Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory.Check if you run itEPSS 0.21%May 21, 2026
- Critical9.1Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface.Check if you run itEPSS 0.97%May 21, 2026
- Critical9.9Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an maliciou…Check if you run itEPSS 0.33%May 21, 2026
- High7.8The setcred(2) system call is only available to privileged users.Check if you run itEPSS 0.41%May 21, 2026
- Low3.7A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, re…Check if you run itEPSS 0.33%May 21, 2026
- Low3.7Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, w…Check if you run itEPSS 0.33%May 21, 2026
- Low3.7Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker t…Check if you run itEPSS 0.34%May 21, 2026
- Low3.1A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection,…Check if you run itEPSS 0.19%May 21, 2026
- Medium5.3Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.17%May 21, 2026
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.17%May 21, 2026
- Medium6.1Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an att…Check if you run itEPSS 0.12%May 21, 2026
- Low3.1An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to c…Check if you run itEPSS 0.26%May 21, 2026
- Low3.1A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that trig…Check if you run itEPSS 0.32%May 21, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run which allows an authenticat…Check if you run itEPSS 0.15%May 21, 2026
- Medium6.7Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.Check if you run itEPSS 0.13%May 21, 2026
- Medium5.0Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated…Check if you run itEPSS 0.28%May 21, 2026
- Low3.0Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unint…Check if you run itEPSS 0.09%May 21, 2026
- Low3.1An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of servi…Check if you run itEPSS 0.32%May 21, 2026
- Low3.9An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cau…Check if you run itEPSS 0.09%May 21, 2026
- High7.6Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the…Check if you run itEPSS 0.32%May 21, 2026
- Medium4.2A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or caus…Check if you run itEPSS 0.29%May 21, 2026
- High7.1Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive inf…Check if you run itEPSS 0.29%May 21, 2026
- Medium4.2An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruptio…Check if you run itEPSS 0.13%May 21, 2026
- High7.1An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of s…Check if you run itEPSS 0.17%May 21, 2026
- Medium4.2An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or mod…Check if you run itEPSS 0.21%May 21, 2026
Sort