Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.6 CVE-2024-55073 A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profi… Mealie No fix yet Fix from $1,9502025-03-27 MEDIUM 5.4 CVE-2024-55072 A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profi… Mealie No fix yet Fix from $1,6002025-03-27 CRITICAL 9.8 CVE-2022-34615 Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application via brute-forc… Mealie Mitigation only Fix from $2,3002022-08-19 MEDIUM 6.5 CVE-2022-34621 Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords … Mealie Mitigation only Fix from $1,6002022-08-19 MEDIUM 5.9 CVE-2022-34624 Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET… Mealie Mitigation only Fix from $1,6002022-08-19 MEDIUM 5.3 CVE-2022-32425 The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time. Mealie Mitigation only Fix from $1,6002022-07-14