Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

1643 Eintraege gefunden · 50 pro Seite · Seite 26 von 33.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2024-09-19 00:00	cisa_kev	CVE-2024-8963 — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability	CRITICAL	CVE-2024-8190 CVE-2024-8963	0.99921	threat_intel
2024-09-18 00:00	cisa_kev	CVE-2024-27348 — Apache HugeGraph-Server Improper Access Control Vulnerability	CRITICAL	CVE-2024-27348		threat_intel
2024-09-18 00:00	cisa_kev	CVE-2020-0618 — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability	CRITICAL	CVE-2020-0618		threat_intel
2024-09-18 00:00	cisa_kev	CVE-2020-14644 — Oracle WebLogic Server Remote Code Execution Vulnerability	CRITICAL	CVE-2020-14644		threat_intel
2024-09-18 00:00	cisa_kev	CVE-2022-21445 — Oracle ADF Faces Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2022-21445		threat_intel
2024-09-16 00:00	cisa_kev	CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability	CRITICAL	CVE-2024-6670		threat_intel
2024-09-09 00:00	cisa_kev	CVE-2024-40766 — SonicWall SonicOS Improper Access Control Vulnerability	CRITICAL	CVE-2024-40766	0.97223	threat_intel
2024-09-06 12:00	bsi_csw	Version 1.0: SonicWall SonicOS - Kritische Schwachstelle erlaubt unauthentifizierten Zugriff auf sensible Ressourcen	CRITICAL	CVE-2024-40766	0.97223	government_cert
2024-09-03 00:00	cisa_kev	CVE-2024-7262 — Kingsoft WPS Office Path Traversal Vulnerability	CRITICAL	CVE-2024-7262		threat_intel
2024-08-21 00:00	cisa_kev	CVE-2021-33045 — Dahua IP Camera Authentication Bypass Vulnerability	CRITICAL	CVE-2021-33045		threat_intel
2024-08-21 00:00	cisa_kev	CVE-2021-33044 — Dahua IP Camera Authentication Bypass Vulnerability	CRITICAL	CVE-2021-33044		threat_intel
2024-08-19 00:00	cisa_kev	CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability	CRITICAL	CVE-2024-23897		threat_intel
2024-08-15 00:00	cisa_kev	CVE-2024-28986 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2024-28986		threat_intel
2024-08-07 00:00	cisa_kev	CVE-2024-32113 — Apache OFBiz Path Traversal Vulnerability	CRITICAL	CVE-2024-32113		threat_intel
2024-07-29 00:00	cisa_kev	CVE-2023-45249 — Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability	CRITICAL	CVE-2023-45249		threat_intel
2024-07-29 00:00	cisa_kev	CVE-2024-4879 — ServiceNow Improper Input Validation Vulnerability	CRITICAL	CVE-2024-4879		threat_intel
2024-07-29 00:00	cisa_kev	CVE-2024-5217 — ServiceNow Incomplete List of Disallowed Inputs Vulnerability	CRITICAL	CVE-2024-5217		threat_intel
2024-07-17 00:00	cisa_kev	CVE-2024-34102 — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability	CRITICAL	CVE-2024-34102		threat_intel
2024-07-17 00:00	apache_httpd_sec	CVE-2024-40898: SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue.	CRITICAL	CVE-2024-40898		vendor_advisory
2024-07-15 00:00	cisa_kev	CVE-2024-36401 — OSGeo GeoServer GeoTools Eval Injection Vulnerability	CRITICAL	CVE-2024-36401		threat_intel
2024-07-09 00:00	cisa_kev	CVE-2024-23692 — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	CRITICAL	CVE-2024-23692		threat_intel
2024-07-01 08:30	bsi_csw	Version 1.1: Progress MOVEit - Ausnutzung einer kritischen Schwachstelle	CRITICAL	CVE-2024-5806	0.99613	government_cert
2024-07-01 00:00	apache_httpd_sec	CVE-2024-38475: Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected. Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.	CRITICAL	CVE-2024-38475		vendor_advisory
2024-07-01 00:00	apache_httpd_sec	CVE-2024-38476: Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Note: Some legacy uses of the 'AddType' directive to connect a request to a handler must be ported to 'SetHandler' after this fix. Users are recommended to upgrade to version 2.4.60, which fixes this issue.	CRITICAL	CVE-2024-38476		vendor_advisory
