Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Important: lrzsz security, bug fix, and enhancement updateOpen the advisoryOct 16, 2026
- High7.4CGA-xx44-vmvg-84f6Open the advisoryOct 16, 2026
- UnknownMissing case-insensitive matching for CSS url functionOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Low3.3Stack overflow when parsing deeply nested input in pest_grammarsOpen the advisoryOct 16, 2026
- Medium6.6A flaw was found in Nautilus.Check if you run itEPSS 0.13%Oct 16, 2026
- High7.5CGA-xf2x-rh9r-qf2xOpen the advisoryOct 16, 2026
- High7.5CGA-xghp-25vg-r4rhOpen the advisoryOct 16, 2026
- High7.4CGA-wjv5-qxv7-gf9fOpen the advisoryOct 16, 2026
- High7.3vim: Vim: Arbitrary code execution via 'helpfile' option processingCheck if you run itEPSS 0.22%Oct 16, 2026
- Medium6.0A flaw was found in luksmeta.Check if you run itEPSS 0.11%Oct 16, 2026
- UnknownMalicious code in marocolor (PyPI)Open the advisoryOct 16, 2026
- High8.1Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 16, 2026
- High7.1Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow.Check if you run itEPSS 0.21%Oct 16, 2026
- Medium5.3Active debug code vulnerability in SFM Software Technologies Inc.Check if you run itEPSS 0.20%Oct 16, 2026
- Medium6.5Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc.Check if you run itEPSS 0.19%Oct 16, 2026
- UnknownSecurity update for ImageMagickOpen the advisoryOct 16, 2026
- UnknownSecurity update for libsoupOpen the advisoryOct 16, 2026
- Critical9.3An SQL injection vulnerability has been discovered in TSG Profleet.Check if you run itEPSS 0.23%Oct 16, 2026
- Medium6.5Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadca…Check if you run itEPSS 0.25%Oct 16, 2026
- Medium4.5Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium4.4Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpo…Check if you run itEPSS 0.20%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-init…Check if you run itEPSS 0.15%Oct 16, 2026