Navigation

  • Schnelluebersicht mit Zeitraum und Severity: Startseite
  • Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

1640 Eintraege gefunden · 50 pro Seite · Seite 21 von 33.

Veroeffentlicht Quelle Titel Severity CVEs EPSS-Pctl Kategorie
2026-05-12 16:44

thn_global

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

CRITICAL

CVE-2026-45185

security_news
2026-05-12 11:40

cert_bund

[NEU] [hoch] Siemens SIMATIC S7 PLCs Web Server: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

CRITICAL

CVE-2026-25786
CVE-2026-25787
CVE-2026-25789

government_cert
2026-05-12 10:10

cert_bund

[NEU] [hoch] SAP Patchday Mai 2026: Mehrere Schwachstellen

CRITICAL

CVE-2025-68161
CVE-2026-0502
CVE-2026-27682 +12

government_cert
2026-05-12 09:55

cert_bund

[NEU] [hoch] Dell ECS: Mehrere Schwachstellen

CRITICAL

CVE-2025-43992
CVE-2026-26946
CVE-2026-35157 +1

government_cert
2026-05-11 17:54

thn_global

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

CRITICAL

CVE-2026-41940

0.99922 security_news
2026-05-10 12:41

thn_global

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

CRITICAL

CVE-2026-7482

security_news
2026-05-08 00:00

cisa_kev

CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability

CRITICAL

CVE-2026-42208

threat_intel
2026-05-07 15:45

bsi_csw

Version 1.0: Ivanti EPMM: Systeme über neue Schwachstelle angegriffen

CRITICAL

CVE-2026-1281
CVE-2026-1340
CVE-2026-6973

0.99925 government_cert
2026-05-07 12:56

php_sec

Use-After-Free in SOAP using Apache map with Remote Code Execution

CRITICAL

CVE-2026-6722

vendor_advisory
2026-05-06 00:00

cisa_kev

CVE-2026-0300 — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

CRITICAL

CVE-2026-0300

threat_intel
2026-05-04 00:00

apache_httpd_sec

CVE-2026-28780: Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

CRITICAL

CVE-2026-28780

vendor_advisory
2026-05-01 05:00

zdi_pub

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

CRITICAL

CVE-2026-41265

threat_intel
2026-04-30 09:20

bsi_csw

Version 1.0: cPanel und WHM - Aktiv ausgenutzte Schwachstelle ermöglicht Umgehen der Authentifizierung

CRITICAL

CVE-2026-41940

0.99922 government_cert
2026-04-30 00:00

cisa_kev

CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

CRITICAL

CVE-2026-41940

0.99922 threat_intel
2026-04-24 10:10

bsi_csw

Version 1.1: Cisco Firewalls mit persistenter Malware infiziert

CRITICAL

CVE-2025-20333
CVE-2025-20362
CVE-2025-20363

0.99752 government_cert
2026-04-24 00:00

cisa_kev

CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability

CRITICAL

CVE-2024-57726

threat_intel
2026-04-23 00:00

cisa_kev

CVE-2026-39987 — Marimo Remote Code Execution Vulnerability

CRITICAL

CVE-2026-39987

threat_intel
2026-04-21 15:36

apache_asf

Lessons from Log4Shell: Building a CRA-Ready Log4j

CRITICAL

CVE-2021-44228

vendor_advisory
2026-04-21 13:37

certcc_vuln

VU#414811: Terrarium contains a vulnerability that allows arbitrary code execution

CRITICAL

CVE-2026-5752

threat_intel
2026-04-21 05:00

zdi_pub

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

CRITICAL

CVE-2026-5059

threat_intel
2026-04-20 13:46

certcc_vuln

VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file

CRITICAL

CVE-2026-5760

threat_intel
2026-04-20 00:00

cisa_kev

CVE-2025-32975 — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

CRITICAL

CVE-2025-32975
CVE-2025-32976
CVE-2025-32977 +1

threat_intel
2026-04-20 00:00

cisa_kev

CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability

CRITICAL

CVE-2024-27198
CVE-2024-27199

threat_intel
2026-04-15 10:40

bsi_csw

Version 1.0: Microsoft Windows IKE - Kritische Schwachstelle gefährdet Windows VPN-Server

