Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection,…Check if you run itEPSS 0.19%May 21, 2026
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.17%May 21, 2026
- Medium6.1Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an att…Check if you run itEPSS 0.12%May 21, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run which allows an authenticat…Check if you run itEPSS 0.15%May 21, 2026
- Medium5.0Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated…Check if you run itEPSS 0.28%May 21, 2026
- Low3.0Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unint…Check if you run itEPSS 0.09%May 21, 2026
- Low3.9An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cau…Check if you run itEPSS 0.09%May 21, 2026
- Medium4.2A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or caus…Check if you run itEPSS 0.29%May 21, 2026
- High7.1Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive inf…Check if you run itEPSS 0.29%May 21, 2026
- High7.1An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of s…Check if you run itEPSS 0.17%May 21, 2026
- Medium4.2An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or mod…Check if you run itEPSS 0.21%May 21, 2026
- Medium4.5A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause…Check if you run itEPSS 0.07%May 21, 2026
- Medium6.4A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited informatio…Check if you run itEPSS 0.25%May 21, 2026
- High7.4Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or imperso…Check if you run itEPSS 0.30%May 21, 2026
- High7.5Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials.Check if you run itEPSS 0.24%May 21, 2026
- High8.8An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data,…Check if you run itEPSS 0.37%May 21, 2026
- Critical9.8The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2.Patch nowKEVEPSS 9.88%May 21, 2026
- Medium6.5In mlflow/mlflow versions up to 3.9.0, the REST API endpoint and the GraphQL query lack proper per-model authorization checks when basic authentication is enabled.Check if you run itEPSS 0.44%May 21, 2026
- Critical10.0A missing authentication vulnerability exists in the Altium 365 SearchService.Check if you run itEPSS 0.34%May 21, 2026
- Medium6.5A flaw was found in libsolv.Check if you run itEPSS 0.31%May 21, 2026
- High8.7authentik is an open-source identity provider.Check if you run itEPSS 0.50%May 21, 2026
- Medium6.7Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityPatch nowKEVEPSS 13.42%May 21, 2026
- Medium6.5Plane is an open-source project management tool.Check if you run itEPSS 0.29%May 20, 2026
- Medium4.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.Check if you run itEPSS 0.30%May 20, 2026
- High7.5nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.Check if you run itEPSS 0.63%May 20, 2026
Sort