Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13352 Eintraege gefunden · 50 pro Seite · Seite 42 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	Kategorie
2026-10-01 12:00	apache_httpd_sec	CVE-2026-79768: Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	MEDIUM	CVE-2026-79768	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-56153: Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	HIGH	CVE-2026-56153	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-73637: Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-73637	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-56449: Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.	HIGH	CVE-2026-56449	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-63686: A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-63686	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-42356: Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by mod_mime. This issue affects Apache HTTP Server: from 2.4.60 through 2.4.68.	LOW	CVE-2026-42356	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-57941: Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.17 through 2.4.68.	CRITICAL	CVE-2026-57941	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-59685: Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	HIGH	CVE-2026-59685	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-73636: Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client's shared memory entry when AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.	HIGH	CVE-2026-73636	vendor_advisory
2026-10-01 12:00	apache_httpd_sec	CVE-2026-58415: Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.	MEDIUM	CVE-2026-58415	vendor_advisory
2026-10-01 11:52	security_insider	Moritz Hennemann tritt Amt als neuer BfDI an	-	—	security_news
2026-10-01 11:45	thn_global	How Financial Services Companies Can Modernize Their Software Supply Chain	-	—	security_news
2026-10-01 11:41	cert_bund	[NEU] [mittel] Vaadin: Mehrere Schwachstellen	MEDIUM	CVE-2026-91860 CVE-2026-93547	government_cert
2026-10-01 11:31	cert_bund	[NEU] [hoch] Kiteworks: Mehrere Schwachstellen	CRITICAL	CVE-2026-102089 CVE-2026-102090 CVE-2026-102091 +58	government_cert
2026-10-01 11:31	cert_bund	[NEU] [mittel] LiteLLM: Schwachstelle ermöglicht Cross-Site Scripting	MEDIUM	—	government_cert
2026-10-01 11:26	cert_bund	[NEU] [hoch] MediaWiki Extensions: Mehrere Schwachstellen	HIGH	CVE-2026-103437 CVE-2026-103438 CVE-2026-103439 +9	government_cert
2026-10-01 11:16	cert_bund	[UPDATE] [hoch] Dell PowerScale OneFS: Mehrere Schwachstellen	CRITICAL	CVE-2022-43680 CVE-2023-52425 CVE-2023-52426 +15	government_cert
2026-10-01 11:16	cert_bund	[UPDATE] [mittel] Intel UEFI Reference BIOS: Schwachstelle ermöglicht Offenlegung von Informationen	MEDIUM	CVE-2026-20712	government_cert
2026-10-01 11:16	cert_bund	[UPDATE] [kritisch] Microsoft Windows Produkte: Mehrere Schwachstellen	CRITICAL	CVE-2026-42976 CVE-2026-49179 CVE-2026-50472 +237	government_cert
2026-10-01 11:14	bleeping_c	Microsoft enables Windows settings backup by default for orgs	-	—	security_news
2026-10-01 11:11	cert_bund	[NEU] [hoch] JetBrains TeamCity: Mehrere Schwachstellen	HIGH	CVE-2026-100253 CVE-2026-100254 CVE-2026-100255	government_cert
2026-10-01 11:11	cert_bund	[NEU] [hoch] MISP: Mehrere Schwachstellen	HIGH	CVE-2026-103235 CVE-2026-103237 CVE-2026-103239 +3	government_cert
2026-10-01 11:11	cert_bund	[NEU] [mittel] CODESYS Gateway Client: Schwachstelle ermöglicht Denial of Service	HIGH	CVE-2026-76992	government_cert
2026-10-01 11:09	golem_security	Dringendes Update: Teamviewer schließt schwerwiegende Sicherheitslücken	-	—	security_news
