Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13358 Eintraege gefunden · 50 pro Seite · Seite 241 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2024-06-13 00:00	cisa_kev	CVE-2024-4358 — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability	CRITICAL	CVE-2024-4358		threat_intel
2024-06-13 00:00	cisa_kev	CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability	HIGH	CVE-2024-26169		threat_intel
2024-06-12 00:00	cisa_kev	CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability	CRITICAL	CVE-2012-1823 CVE-2024-4577		threat_intel
2024-06-12 00:00	cisa_kev	CVE-2024-4610 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability	HIGH	CVE-2024-4610		threat_intel
2024-06-10 10:00	bsi_csw	Version 1.0: Webex by Cisco - Schwachstelle ermöglicht Abfluss von Metadaten	-	—		government_cert
2024-06-09 18:37	php_sec	bypass CVE-2024-1874	CRITICAL	CVE-2024-1874 CVE-2024-5585		vendor_advisory
2024-06-09 18:13	php_sec	Filter bypass in filter_var (FILTER_VALIDATE_URL)	MEDIUM	CVE-2020-7071 CVE-2024-5458		vendor_advisory
2024-06-06 21:17	php_sec	PHP is vulnerable to the Marvin Attack	MEDIUM	CVE-2024-2408		vendor_advisory
2024-06-05 09:00	bsi_csw	Version 1.1: Check Point Security Gateways - Abfluss von Zugangsdaten möglich	-	—		government_cert
2024-06-03 00:00	cisa_kev	CVE-2017-3506 — Oracle WebLogic Server OS Command Injection Vulnerability	HIGH	CVE-2017-3506		threat_intel
2024-05-30 00:00	cisa_kev	CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability	HIGH	CVE-2024-1086		threat_intel
2024-05-30 00:00	cisa_kev	CVE-2024-24919 — Check Point Quantum Security Gateways Information Disclosure Vulnerability	HIGH	CVE-2024-24919		threat_intel
2024-05-29 00:00	cisa_kev	CVE-2024-4978 — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability	HIGH	CVE-2024-4978		threat_intel
2024-05-28 00:00	cisa_kev	CVE-2024-5274 — Google Chromium V8 Type Confusion Vulnerability	HIGH	CVE-2024-5274		threat_intel
2024-05-23 00:00	cisa_kev	CVE-2020-17519 — Apache Flink Improper Access Control Vulnerability	CRITICAL	CVE-2020-17519		threat_intel
2024-05-20 00:00	cisa_kev	CVE-2024-4947 — Google Chromium V8 Type Confusion Vulnerability	CRITICAL	CVE-2024-4947		threat_intel
2024-05-20 00:00	cisa_kev	CVE-2023-43208 — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2023-43208		threat_intel
2024-05-16 00:00	cisa_kev	CVE-2014-100005 — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability	HIGH	CVE-2014-100005		threat_intel
2024-05-16 00:00	cisa_kev	CVE-2024-4761 — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability	HIGH	CVE-2024-4761		threat_intel
2024-05-16 00:00	cisa_kev	CVE-2021-40655 — D-Link DIR-605 Router Information Disclosure Vulnerability	HIGH	CVE-2021-40655		threat_intel
2024-05-14 00:00	cisa_kev	CVE-2024-30051 — Microsoft DWM Core Library Privilege Escalation Vulnerability	HIGH	CVE-2024-30051		threat_intel
2024-05-14 00:00	cisa_kev	CVE-2024-30040 — Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability	HIGH	CVE-2024-30040		threat_intel
2024-05-13 00:00	cisa_kev	CVE-2024-4671 — Google Chromium Visuals Use-After-Free Vulnerability	CRITICAL	CVE-2024-4671		threat_intel
2024-05-09 16:00	openkritis	NIS2-Umsetzungsgesetz Referentenentwurf Mai	-	—		security_news
2024-05-08 06:00	openkritis	DORA-Mapping auf NIS2, ISO 27001 und C5	-	—		security_news
