CVE Vulnerability Catalog

Netatalk versions 2.0.4 through 4.4.2 have a stack-based buffer overflow due to UCS-2 type confusion in the convert_charset() function. This allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.

CVE-2026-44047 is an SQL injection vulnerability in the MySQL CNID backend in Netatalk versions 3.1.0 through 4.4.2. It allows a remote authenticated attacker to gain unauthorized access to data, modify data, or cause a denial of service.

authentik is an open-source identity provider that was vulnerable to Authentication Bypass through SAML NameID XML Comment Injection in versions 2025.12.4 and prior, and 2026.2.0-rc1 through 2026.2.2. An attacker could manipulate the NameID value, potentially gaining access to other accounts.

In versions 1.3.0 and below, a malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record. The crafted record contains a signature field with a byte length not equal to 64, leading to a panic during verification.

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software, which may allow privilege escalation and/or arbitrary code execution via operating system command injection.

Crypt::SaltedHash versions through 0.09 for Perl are susceptible to timing attacks. The use of Perl's built-in eq comparison may lead to hash disclosure through timing discrepancies.

The Taiko AG1000-01A SMS Alert Gateway in versions Rev 7.3 and Rev 8 contains a stored XSS vulnerability in the embedded web configuration interface. This allows authenticated attackers to execute persistent JavaScript by fragmenting malicious payloads across multiple administrative form fields.

The CSP report endpoint in MISP intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. In deployments where the endpoint is reachable by untrusted clients, this could allow attackers to generate excessive log volume.

Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1, which may allow remote authenticated users to perform arbitrary file reads on any file accessible to the RabbitMQ process.

W Google Chrome przed wersją 148.0.7778.179 wystąpiła podatność typu use after free w DOM, która umożliwiała zdalnemu atakującemu wykonanie dowolnego kodu wewnątrz piaskownicy za pomocą spreparowanej strony HTML.

Przepełnienie bufora na stercie w Chromecast w Google Chrome na Androidzie, Linuksie i ChromeOS przed wersją 148.0.7778.179 umożliwia lokalnemu atakującemu wykonanie dowolnego kodu wewnątrz piaskownicy za pomocą złośliwego ruchu sieciowego.

In Google Chrome prior to version 148.0.7778.179, an out of bounds read in GPU allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use after free in WebRTC in Google Chrome prior to version 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Heap buffer overflow in WebRTC in Google Chrome prior to version 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Use after free in XR in Google Chrome on Windows prior to version 148.0.7778.179 allows a remote attacker to execute arbitrary code via a crafted HTML page.

A Type Confusion vulnerability in GFX in Google Chrome on Linux and ChromeOS prior to version 148.0.7778.179 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted video file.

Use after free in QUIC in Google Chrome prior to version 148.0.7778.179 allows a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic.

A use-after-free vulnerability in the GPU component of Google Chrome on Windows prior to version 148.0.7778.179 was discovered. A remote attacker can exploit a crafted HTML page to execute arbitrary code within a sandbox.

A critical Use-After-Free vulnerability in the WebRTC component of Google Chrome on Linux prior to version 148.0.7778.179 allows a remote attacker to execute arbitrary code via a crafted HTML page.

Yii 2 is a PHP application framework, versions 2.0.54 and prior contain flawed logic in the view rendering method View::renderPhpFile() that leads to Local File Inclusion (LFI). A caller-controlled variable can overwrite the internal variable specifying which file to include.