2026-10-01 11:06	cert_bund	[NEU] [mittel] Moodle: Mehrere Schwachstellen	MEDIUM	CVE-2026-102585 CVE-2026-102586 CVE-2026-102587 +1	government_cert
2026-10-01 11:06	cert_bund	[NEU] [hoch] OpenCTI: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von Daten	HIGH	CVE-2026-76823	government_cert
2026-10-01 10:56	cert_bund	[NEU] [mittel] OpenSC: Schwachstelle ermöglicht Codeausführung	MEDIUM	CVE-2026-103531	government_cert
2026-10-01 10:54	cert_bund	[UPDATE] [mittel] FreeRDP: Mehrere Schwachstellen	HIGH	CVE-2026-72745 CVE-2026-72746 CVE-2026-73241 +1	government_cert
2026-10-01 10:53	cert_bund	[UPDATE] [hoch] Ruby: Mehrere Schwachstellen	HIGH	CVE-2026-41316 CVE-2026-42245 CVE-2026-42246 +6	government_cert
2026-10-01 10:53	cert_bund	[UPDATE] [mittel] Django: Mehrere Schwachstellen	MEDIUM	CVE-2026-48588 CVE-2026-53877 CVE-2026-53878	government_cert
2026-10-01 10:53	cert_bund	[UPDATE] [mittel] Keycloak: Mehrere Schwachstellen	MEDIUM	CVE-2026-14613 CVE-2026-14614 CVE-2026-14615 +1	government_cert
2026-10-01 10:53	cert_bund	[UPDATE] [mittel] Keycloak: Mehrere Schwachstellen	MEDIUM	CVE-2026-12388 CVE-2026-14209 CVE-2026-4629	government_cert
2026-10-01 10:53	cert_bund	[UPDATE] [hoch] HCL BigFix Compliance (Ruby): Mehrere Schwachstellen	HIGH	CVE-2026-41493 CVE-2026-42245 CVE-2026-42246 +3	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [niedrig] Django: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen	LOW	CVE-2026-35193 CVE-2026-48587 CVE-2026-6873 +2	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [mittel] Django: Mehrere Schwachstellen	MEDIUM	CVE-2026-35192 CVE-2026-5766 CVE-2026-6907	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [hoch] Ruby und Ruby on Rails (erb gem): Schwachstelle ermöglicht Codeausführung	HIGH	CVE-2026-41316	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [mittel] Keycloak: Mehrere Schwachstellen	MEDIUM	CVE-2026-4628 CVE-2026-4633	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [hoch] Red Hat Build of Debezium for Red Hat Application Foundations: Mehrere Schwachstellen ermöglichen Codeausführung	HIGH	CVE-2026-27727 CVE-2026-27830	government_cert
2026-10-01 10:52	cert_bund	[UPDATE] [mittel] ImageMagick: Mehrere Schwachstellen	HIGH	CVE-2026-24481 CVE-2026-24484 CVE-2026-24485 +39	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby: Schwachstelle ermöglicht Offenlegung von Informationen	LOW	CVE-2025-61594	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby: Schwachstelle ermöglicht Denial of Service	LOW	CVE-2025-58767	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby: Schwachstelle ermöglicht Denial of Service	HIGH	CVE-2025-24294	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby (CGI und URI gem): Mehrere Schwachstellen	MEDIUM	CVE-2025-27219 CVE-2025-27220 CVE-2025-27221	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby: Schwachstelle ermöglicht Denial of Service	MEDIUM	CVE-2024-43398	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [hoch] PostgreSQL: Schwachstelle ermöglicht SQL Injection und Codeausführung	HIGH	CVE-2025-1094	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [niedrig] Ruby REXML: Schwachstelle ermöglicht Denial of Service	MEDIUM	CVE-2024-39908	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] Ruby REXML: Mehrere Schwachstellen ermöglichen Denial of Service	MEDIUM	CVE-2024-41123 CVE-2024-41946	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] expat: Schwachstelle ermöglicht Denial of Service	HIGH	CVE-2024-28757	government_cert
2026-10-01 10:51	cert_bund	[UPDATE] [mittel] PostgreSQL: Mehrere Schwachstellen	HIGH	CVE-2023-39417 CVE-2023-39418	government_cert
2026-10-01 10:51	cert_bund	[NEU] [kritisch] Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten	CRITICAL	CVE-2026-76504	government_cert