Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13358 Eintraege gefunden · 50 pro Seite · Seite 234 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2025-08-05 00:00	cisa_kev	CVE-2020-25079 — D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability	HIGH	CVE-2020-25079		threat_intel
2025-08-05 00:00	cisa_kev	CVE-2020-25078 — D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability	HIGH	CVE-2020-25078		threat_intel
2025-08-05 00:00	cisa_kev	CVE-2022-40799 — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability	HIGH	CVE-2022-40799		threat_intel
2025-08-04 08:15	bsi_csw	Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Schwachstelle	CRITICAL	CVE-2025-49704 CVE-2025-49706 CVE-2025-53770 +1	0.99992	government_cert
2025-07-28 00:00	cisa_kev	CVE-2025-20281 — Cisco Identity Services Engine Injection Vulnerability	CRITICAL	CVE-2025-20281		threat_intel
2025-07-28 00:00	cisa_kev	CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability	CRITICAL	CVE-2025-20337		threat_intel
2025-07-28 00:00	cisa_kev	CVE-2023-2533 — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability	HIGH	CVE-2023-2533		threat_intel
2025-07-23 00:00	apache_httpd_sec	CVE-2025-54090: A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue.	MEDIUM	CVE-2025-54090		vendor_advisory
2025-07-22 00:00	cisa_kev	CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability	CRITICAL	CVE-2025-49704 CVE-2025-49706 CVE-2025-53770	0.99992	threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-6558 — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability	HIGH	CVE-2025-6558		threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-54309 — CrushFTP Unprotected Alternate Channel Vulnerability	CRITICAL	CVE-2025-54309		threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability	CRITICAL	CVE-2025-49704 CVE-2025-49706 CVE-2025-53770 +1	0.99992	threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-2776 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability	CRITICAL	CVE-2025-2776		threat_intel
2025-07-22 00:00	cisa_kev	CVE-2025-2775 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability	CRITICAL	CVE-2025-2775		threat_intel
2025-07-20 00:00	cisa_kev	CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2025-49704 CVE-2025-53770 CVE-2025-53771	0.99992	threat_intel
2025-07-18 00:00	cisa_kev	CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability	CRITICAL	CVE-2025-25257		threat_intel
2025-07-14 00:00	cisa_kev	CVE-2025-47812 — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability	CRITICAL	CVE-2025-47812		threat_intel
2025-07-10 00:00	apache_httpd_sec	CVE-2025-53020: Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.	HIGH	CVE-2025-53020		vendor_advisory
2025-07-10 00:00	cisa_kev	CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability	CRITICAL	CVE-2025-5777	0.99979	threat_intel
2025-07-10 00:00	apache_httpd_sec	CVE-2025-49812: In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommended to upgrade to version 2.4.64, which removes support for TLS upgrade.	HIGH	CVE-2025-49812		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2024-47252: Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%{varname}x" or "%{varname}c" to log variables provided by mod_ssl such as SSL_TLS_SNI, no escaping is performed by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files.	HIGH	CVE-2024-47252		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2024-42516: HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue. Users are recommended to upgrade to version 2.4.64, which fixes this issue.	HIGH	CVE-2023-38709 CVE-2024-42516		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2024-43204: SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue.	HIGH	CVE-2024-43204		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2025-49630: In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2. Configurations affected are a reverse proxy is configured for an HTTP/2 backend, with ProxyPreserveHost set to "on".	HIGH	CVE-2025-49630		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2025-23048: In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.62, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected when mod_ssl is configured for multiple virtual hosts, with each restricted to a different set of trusted client certificates (for example with a different SSLCACertificateFile/Path setting). In such a case, a client trusted to access one virtual host may be able to access another virtual host, if SSLStrictSNIVHostCheck is not enabled in either virtual host.	CRITICAL	CVE-2025-23048		vendor_advisory
