Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Missing Authorization vulnerability in Apache Kylin.Check if you run itEPSS 0.41%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.25%Oct 16, 2026
- Low3.3libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus methodCheck if you run itEPSS 0.13%Oct 16, 2026
- Medium6.0Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the l…Check if you run itEPSS 0.28%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.40%Oct 16, 2026
- CriticalApache Kylin: JDBC URL Whitelist Verification BypassCheck if you run itEPSS 0.53%Oct 16, 2026
- Medium6.6A flaw was found in Nautilus.Check if you run itEPSS 0.13%Oct 16, 2026
- High7.3vim: Vim: Arbitrary code execution via 'helpfile' option processingCheck if you run itEPSS 0.22%Oct 16, 2026
- Medium6.0A flaw was found in luksmeta.Check if you run itEPSS 0.11%Oct 16, 2026
- High7.1Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow.Check if you run itEPSS 0.21%Oct 16, 2026
- Medium5.3Active debug code vulnerability in SFM Software Technologies Inc.Check if you run itEPSS 0.20%Oct 16, 2026
- Medium6.5Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc.Check if you run itEPSS 0.19%Oct 16, 2026
- Critical9.3An SQL injection vulnerability has been discovered in TSG Profleet.Check if you run itEPSS 0.23%Oct 16, 2026
- Medium6.5Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadca…Check if you run itEPSS 0.25%Oct 16, 2026
- Medium4.5Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium4.4Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpo…Check if you run itEPSS 0.20%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-init…Check if you run itEPSS 0.15%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s permissions before other validations which allows…Check if you run itEPSS 0.18%Oct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, w…Check if you run itEPSS 0.16%Oct 16, 2026
- Medium5.0Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the invited recipient's email address when redeeming team…Check if you run itEPSS 0.16%Oct 16, 2026
- High7.1Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which a…Check if you run itEPSS 0.19%Oct 16, 2026
- Medium6.5Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to limit the size of remote image responses buffered in memory during…Check if you run itEPSS 0.28%Oct 16, 2026
- Medium6.4The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'purchased_plan' parameter in all versions up to…Check if you run itEPSS 0.24%Oct 16, 2026
- High7.5Observable response discrepancy vulnerability in IKAS Technology Inc.Check if you run itEPSS 0.24%Oct 16, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Inje…Check if you run itEPSS 0.24%Oct 16, 2026
Sort