Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Important: ghostscript security updateOpen the advisoryOct 16, 2026
- High8.1Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 16, 2026
- High7.5Important: rpcbind security updateOpen the advisoryOct 16, 2026
- High7.8Important: ghostscript security updateOpen the advisoryOct 16, 2026
- High8.6Important: libsoup security updateOpen the advisoryOct 16, 2026
- High8.8Important: kernel security updateOpen the advisoryOct 16, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOpen the advisoryOct 16, 2026
- High8.8Important: kernel-rt security, bug fix, and enhancement updateOpen the advisoryOct 16, 2026
- Medium6.5Moderate: wireshark security updateOpen the advisoryOct 16, 2026
- High7.5Important: rpcbind security updateOpen the advisoryOct 16, 2026
- High7.5Important: lrzsz security, bug fix, and enhancement updateOpen the advisoryOct 16, 2026
- UnknownMissing case-insensitive matching for CSS url functionOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Unknownis unmaintainedOpen the advisoryOct 16, 2026
- Low3.3Stack overflow when parsing deeply nested input in pest_grammarsOpen the advisoryOct 16, 2026
- UnknownMalicious code in marocolor (PyPI)Open the advisoryOct 16, 2026
- UnknownSecurity update for ImageMagickOpen the advisoryOct 16, 2026
- UnknownSecurity update for libsoupOpen the advisoryOct 16, 2026
- Medium6.5Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadca…Check if you run itEPSS 0.25%Oct 16, 2026
- Medium4.5Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium4.4Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpo…Check if you run itEPSS 0.20%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-init…Check if you run itEPSS 0.15%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s permissions before other validations which allows…Check if you run itEPSS 0.18%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, w…Check if you run itEPSS 0.16%Oct 16, 2026