Full Disclosure

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:17 UTC 2026-10-21 10:17 UTC 0 - "3e3d-65e4a728c4474" Tue, 20 Oct 2026 19:15:02 GMT

Letzte Eintraege

306 Eintraege · 50 pro Seite · Seite 4 von 7

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-26 15:28

[0day-rubbish] Brekeke PBX 3.19.1.8 (other versions with the same Bean dispatch model are likely affected) Pre-authentication RCE (fail-open auth gate + reflection to exec) (9.8)

—

-
2026-08-26 15:28

CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE

CVE-2026-20079

CRITICAL
2026-08-26 15:27

CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer

CVE-2026-78331
CVE-2026-78332

-
2026-08-26 15:26

NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)

—

-
2026-08-26 15:26

NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)

—

-
2026-08-20 06:25

[0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8)

—

-
2026-08-20 06:25

[0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8)

—

-
2026-08-20 06:25

[0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8)

—

-
2026-08-20 06:25

[0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8)

—

-
2026-08-20 06:25

[0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8)

—

-
2026-08-20 06:25

[0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8)

—

-
2026-08-20 06:25

[0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8)

—

-
2026-08-20 06:25

APPLE-SA-08-18-2026-1 Safari 26.6.1

—

-
2026-08-20 06:24

Cudy WR3000: Hard-coded JWT Secret to Root Command Injection

CVE-2026-71960

CRITICAL
2026-08-18 06:17

Security advisory: Pre-authentication RCE (SQL injection) in XPressEntry 3.7.7454 (Telaeris Inc)

—

-
2026-08-18 06:17

Security advisory: Authenticated RCE (SQL injection) in Scrutinizer 19.7.0 (Plixer)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication SYSTEM RCE (Zip-Slip plugin planting) in Output Messenger Server 2.0.x (>= 2.0.63) (Srimax Software (Output Technology))

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE (arbitrary file write) in RapidDeploy 5.2.2 (MidVision)

—

-
2026-08-18 06:17

Security advisory: Authenticated RCE (second-order SQL injection) in Lansweeper 12.2.1.0 (web reports 12.2.1.6) (Lansweeper)

—

-
2026-08-18 06:17

Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE (default credentials + path traversal) in PulseNET Enterprise 6.0.3 (build 6975) (GE Vernova)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE in Wyn Enterprise 9.1.00145.0 (Mescius (GrapeCity))

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE (default credentials) in ObjectDB 2.9.5 server mode (ObjectDB Software)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication SYSTEM RCE in MAPS SCADA 4.0.5.5 (Adroit Technologies)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE in Confluent Platform (ksqlDB) 7.9.1-ce (Confluent, Inc.)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)

—

-
2026-08-18 06:17

Security advisory: Pre-authentication RCE in Ontotext GraphDB 11.4.3 Free edition (Ontotext / Graphwise)

—

-
2026-08-18 06:14

Re: Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)

—

-
2026-08-17 22:01

APPLE-SA-08-17-2026-2 iOS 18.7.10 and iPadOS 18.7.10

—

-
2026-08-13 21:54

APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9

—

-
2026-08-13 21:54

APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9

—

-
2026-08-06 19:40

Dangling DNS record for bastion.certb.cdp.bethesda.net

—

-
2026-08-06 19:40

CL.0 desync in www.microsoft.com

—

-
2026-08-06 19:36

CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)

CVE-2026-15013

CRITICAL
2026-08-06 19:34

[KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability

—

-
2026-08-06 19:34

[KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability

—

-
2026-08-06 19:34

[KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability

—

-
2026-08-06 19:34

[KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability

—

-
2026-08-06 19:31

[SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

—

-
2026-08-06 19:31

[SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

—

-
2026-08-06 19:31

[SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

—

-
2026-08-06 19:31

[SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)

—

-
2026-08-06 19:31

[SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)

—

-
2026-08-06 19:27

APPLE-SA-07-27-2026-8 Safari 26.6

—

-
2026-08-06 19:27

APPLE-SA-07-27-2026-7 visionOS 26.6

—

-
2026-08-06 19:27

APPLE-SA-07-27-2026-6 watchOS 26.6

—

-
2026-08-06 19:27

APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8

—

-
2026-08-06 19:27

APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8

—

-