Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network.Check if you run itEPSS 0.30%May 21, 2026
- Medium6.5In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected.Check if you run itEPSS 0.19%May 21, 2026
- High8.4ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls.Check if you run itEPSS 0.20%May 21, 2026
- Medium5.5When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace daemon to retrieve the list of extended attribu…Check if you run itEPSS 0.28%May 21, 2026
- High7.8A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor.Check if you run itEPSS 0.17%May 21, 2026
- Medium6.5Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to FailCheck if you run itEPSS 0.35%May 21, 2026
- High7.5Concurrency and locking defects in GSS-TSIGCheck if you run itEPSS 0.26%May 21, 2026
- High7.5Insufficient Validation of Autoprimary SOA QueriesCheck if you run itEPSS 0.36%May 21, 2026
- High8.6Insufficient Validation of Names During AXFRCheck if you run itEPSS 0.24%May 21, 2026
- Medium4.8Incorrect Behaviour of Views with TCP PROXY RequestsCheck if you run itEPSS 0.14%May 21, 2026
- High8.8libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available.Check if you run itEPSS 0.17%May 21, 2026
- High7.8A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01).Check if you run itEPSS 0.24%May 21, 2026
- High8.6Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion.Check if you run itEPSS 0.12%May 21, 2026
- Low3.7A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a rem…Check if you run itEPSS 0.24%May 21, 2026
- Medium5.9Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory.Check if you run itEPSS 0.21%May 21, 2026
- Critical9.1Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface.Check if you run itEPSS 0.97%May 21, 2026
- Critical9.9Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an maliciou…Check if you run itEPSS 0.33%May 21, 2026
- High7.8The setcred(2) system call is only available to privileged users.Check if you run itEPSS 0.41%May 21, 2026
- Low3.7A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, re…Check if you run itEPSS 0.33%May 21, 2026
- Low3.7Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, w…Check if you run itEPSS 0.33%May 21, 2026
- Low3.7Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker t…Check if you run itEPSS 0.34%May 21, 2026
- Low3.1A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection,…Check if you run itEPSS 0.19%May 21, 2026
- Medium5.3Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.17%May 21, 2026
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.17%May 21, 2026
- Medium6.1Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an att…Check if you run itEPSS 0.12%May 21, 2026
Sort