Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Important: hplip security, bug fix, and enhancement updateOct 15, 2026
- Critical9.8Critical: idm:DL1 security, bug fix, and enhancement updateOct 15, 2026
- UnknownImportant: lrzsz security, bug fix, and enhancement updateOct 15, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOct 14, 2026
- UnknownImportant: kernel-rt security, bug fix, and enhancement updateOct 14, 2026
- UnknownImportant: kernel security, bug fix, and enhancement updateOct 14, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsKEVEPSS 2.8%Oct 5, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateSep 30, 2026
- Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.EPSS 0.3%May 27, 2026
- Critical9.9FireFighter is an incident management application.May 11, 2026
- Critical9.3Nhost is an open source Firebase alternative with GraphQL.May 8, 2026
- High8.8The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream…Apr 27, 2026
- Critical9.4This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Apr 21, 2026
- High8.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect inst…Mar 25, 2026
- High8.6This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Mar 17, 2026
- High7.6LibreChat is a ChatGPT clone with additional features.Mar 13, 2026
- High8.0MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Mar 10, 2026
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated useFeb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedFeb 25, 2026
- High8.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0…EPSS 0.3%Dec 22, 2025
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploa…EPSS 0.3%Dec 10, 2025
- Critical9.8Atlassian Confluence Data Center and Server Template Injection VulnerabilityKEVEPSS 100.0%Jan 15, 2024
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityKEVEPSS 100.0%Oct 31, 2023
- Critical9.8Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityKEVEPSS 99.2%Oct 4, 2023
36 records · page 1 of 2
PreviousNext