Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /s…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments.Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.9InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the…Open the advisoryOct 10, 2026
- UnknownMalicious code in agent-vx (PyPI)Open the advisoryOct 10, 2026
- UnknownMalicious code in media-manager5 (PyPI)Open the advisoryOct 10, 2026
- Medium5.3Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission checkOpen the advisoryOct 9, 2026
- Medium5.4Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.Open the advisoryOct 9, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleCheck if you run itEPSS 0.27%Oct 9, 2026
- Medium4.3Contao: Improper access control in the preview links moduleCheck if you run itEPSS 0.19%Oct 9, 2026
- Medium4.3Contao: Improper access control in the table access voterCheck if you run itEPSS 0.19%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.28%Oct 9, 2026
- High8.6SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount…Check if you run itEPSS 0.61%Oct 9, 2026
- UnknownMalicious code in pxnpm (npm)Open the advisoryOct 9, 2026
- High7.1PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypassCheck if you run itEPSS 0.46%Oct 8, 2026
- Critical9.3Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpo…Check if you run itEPSS 0.54%Oct 8, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obt…Check if you run itEPSS 0.39%Oct 8, 2026
- High8.7An authentication flaw exists in the Brocade ASCG administrative management service component.Check if you run itEPSS 0.21%Oct 8, 2026
- High8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensit…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.6A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosti…Check if you run itEPSS 0.07%Oct 8, 2026
- Medium6.9A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versio…Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS vers…Check if you run itEPSS 1.44%Oct 8, 2026
- High7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an aut…Check if you run itEPSS 1.46%Oct 8, 2026
- Medium5.9An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.43%Oct 8, 2026