Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13358 Eintraege gefunden · 50 pro Seite · Seite 231 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2026-01-13 00:00	cisa_kev	CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability	MEDIUM	CVE-2026-20805		threat_intel
2026-01-12 00:00	cisa_kev	CVE-2025-8110 — Gogs Path Traversal Vulnerability	HIGH	CVE-2025-8110		threat_intel
2026-01-09 15:00	security_insider	Wann ist Microsoft Patchday?	-	—		security_news
2026-01-07 23:39	project_black_blog	Importing Pre-made Kali VMware VM into ESXi	-	—		threat_intel
2026-01-07 00:00	cisa_kev	CVE-2009-0556 — Microsoft Office PowerPoint Code Injection Vulnerability	HIGH	CVE-2009-0556		threat_intel
2026-01-07 00:00	cisa_kev	CVE-2025-37164 — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability	CRITICAL	CVE-2025-37164		threat_intel
2026-01-06 14:00	project_black_blog	Dumpster Diving for Data	-	—		threat_intel
2026-01-05 16:00	cert_eu_ti	Cyber Brief 26-01 - December 2025	-	—		government_cert
2026-01-01 06:12	project_black_blog	Set ms-DS-MachineAccountQuota to 0	-	—		threat_intel
2025-12-29 12:15	bsi_csw	Version 1.0: MongoDB - Aktiv ausgenutzte Schwachstelle erlaubt Offenlegung sensibler Daten	HIGH	CVE-2025-14847	0.9968	government_cert
2025-12-29 00:00	cisa_kev	CVE-2025-14847 — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability	HIGH	CVE-2025-14847	0.9968	threat_intel
2025-12-22 00:00	cisa_kev	CVE-2023-52163 — Digiever DS-2105 Pro Missing Authorization Vulnerability	HIGH	CVE-2023-52163		threat_intel
2025-12-19 12:00	bsi_csw	Version 1.0: WatchGuard Firebox - Aktive Ausnutzung einer Zero-Day Schwachstelle	CRITICAL	CVE-2025-14733	0.98011	government_cert
2025-12-19 00:00	cisa_kev	CVE-2025-14733 — WatchGuard Firebox Out of Bounds Write Vulnerability	CRITICAL	CVE-2025-14733	0.98011	threat_intel
2025-12-18 16:11	php_sec	Null byte termination in dns_get_record()	LOW	—		vendor_advisory
2025-12-18 16:10	php_sec	NULL Pointer Dereference in PDO quoting	HIGH	CVE-2025-14180		vendor_advisory
2025-12-18 16:10	php_sec	Heap buffer overflow in array_merge()	MEDIUM	CVE-2025-14178		vendor_advisory
2025-12-18 16:10	php_sec	Information Leak of Memory in getimagesize	MEDIUM	CVE-2025-14177		vendor_advisory
2025-12-17 00:00	cisa_kev	CVE-2025-59374 — ASUS Live Update Embedded Malicious Code Vulnerability	CRITICAL	CVE-2025-59374		threat_intel
2025-12-17 00:00	cisa_kev	CVE-2025-40602 — SonicWall SMA1000 Missing Authorization Vulnerability	MEDIUM	CVE-2025-40602		threat_intel
2025-12-17 00:00	cisa_kev	CVE-2025-20393 — Cisco Multiple Products Improper Input Validation Vulnerability	CRITICAL	CVE-2025-20393	0.98333	threat_intel
2025-12-16 10:00	project_zero	Welcome to the new Project Zero Blog	-	—		threat_intel
2025-12-16 00:00	cisa_kev	CVE-2025-59718 — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability	CRITICAL	CVE-2025-59718 CVE-2025-59719	0.99332	threat_intel
2025-12-15 12:40	bsi_csw	Version 1.3 React Server Components - Kritische Schwachstelle bedroht zahlreiche Webanwendungen	CRITICAL	CVE-2025-55182	0.99958	government_cert
2025-12-15 12:23	moodle	MSA-25-0061: User IDs exposed in URLs when using anonymous submissions in assignment	MEDIUM	CVE-2025-67857		vendor_advisory