2024-06-26 00:00	cisa_kev	CVE-2022-24816 — OSGeo GeoServer JAI-EXT Code Injection Vulnerability	CRITICAL	CVE-2022-24816		threat_intel
2024-06-13 00:00	cisa_kev	CVE-2024-4358 — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability	CRITICAL	CVE-2024-4358		threat_intel
2024-06-12 00:00	cisa_kev	CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability	CRITICAL	CVE-2012-1823 CVE-2024-4577		threat_intel
2024-06-09 18:37	php_sec	bypass CVE-2024-1874	CRITICAL	CVE-2024-1874 CVE-2024-5585		vendor_advisory
2024-05-23 00:00	cisa_kev	CVE-2020-17519 — Apache Flink Improper Access Control Vulnerability	CRITICAL	CVE-2020-17519		threat_intel
2024-05-20 00:00	cisa_kev	CVE-2023-43208 — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2023-43208		threat_intel
2024-05-20 00:00	cisa_kev	CVE-2024-4947 — Google Chromium V8 Type Confusion Vulnerability	CRITICAL	CVE-2024-4947		threat_intel
2024-05-13 00:00	cisa_kev	CVE-2024-4671 — Google Chromium Visuals Use-After-Free Vulnerability	CRITICAL	CVE-2024-4671		threat_intel
2024-05-01 00:00	cisa_kev	CVE-2023-7028 — GitLab Community and Enterprise Editions Improper Access Control Vulnerability	CRITICAL	CVE-2023-7028		threat_intel
2024-04-29 08:30	bsi_csw	Version 1.1: CrushFTP - Ausgenutzte Schwachstelle ermöglicht Datenabfluss	CRITICAL	CVE-2024-4040	0.99942	government_cert
2024-04-24 08:30	bsi_csw	Version 1.3: Palo Alto Networks Firewalls - Aktive Ausnutzung einer ungepatchten Schwachstelle	CRITICAL	CVE-2024-3400	0.99948	government_cert
2024-04-24 00:00	cisa_kev	CVE-2024-4040 — CrushFTP VFS Sandbox Escape Vulnerability	CRITICAL	CVE-2024-4040	0.99942	threat_intel
2024-04-12 00:00	cisa_kev	CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability	CRITICAL	CVE-2024-3400	0.99948	threat_intel
2024-04-11 17:15	php_sec	Command injection via array-ish $command parameter of proc_open even if bypass_shell option enabled on Windows	CRITICAL	CVE-2024-1874		vendor_advisory
2024-04-11 00:00	cisa_kev	CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability	CRITICAL	CVE-2024-3272 CVE-2024-3273		threat_intel
2024-04-11 00:00	cisa_kev	CVE-2024-3272 — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability	CRITICAL	CVE-2024-3272		threat_intel
2024-04-03 10:00	bsi_csw	Version 1.1: Kritische Backdoor in XZ für Linux	CRITICAL	CVE-2024-3094	0.99367	government_cert
2024-03-25 00:00	cisa_kev	CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability	CRITICAL	CVE-2023-48788		threat_intel
2024-03-25 00:00	cisa_kev	CVE-2019-7256 — Nice Linear eMerge E3-Series OS Command Injection Vulnerability	CRITICAL	CVE-2019-7256		threat_intel
2024-03-25 00:00	cisa_kev	CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability	CRITICAL	CVE-2021-44529		threat_intel
2024-03-07 00:00	cisa_kev	CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability	CRITICAL	CVE-2024-27198 CVE-2024-27199		threat_intel
2024-03-05 00:00	cisa_kev	CVE-2021-36380 — Sunhillo SureLine OS Command Injection Vulnerablity	CRITICAL	CVE-2021-36380		threat_intel
2024-02-22 00:00	cisa_kev	CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability	CRITICAL	CVE-2024-1709		threat_intel
2024-02-15 00:00	cisa_kev	CVE-2024-21410 — Microsoft Exchange Server Privilege Escalation Vulnerability	CRITICAL	CVE-2024-21410		threat_intel
2024-02-09 00:00	cisa_kev	CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability	CRITICAL	CVE-2024-21762		threat_intel
2024-01-31 00:00	cisa_kev	CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability	CRITICAL	CVE-2023-46805 CVE-2024-21887 CVE-2024-21893		threat_intel