2024-05-01 00:00	cisa_kev	CVE-2023-7028 — GitLab Community and Enterprise Editions Improper Access Control Vulnerability	CRITICAL	CVE-2023-7028		threat_intel
2024-04-30 00:00	cisa_kev	CVE-2024-29988 — Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability	HIGH	CVE-2023-38831 CVE-2024-21412 CVE-2024-29988		threat_intel
2024-04-29 08:30	bsi_csw	Version 1.1: CrushFTP - Ausgenutzte Schwachstelle ermöglicht Datenabfluss	CRITICAL	CVE-2024-4040	0.99942	government_cert
2024-04-29 06:00	openkritis	DORA und NIS2 im Finanzsektor	-	—		security_news
2024-04-24 20:00	bsi_csw	Version 1.0: Cisco ASA: Aktiv ausgenutzte Schwachstellen geschlossen	-	—		government_cert
2024-04-24 08:30	bsi_csw	Version 1.3: Palo Alto Networks Firewalls - Aktive Ausnutzung einer ungepatchten Schwachstelle	CRITICAL	CVE-2024-3400	0.99948	government_cert
2024-04-24 00:00	cisa_kev	CVE-2024-4040 — CrushFTP VFS Sandbox Escape Vulnerability	CRITICAL	CVE-2024-4040	0.99942	threat_intel
2024-04-24 00:00	cisa_kev	CVE-2024-20353 — Cisco ASA and FTD Denial of Service Vulnerability	HIGH	CVE-2024-20353		threat_intel
2024-04-24 00:00	cisa_kev	CVE-2024-20359 — Cisco ASA and FTD Privilege Escalation Vulnerability	MEDIUM	CVE-2024-20359		threat_intel
2024-04-23 00:00	cisa_kev	CVE-2022-38028 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability	HIGH	CVE-2022-38028		threat_intel
2024-04-12 00:00	cisa_kev	CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability	CRITICAL	CVE-2024-3400	0.99948	threat_intel
2024-04-11 23:00	php_sec	mb_encode_mimeheader runs endlessly for some inputs	HIGH	CVE-2024-2757		vendor_advisory
2024-04-11 22:59	php_sec	password_verify can erroneously return true, opening ATO risk	MEDIUM	CVE-2024-3096		vendor_advisory
2024-04-11 17:15	php_sec	Command injection via array-ish $command parameter of proc_open even if bypass_shell option enabled on Windows	CRITICAL	CVE-2024-1874		vendor_advisory
2024-04-11 17:12	php_sec	__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix	MEDIUM	CVE-2022-31629 CVE-2024-2756		vendor_advisory
2024-04-11 00:00	cisa_kev	CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability	CRITICAL	CVE-2024-3272 CVE-2024-3273		threat_intel
2024-04-11 00:00	cisa_kev	CVE-2024-3272 — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability	CRITICAL	CVE-2024-3272		threat_intel
2024-04-09 07:30	openkritis	NIS2-Anforderungen und Standards	-	—		security_news
2024-04-04 00:00	apache_httpd_sec	CVE-2023-38709: Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.	HIGH	CVE-2023-38709		vendor_advisory
2024-04-04 00:00	cisa_kev	CVE-2024-29748 — Android Pixel Privilege Escalation Vulnerability	HIGH	CVE-2024-29748		threat_intel
2024-04-04 00:00	cisa_kev	CVE-2024-29745 — Android Pixel Information Disclosure Vulnerability	MEDIUM	CVE-2024-29745		threat_intel
2024-04-04 00:00	apache_httpd_sec	CVE-2024-27316: HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.	HIGH	CVE-2024-27316		vendor_advisory
2024-04-04 00:00	apache_httpd_sec	CVE-2024-24795: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.	MEDIUM	CVE-2024-24795		vendor_advisory
2024-04-03 10:00	bsi_csw	Version 1.1: Kritische Backdoor in XZ für Linux	CRITICAL	CVE-2024-3094	0.99367	government_cert
2024-03-26 00:00	cisa_kev	CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability	HIGH	CVE-2023-24955		threat_intel