CVE Vulnerability Database
Search and browse 397,909 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44071 | LOW | 3.7 | 0.3% | May 21, 2026 | Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at ru... |
| CVE-2026-44057 | LOW | 3.1 | 0.2% | May 21, 2026 | A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code pat... |
| CVE-2026-27393 | MEDIUM | 5.3 | 0.2% | May 21, 2026 | Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2026-27349 | MEDIUM | 4.3 | 0.2% | May 21, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint all... |
| CVE-2026-22880 | MEDIUM | 6.1 | 0.1% | May 21, 2026 | Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO aut... |
| CVE-2026-7836 | LOW | 3.1 | 0.3% | May 21, 2026 | An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handl... |
| CVE-2026-7835 | LOW | 3.1 | 0.3% | May 21, 2026 | A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a mino... |
| CVE-2026-4055 | MEDIUM | 4.3 | 0.2% | May 21, 2026 | Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when crea... |
| CVE-2026-44076 | MEDIUM | 6.7 | 0.1% | May 21, 2026 | Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS co... |
| CVE-2026-44073 | MEDIUM | 5 | 0.3% | May 21, 2026 | Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a re... |
| CVE-2026-44072 | LOW | 3 | 0.1% | May 21, 2026 | Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which ... |
| CVE-2026-44070 | LOW | 3.1 | 0.3% | May 21, 2026 | An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenti... |
| CVE-2026-44069 | LOW | 3.9 | 0.1% | May 21, 2026 | An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain l... |
| CVE-2026-44068 | HIGH | 7.6 | 0.3% | May 21, 2026 | Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authe... |
| CVE-2026-44067 | MEDIUM | 4.2 | 0.3% | May 21, 2026 | A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated... |
| CVE-2026-44066 | HIGH | 7.1 | 0.3% | May 21, 2026 | Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote... |
| CVE-2026-44065 | MEDIUM | 4.2 | 0.1% | May 21, 2026 | An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify ... |
| CVE-2026-44064 | HIGH | 7.1 | 0.2% | May 21, 2026 | An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to ob... |
| CVE-2026-44063 | MEDIUM | 4.2 | 0.2% | May 21, 2026 | An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDA... |
| CVE-2026-44062 | HIGH | 7.5 | 0.4% | May 21, 2026 | A missing output length bounds check in pull_charset_flags() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticat... |
| CVE-2026-44061 | MEDIUM | 5.9 | 0.4% | May 21, 2026 | Netatalk 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, which allows a remote attacker ... |
| CVE-2026-44060 | HIGH | 7.5 | 0.3% | May 21, 2026 | An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to caus... |
| CVE-2026-44059 | MEDIUM | 4.5 | 0.1% | May 21, 2026 | A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain lim... |
| CVE-2026-44058 | HIGH | 7.2 | 0.5% | May 21, 2026 | An authentication bypass vulnerability in Netatalk 2.2.2 through 4.4.2 allows a remote privileged user to authenticate a... |
| CVE-2026-44056 | MEDIUM | 6.4 | 0.3% | May 21, 2026 | A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause... |