2025-12-15 12:23	moodle	MSA-25-0060: Badges with a role criterion could be awarded to users who do not hold the role	MEDIUM	CVE-2025-67856		vendor_advisory
2025-12-15 12:23	moodle	MSA-25-0059: Reflected XSS risk in policy tool	MEDIUM	CVE-2025-67855		vendor_advisory
2025-12-15 12:22	moodle	MSA-25-0058: Participants can access forum ratings without permission	-	CVE-2025-67854		vendor_advisory
2025-12-15 12:22	moodle	MSA-25-0057: Password brute force risk from confirmation email web service	HIGH	CVE-2025-67853		vendor_advisory
2025-12-15 12:21	moodle	MSA-25-0056: Open redirect in OAuth login	LOW	CVE-2025-67852		vendor_advisory
2025-12-15 12:21	moodle	MSA-25-0055: Formula injection risk when exporting data to CSV / Excel	MEDIUM	CVE-2025-67851		vendor_advisory
2025-12-15 12:20	moodle	MSA-25-0054: XSS risk in formula editor	HIGH	CVE-2025-67850		vendor_advisory
2025-12-15 12:19	moodle	MSA-25-0053: XSS risk via AI prompt injection	HIGH	CVE-2025-67849		vendor_advisory
2025-12-15 00:00	cisa_kev	CVE-2025-14611 — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability	HIGH	CVE-2025-14611		threat_intel
2025-12-15 00:00	cisa_kev	CVE-2025-43529 — Apple Multiple Products Use-After-Free WebKit Vulnerability	HIGH	CVE-2025-43529		threat_intel
2025-12-12 00:00	cisa_kev	CVE-2025-14174 — Google Chromium Out of Bounds Memory Access Vulnerability	HIGH	CVE-2025-14174		threat_intel
2025-12-12 00:00	cisa_kev	CVE-2018-4063 — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability	HIGH	CVE-2018-4063		threat_intel
2025-12-11 00:00	cisa_kev	CVE-2025-58360 — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability	HIGH	CVE-2025-58360		threat_intel
2025-12-10 12:00	ncsc_news	Mistaking AI vulnerability could lead to large-scale breaches, NCSC warns	-	—		government_cert
2025-12-09 00:53	project_black_blog	Orthanc 1.12.9 User Impersonation	MEDIUM	CVE-2025-15581		threat_intel
2025-12-09 00:00	cisa_kev	CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability	HIGH	CVE-2025-62221		threat_intel
2025-12-09 00:00	cisa_kev	CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability	HIGH	CVE-2025-6218		threat_intel
2025-12-08 00:00	cisa_kev	CVE-2025-66644 — Array Networks ArrayOS AG OS Command Injection Vulnerability	HIGH	CVE-2025-66644		threat_intel
2025-12-08 00:00	cisa_kev	CVE-2022-37055 — D-Link Routers Buffer Overflow Vulnerability	CRITICAL	CVE-2022-37055		threat_intel
2025-12-05 00:00	cisa_kev	CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability	CRITICAL	CVE-2025-55182 CVE-2025-66478	0.99958	threat_intel
2025-12-04 00:00	apache_httpd_sec	CVE-2025-65082: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.	MEDIUM	CVE-2025-65082		vendor_advisory
2025-12-04 00:00	apache_httpd_sec	CVE-2025-55753: An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.	HIGH	CVE-2025-55753		vendor_advisory
2025-12-04 00:00	apache_httpd_sec	CVE-2025-66200: mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.	MEDIUM	CVE-2025-66200		vendor_advisory
2025-12-04 00:00	apache_httpd_sec	CVE-2025-59775: Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.	HIGH	CVE-2025-59775		vendor_advisory
2025-12-04 00:00	apache_httpd_sec	CVE-2025-58098: Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.	HIGH	CVE-2025-58098		vendor_advisory