CRITICAL

CVE-2026-33824

0.75847 government_cert
2026-04-15 05:00

zdi_pub

ZDI-26-270: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

CRITICAL

CVE-2025-54987

threat_intel
2026-04-15 05:00

zdi_pub

ZDI-26-292: QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability

CRITICAL

CVE-2026-22898

threat_intel
2026-04-15 05:00

zdi_pub

ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

CRITICAL

CVE-2025-54948

threat_intel
2026-04-13 00:00

cisa_kev

CVE-2026-21643 — Fortinet FortiClient EMS SQL Injection Vulnerability

CRITICAL

CVE-2026-21643

threat_intel
2026-04-09 14:40

certcc_vuln

VU#536588: Multiple Heap Buffer Overflows in Orthanc DICOM Server

CRITICAL

CVE-2026-5437
CVE-2026-5438
CVE-2026-5439 +6

threat_intel
2026-04-08 00:00

cisa_kev

CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CRITICAL

CVE-2026-1281
CVE-2026-1340

0.99925 threat_intel
2026-04-06 00:00

cisa_kev

CVE-2026-35616 — Fortinet FortiClient EMS Improper Access Control Vulnerability

CRITICAL

CVE-2026-35616

threat_intel
2026-04-02 05:00

zdi_pub

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

CRITICAL

CVE-2026-4698

threat_intel
2026-03-30 18:14

certcc_vuln

VU#655822: Kyverno is vulnerable to server-side request forgery (SSRF)

CRITICAL

CVE-2026-4789

threat_intel
2026-03-30 16:10

bsi_csw

Version 1.0: F5 BIG-IP - Aktive Ausnutzung einer Schwachstelle im Access Policy Manager

CRITICAL

CVE-2025-53521

0.83104 government_cert
2026-03-30 15:50

certcc_vuln

VU#221883: CrewAI contains multiple vulnerabilities including SSRF, RCE and local file read

CRITICAL

CVE-2026-2275
CVE-2026-2285
CVE-2026-2286 +1

threat_intel
2026-03-30 15:00

bsi_csw

Version 1.1: Citrix NetScaler ADC und Gateway - Schwachstellen gefährden Organisationen

CRITICAL

CVE-2026-3055
CVE-2026-4368

0.90569 government_cert
2026-03-30 05:00

zdi_pub

ZDI-26-246: (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability

CRITICAL

CVE-2026-5058

threat_intel
2026-03-30 00:00

cisa_kev

CVE-2026-3055 — Citrix NetScaler Out-of-Bounds Read Vulnerability

CRITICAL

CVE-2026-3055

0.90569 threat_intel
2026-03-27 00:00

cisa_kev

CVE-2025-53521 — F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

CRITICAL

CVE-2025-53521

0.83104 threat_intel
2026-03-26 00:00

cisa_kev

CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability

CRITICAL

CVE-2026-33634

threat_intel
2026-03-25 11:10

bsi_csw

Version 1.0: Microsoft SharePoint - Angreifer nutzen kritische Schwachstelle aktiv aus

CRITICAL

CVE-2026-20963

0.9817 government_cert
2026-03-25 00:00

cisa_kev

CVE-2026-33017 — Langflow Code Injection Vulnerability

CRITICAL

CVE-2026-33017

threat_intel
2026-03-24 14:11

certcc_vuln

VU#577436: Hard coded credentials vulnerability in GoHarbor's Harbor

CRITICAL

CVE-2026-4404

threat_intel
2026-03-23 05:00

zdi_pub

ZDI-26-222: (Pwn2Own) Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability

CRITICAL

CVE-2025-14233

threat_intel
2026-03-20 00:00

cisa_kev

CVE-2025-32432 — Craft CMS Code Injection Vulnerability

CRITICAL

CVE-2025-32432

threat_intel
2026-03-20 00:00

cisa_kev

CVE-2025-54068 — Laravel Livewire Code Injection Vulnerability

CRITICAL

CVE-2025-54068

threat_intel
2026-03-19 00:00

cisa_kev

CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

CRITICAL

CVE-2026-20131

threat_intel
2026-03-18 00:00

cisa_kev

CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CRITICAL

CVE-2026-20963

0.9817 threat_intel
2026-03-16 05:00

zdi_pub

ZDI-26-189: (Pwn2Own) VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

CRITICAL

CVE-2025-41236

threat_intel
2026-03-16 05:00

zdi_pub

ZDI-26-203: (Pwn2Own) Canon imageCLASS MF654Cdw XML SOAP Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CRITICAL

CVE-2025-14231

threat_intel