

Wichtige PHP-Updates am 21. Oktober beheben Codeeinschleusung-Schwachstellen

-

—

security_news
2026-10-21 08:04

thn_global

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

-

—

security_news
2026-10-21 08:00

debian_pts_linux

A new upstream version is available: 7.3-rc7

-

—

package_tracker
2026-10-21 07:44

thn_global

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

-

—

security_news
2026-10-21 07:26

thn_global

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

MEDIUM

CVE-2026-96652

security_news
2026-10-21 07:22

heise_sec

Angriffswarnungen für Plex Media Server, SiteGuard und Siemens Software Center

-

—

security_news
2026-10-21 07:12

golem_security

Noch kein Patch verfügbar: Kritische PHP-Lücken gefährden unzählige Webserver

-

—

security_news
2026-10-21 07:05

debian_pts_linux

Multiarch hinter reports 1 issue(s)

-

—

package_tracker
2026-10-21 07:00

security_insider

Bitdefender AI Guardian kontrolliert Aktionen von KI-Agenten

-

—

security_news
2026-10-21 06:05

thn_global

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

-

—

security_news
2026-10-21 06:00

security_insider

Das Ende der Präventions-Illusion im Agentic-AI-Einsatz

-

—

security_news
2026-10-21 05:50

debian_pts_linux

Fails to build during reproducibility testing

-

—

package_tracker
2026-10-21 05:43

tarnkappe

Spionagesoftware über Online-Werbung eingeschleust: Citizen Lab deckte neue Angriffsmethode auf

-

—

security_news
2026-10-21 05:15

golem_security

Anzeige: Cyber Resilience Act: Pflichten für Produkthersteller

-

—

security_news
2026-10-21 05:00

security_insider

Angreifer können Firewalls von Palo Alto Networks kapern

-

—

security_news
2026-10-21 02:00

sans_isc

ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)

-

—

security_news
2026-10-21 01:01

bleeping_c

Stolen UpdraftCentral keys used to backdoor WordPress sites

-

—

security_news
2026-10-21 00:46

bleeping_c

Mozilla, Google, Apple block compromised eMudhra CA certificates

-

—

security_news
2026-10-20 21:30

debian_pts_linux

744 security issues in trixie

HIGH

CVE-2013-7445
CVE-2018-12928
CVE-2019-15213 +741

package_tracker
2026-10-20 21:30

debian_pts_linux

21 security issues in sid

HIGH

CVE-2013-7445
CVE-2018-12928
CVE-2019-15213 +18

package_tracker
2026-10-20 21:30

debian_pts_linux

1705 security issues in bookworm

HIGH

CVE-2013-7445
CVE-2018-12928
CVE-2019-15213 +1703

package_tracker
2026-10-20 21:30

debian_pts_linux

21 security issues in forky

HIGH

CVE-2013-7445
CVE-2018-12928
CVE-2019-15213 +18

package_tracker
2026-10-20 20:56

bleeping_c

PHP warns admins of two critical flaws, emergency patches coming tomorrow

-

—

security_news
2026-10-20 20:15

hn_sec

Upcoming Critical PHP Security Release

-

—

security_news
2026-10-20 19:34

hn_sec

Upcoming Critical PHP Security Release

-

—

security_news
2026-10-20 19:33

bleeping_c

Zeabur shutting down after second security breach in two months

-

—

security_news
2026-10-20 18:50

full_disc

[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)

-

—

threat_intel
2026-10-20 18:50

full_disc

[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

-

—

threat_intel
2026-10-20 18:50

full_disc

[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)

-

—

threat_intel
2026-10-20 18:50

full_disc

[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)

-

—

threat_intel
2026-10-20 18:50

full_disc

[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)

-

—

threat_intel
2026-10-20 18:50

full_disc

[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)

-

—

threat_intel
2026-10-20 18:49

full_disc

[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)

-

—

threat_intel
2026-10-20 18:49

full_disc

[ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)

-

—

threat_intel