Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission checkCheck if you run itEPSS 0.21%Oct 9, 2026
- Medium5.4Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.Check if you run itEPSS 0.19%Oct 9, 2026
- High7.1Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to keep receiving project data through webhooks they created.Check if you run itEPSS 0.36%Oct 9, 2026
- Medium5.4Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenantsCheck if you run itEPSS 0.18%Oct 9, 2026
- High7.1Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushesCheck if you run itEPSS 0.36%Oct 9, 2026
- High7.2MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.79%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.52%Oct 9, 2026
- High8.0MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.20%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.40%Oct 9, 2026
- Medium4.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.15%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.34%Oct 9, 2026
- High7.1CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API CategoryCheck if you run itEPSS 0.30%Oct 9, 2026
- High7.1plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files v…Check if you run itEPSS 0.33%Oct 9, 2026
- High8.5MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.38%Oct 9, 2026
- Medium5.3ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}.Check if you run itEPSS 0.22%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.49%Oct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.30%Oct 9, 2026
- High7.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Oct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.43%Oct 9, 2026
- High8.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.45%Oct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.23%Oct 9, 2026
- High8.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.41%Oct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.6SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount…Check if you run itEPSS 0.87%Oct 9, 2026
- High8.5Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve…Check if you run itEPSS 0.08%Oct 9, 2026
Sort