2025-07-10 00:00	apache_httpd_sec	CVE-2024-43394: Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server Project will be setting a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. The server offers limited protection against administrators directing the server to open UNC paths. Windows servers should limit the hosts they will connect over via SMB based on the nature of NTLM authentication.	HIGH	CVE-2024-43394		vendor_advisory
2025-07-08 10:30	bsi_csw	Version 1.1: Citrix NetScaler ADC & NetScaler Gateway - Kritische Sicherheitslücken geschlossen und teils aktiv ausgenutzt	CRITICAL	CVE-2025-5349 CVE-2025-5777 CVE-2025-6543	0.99979	government_cert
2025-07-07 00:00	cisa_kev	CVE-2016-10033 — PHPMailer Command Injection Vulnerability	CRITICAL	CVE-2016-10033		threat_intel
2025-07-07 00:00	cisa_kev	CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability	HIGH	CVE-2019-5418		threat_intel
2025-07-07 00:00	cisa_kev	CVE-2019-9621 — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability	HIGH	CVE-2019-9621		threat_intel
2025-07-07 00:00	cisa_kev	CVE-2014-3931 — Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability	CRITICAL	CVE-2014-3931		threat_intel
2025-07-03 12:27	php_sec	pgsql extension does not check for errors during escaping	HIGH	CVE-2025-1094 CVE-2025-1735		vendor_advisory
2025-07-03 12:27	php_sec	NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix	MEDIUM	CVE-2025-6491		vendor_advisory
2025-07-03 12:27	php_sec	Null byte termination in hostnames	LOW	CVE-2025-1220		vendor_advisory
2025-07-02 00:00	cisa_kev	CVE-2025-6554 — Google Chromium V8 Type Confusion Vulnerability	HIGH	CVE-2025-6554		threat_intel
2025-07-01 20:08	owasp_modsecurity	v2.9.11	MEDIUM	CVE-2025-52891		vendor_advisory
2025-07-01 00:00	cisa_kev	CVE-2025-48928 — TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability	MEDIUM	CVE-2025-48928		threat_intel
2025-07-01 00:00	cisa_kev	CVE-2025-48927 — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability	MEDIUM	CVE-2025-48927		threat_intel
2025-06-30 00:00	cisa_kev	CVE-2025-6543 — Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability	CRITICAL	CVE-2025-5777 CVE-2025-6543	0.99979	threat_intel
2025-06-25 00:00	cisa_kev	CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability	MEDIUM	CVE-2019-6693		threat_intel
2025-06-25 00:00	cisa_kev	CVE-2024-54085 — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability	CRITICAL	CVE-2024-54085		threat_intel
2025-06-25 00:00	cisa_kev	CVE-2024-0769 — D-Link DIR-859 Router Path Traversal Vulnerability	MEDIUM	CVE-2024-0769		threat_intel
2025-06-17 00:00	cisa_kev	CVE-2023-0386 — Linux Kernel Improper Ownership Management Vulnerability	HIGH	CVE-2023-0386		threat_intel
2025-06-16 00:00	cisa_kev	CVE-2025-43200 — Apple Multiple Products Unspecified Vulnerability	MEDIUM	CVE-2025-43200		threat_intel
2025-06-16 00:00	cisa_kev	CVE-2023-33538 — TP-Link Multiple Routers Command Injection Vulnerability	HIGH	CVE-2023-33538		threat_intel
2025-06-13 11:00	bsi_csw	Version 1.1: Ivanti EPMM - Zero-Day Schwachstellen werden aktiv ausgenutzt	HIGH	CVE-2025-4427 CVE-2025-4428	0.9997	government_cert
2025-06-13 00:00	postgresql	PostgreSQL JDBC 42.7.7 Security update for CVE-2025-49146	HIGH	CVE-2025-49146		vendor_advisory
2025-06-10 00:00	cisa_kev	CVE-2025-24016 — Wazuh Server Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2025-24016		threat_intel
2025-06-10 00:00	cisa_kev	CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability	HIGH	CVE-2025-33053		threat_intel
2025-06-09 00:00	cisa_kev	CVE-2024-42009 — RoundCube Webmail Cross-Site Scripting Vulnerability	CRITICAL	CVE-2024-42009		threat_intel