Sec Feed Reader

CERT/CC Vulnerability Notes

Uebersicht

Quellen-ID (source_id): certcc_vuln
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	-	Tue, 20 Oct 2026 18:09:44 GMT

Letzte Eintraege

85 Eintraege · 50 pro Seite · Seite 2 von 2

Veroeffentlicht	Titel	CVEs	Severity
2026-07-09 17:03	VU#152953: PayRange Android app version 7.0.7 contains multiple vulnerabilities	CVE-2026-13461 CVE-2026-13462	CRITICAL
2026-07-09 12:37	VU#734812: Xerte Online Toolkit contains an authentication bypass that allows for RCE	CVE-2026-12116 CVE-2026-14261	CRITICAL
2026-07-08 14:03	VU#849433: Adalo Database API Enables Cross-App User Data Extraction via Over-Fetching and Missing Authorization Controls	CVE-2026-10706 CVE-2026-10708	HIGH
2026-07-06 19:22	VU#213560: Tenda firmware (multiple versions) contains hidden authentication backdoor	CVE-2026-11405	CRITICAL
2026-07-06 17:59	VU#828543: HP Deskjet 2800 Printer Series Webservers contain Missing Authorization Vulnerability	CVE-2026-13753	HIGH
2026-07-02 14:34	VU#639124: Multiple local privilege escalation vulnerabilities in Little Orbits GameFirst Anti-Cheat	CVE-2026-12166 CVE-2026-12167 CVE-2026-12168	HIGH
2026-06-22 18:41	VU#936962: Multiple file parsing vulnerabilities in FastStone Image Viewer 8.3.0.0	CVE-2026-30040 CVE-2026-30041	HIGH
2026-06-22 16:16	VU#226679: Microsoft WinRE allows for bypass of UEFI/BIOS password enforcement	CVE-2026-45585	MEDIUM
2026-06-18 19:41	VU#457458: Vendor-signed UEFI applications found vulnerable to Secure Boot bypass	CVE-2024-7344	HIGH
2026-06-17 21:02	VU#380058: SignalRGB kernel driver contains improper access control and IOCTL vulnerabilities	CVE-2026-8049 CVE-2026-8050	HIGH
2026-06-11 14:30	VU#862559: crypton-x509-validation Haskell libraries do not enforce X.509 NameConstraints	CVE-2026-9648	CRITICAL
2026-06-09 18:10	VU#616257: Microsoft-signed UEFI shim bootloaders vulnerable to Secure Boot bypass	CVE-2024-7344 CVE-2026-10797 CVE-2026-8863	HIGH
2026-06-03 17:58	VU#595768: Securly Chrome Extension contains multiple weak encryption and access control vulnerabilities	CVE-2026-8874 CVE-2026-8876 CVE-2026-8878 +4	HIGH
2026-06-02 14:27	VU#615987: Missing IPsec Integrity Protection for IMS SIP Signaling in Verizon VoLTE Deployments	CVE-2026-10629	HIGH
2026-06-02 14:06	VU#265691: Appsmiths SQL Query autocomplete renderer contains a cross site scripting vulnerability	CVE-2026-7299	MEDIUM
2026-06-02 13:54	VU#873170: Collibra Agent contains improper authentication and path traversal vulnerabilities	CVE-2026-10621 CVE-2026-10622	HIGH
2026-06-01 16:21	VU#158530: PCTCore64.sys Windows kernel driver contains missing access control vulnerability	CVE-2026-8501	HIGH
2026-05-28 16:13	VU#780781: Casdoor contains multiple authentication bypass and access management vulnerabilities	CVE-2026-9090 CVE-2026-9091 CVE-2026-9092 +6	CRITICAL
2026-05-20 21:23	VU#980487: Local privilege escalation in Linux Kernel (Dirty Frag)	CVE-2026-43284 CVE-2026-43500	HIGH
2026-05-18 10:40	VU#777338: SGLang contains two remote code execution and one path traversal vulnerability	CVE-2026-3059 CVE-2026-3060 CVE-2026-7301 +2	CRITICAL
2026-05-11 16:49	VU#471747: dnsmasq contains several vulnerabilities, including attacker DNS redirect, privilege escalation, and heap manipulation	CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 +3	HIGH
2026-05-11 14:48	VU#937808: Casdoor contains Arbitrary File Write vulnerability	CVE-2026-6815	MEDIUM
2026-05-08 19:23	VU#260001: Linux kernel contains local privilege escalation vulnerability (Copy Fail)	CVE-2026-31431	HIGH
2026-04-23 12:28	VU#748485: Unauthenticated configuration modification vulnerability in Central Office Services - Content Hosting Component	CVE-2026-5756	HIGH
2026-04-22 13:09	VU#518910: Ollama GGUF Quantization Remote Memory Leak	CVE-2026-5757	-
2026-04-21 15:16	VU#890999: Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser	CVE-2026-5754	MEDIUM
2026-04-21 13:37	VU#414811: Terrarium contains a vulnerability that allows arbitrary code execution	CVE-2026-5752	CRITICAL
2026-04-20 13:46	VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file	CVE-2026-5760	CRITICAL
2026-04-09 14:40	VU#536588: Multiple Heap Buffer Overflows in Orthanc DICOM Server	CVE-2026-5437 CVE-2026-5438 CVE-2026-5439 +6	CRITICAL
2026-04-02 17:23	VU#951662: MuPDF by Artifex contains integer overflow vulnerability.	CVE-2026-3308	HIGH
2026-03-30 18:14	VU#655822: Kyverno is vulnerable to server-side request forgery (SSRF)	CVE-2026-4789	CRITICAL
2026-03-30 15:50	VU#221883: CrewAI contains multiple vulnerabilities including SSRF, RCE and local file read	CVE-2026-2275 CVE-2026-2285 CVE-2026-2286 +1	CRITICAL
2026-03-24 17:58	VU#330121: IDrive for Windows contains local privilege escalation vulnerability	CVE-2026-1995	HIGH
2026-03-24 14:11	VU#577436: Hard coded credentials vulnerability in GoHarbor's Harbor	CVE-2026-4404	CRITICAL
2026-03-16 15:30	VU#624941: LibreChat RAG API contains a log-injection vulnerability	CVE-2026-4276	HIGH

Alle Quellen