Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13352 Eintraege gefunden · 50 pro Seite · Seite 41 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	EPSS-Pctl	Kategorie
2026-10-02 09:29	bleeping_c	Microsoft’s X account hacked in crypto pump-and-dump scheme	-	—		security_news
2026-10-02 09:00	security_insider	Der Domino-Effekt und die NIS2-Notbremse	-	—		security_news
2026-10-02 08:27	golem_security	Anzeige: GL.iNet-5G-Reiserouter mit eSIM als früher Prime-Deal zum Tiefpreis	-	—		security_news
2026-10-02 08:21	cert_bund	[UPDATE] [kritisch] Vercel Next.js: Schwachstelle ermöglicht Codeausführung	MEDIUM	CVE-2026-94545		government_cert
2026-10-02 08:20	golem_security	Hackerangriff: Pentagon verliert Daten von mehr als drei Millionen Personen	-	—		security_news
2026-10-02 08:01	thn_global	Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools	-	—		security_news
2026-10-02 08:00	security_insider	OpenAI nimmt Ukraine in KI-Cyberabwehr-Programm auf	-	—		security_news
2026-10-02 07:00	security_insider	Keeper Security und Sailpoint automatisieren privilegierte Zugriffe	-	—		security_news
2026-10-02 06:46	heise_sec	Angriffe auf FortiMail-Zero-Day-Lücke beobachtet	-	—		security_news
2026-10-02 06:00	security_insider	Lektionen aus Cybervorfällen sicher lernen und teilen	-	—		security_news
2026-10-02 05:49	thn_global	Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes	CRITICAL	CVE-2026-104286		security_news
2026-10-02 05:15	golem_security	Anzeige: ISO 27001: Informationssicherheit systematisch managen	-	—		security_news
2026-10-02 05:00	security_insider	Angreifer nutzen SharePoint-Schwachstelle zur Codeausführung aus	-	—		security_news
2026-10-02 04:39	debian_pts_linux	linux 7.2.8-1 MIGRATED to testing	-	—		package_tracker
2026-10-02 02:51	hn_sec	Greg Kroah-Hartman – Security in the LLM Age [video]	-	—		security_news
2026-10-02 02:00	sans_isc	ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)	-	—		security_news
2026-10-02 00:00	debian_dsa	DSA-6539-1 php-mongodb - security update	MEDIUM	CVE-2026-84968		distro_advisory
2026-10-02 00:00	debian_dsa	DSA-6540-1 radsecproxy - security update	-	—		distro_advisory
2026-10-02 00:00	cisa_kev	CVE-2026-102490 — Zammad GmbH Zammad Improper Privilege Management Vulnerability	CRITICAL	CVE-2026-102489 CVE-2026-102490		threat_intel
2026-10-02 00:00	debian_dsa	DSA-6538-1 redis - security update	MEDIUM	CVE-2026-23631 CVE-2026-25243		distro_advisory
2026-10-02 00:00	cisa_kev	CVE-2026-102489 — Zammad GmbH Zammad Session Fixation Vulnerability	CRITICAL	CVE-2026-102489 CVE-2026-102490		threat_intel
2026-10-02 00:00	debian_dsa	DSA-6534-2 webkit2gtk - regression update	-	—		distro_advisory
2026-10-01 22:42	bleeping_c	Fortinet warns of critical FortiMail flaw exploited in zero-day attacks	CRITICAL	CVE-2026-104286		security_news
2026-10-01 20:52	bleeping_c	Autonomous AI agents tried to hack US, Canadian government websites	-	—		security_news
2026-10-01 20:31	debian_pts_linux	The package has not entered testing even though the delay is over	-	—		package_tracker
2026-10-01 19:32	bleeping_c	Microsoft says threat actors are ahead in the early AI race	-	—		security_news
2026-10-01 16:55	thn_global	Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers	-	—		security_news
2026-10-01 16:45	thn_global	ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories	-	—		security_news
2026-10-01 16:30	moodle_github_releases	v5.3.0-rc2	-	—		vendor_advisory
2026-10-01 16:17	netzpolitik	Chatkontrolle-Verhandlungen: EU-Staaten und Parlament weiter uneins	-	—		security_news
2026-10-01 14:37	thn_global	WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory	-	—		security_news
2026-10-01 14:33	certcc_vuln	VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations	HIGH	CVE-2026-12855		threat_intel
2026-10-01 14:25	bleeping_c	Police dismantle KillSec ransomware gang allegedly led by 16-year-old	-	—		security_news
2026-10-01 14:01	bleeping_c	The Day-One Hole in Zero Trust Architecture	-	—		security_news
2026-10-01 14:00	security_insider	Diese Maßnahmen für den EU AI Act sollten Prio haben	-	—		security_news
2026-10-01 13:51	bleeping_c	Kiteworks patches max severity code injection vulnerability	-	—		security_news
2026-10-01 13:32	tarnkappe	GitHub-Leak: 543.699 Zugangsdaten sind noch immer gültig	-	—		security_news
2026-10-01 13:10	netzpolitik	Memes: Elif Eralp springt bei Sanifair übers Drehkreuz	-	—		security_news
2026-10-01 13:00	security_insider	Podcast von der Digital X 2026: Denken Sie Netzwerke nie wieder ohne Security	-	—		security_news
2026-10-01 12:15	bsi_csw	Version 1.1: Citrix NetScaler - Systeme werden über ZeroDay-Schwachstellen angegriffen	CRITICAL	CVE-2026-88771 CVE-2026-88772	0.70203	government_cert
2026-10-01 12:00	apache_httpd_sec	CVE-2026-42528: A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue	MEDIUM	CVE-2026-42528		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-56154: Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	CRITICAL	CVE-2026-56154		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-47360: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove changes across internal redirects, the session cookie may still be passed to a backend server. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	HIGH	CVE-2026-47360		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-93546: Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.	HIGH	CVE-2026-93546		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-59797: Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	CRITICAL	CVE-2026-59797		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-63718: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68.	HIGH	CVE-2026-63718		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-63045: Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafted PASV response. Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-63045		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-63292: Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-63292		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-48005: Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service (forced re-authentication) via forged Authorization headers when Digest authentication is enabled with AuthDigestNcCheck . Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-48005		vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-46729: NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	HIGH	CVE-2026-46729		vendor_advisory