Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUse-of-uninitialized-value in processHandshakeTLSBlockOpen the advisoryOct 10, 2026
- UnknownCVE-2026-18524Open the advisoryOct 9, 2026
- UnknownCVE-2026-16681Open the advisoryOct 9, 2026
- UnknownCVE-2026-103755Open the advisoryOct 9, 2026
- UnknownMalicious code in passwordcrackv2 (npm)Open the advisoryOct 9, 2026
- High7.2Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set.Check if you run itEPSS 0.15%Oct 9, 2026
- Medium5.3Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission checkCheck if you run itEPSS 0.21%Oct 9, 2026
- Medium5.4Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.Check if you run itEPSS 0.19%Oct 9, 2026
- High7.1Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to keep receiving project data through webhooks they created.Check if you run itEPSS 0.36%Oct 9, 2026
- Medium5.4Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenantsCheck if you run itEPSS 0.18%Oct 9, 2026
- High7.1Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushesCheck if you run itEPSS 0.36%Oct 9, 2026
- Medium5.3Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabledCheck if you run itEPSS 0.26%Oct 9, 2026
- Medium5.3Contao: The registration module re-sends activation mailsCheck if you run itEPSS 0.27%Oct 9, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsCheck if you run itEPSS 0.11%Oct 9, 2026
- Medium5.3Contao: Path traversal in the images controllerCheck if you run itEPSS 0.31%Oct 9, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleCheck if you run itEPSS 0.28%Oct 9, 2026
- Medium4.3Contao: Improper access control in the preview links moduleCheck if you run itEPSS 0.19%Oct 9, 2026
- Medium4.3Contao: Improper access control in the table access voterCheck if you run itEPSS 0.19%Oct 9, 2026
- High7.5Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosureCheck if you run itEPSS 0.36%Oct 9, 2026
- High7.2MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.79%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.52%Oct 9, 2026
- High8.0MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.20%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.40%Oct 9, 2026
- Medium4.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.15%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.34%Oct 9, 2026
Sort