CVE Vulnerability Catalog

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, allowing a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack.

Netatalk versions 2.1.0 through 4.4.2 insert LDAP simple-bind passwords into log output in cleartext, allowing an attacker with access to log files to obtain LDAP credentials.

In Netatalk versions 3.0.2 through 4.4.2, an improper link resolution vulnerability allows a remote authenticated attacker to read or overwrite arbitrary files via attacker-controlled symlink creation.

In Netatalk versions 2.0.4 through 4.4.2, an out-of-bounds write due to improper null termination in convert_charset() allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data.

Netatalk versions 2.0.4 through 4.4.2 contain a stack-based buffer overflow via UCS-2 type confusion in convert_charset(). A remote authenticated attacker can execute arbitrary code or cause a denial of service.

Netatalk versions 3.1.0 through 4.4.2 contain an SQL injection vulnerability in the MySQL CNID backend, allowing a remote authenticated attacker to access, modify data, or cause a denial of service.

Vulnerability in authentik (open-source identity provider) in versions up to 2025.12.4 and 2026.2.0-rc1 through 2026.2.2. An attacker can bypass authentication via SAML NameID XML Comment Injection, allowing access to other accounts if the attacker has an account on the SAML source and can modify NameID.

nimiq-blockchain prior to version 1.4.0 has a vulnerability where a malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record. The record contains a TaggedSigned<ValidatorRecord, KeyPair> with a signature field whose byte length is not exactly 64, causing a panic when unwrap() is called in the Ed25519 implementation. The BLS implementation correctly returns false, but Ed25519 panics.

A potential security vulnerability has been identified in HP Linux Imaging and Printing Software (HPLIP) that may allow escalation of privileges and/or arbitrary code execution via operating system command injection.

Crypt::SaltedHash for Perl versions up to 0.09 is susceptible to timing attacks. It uses Perl's built-in eq comparison, and timing discrepancies could be used to guess the underlying hash.

Stored XSS vulnerability in Taiko AG1000-01A SMS Alert Gateway. An authenticated attacker can inject persistent JavaScript by fragmenting malicious payloads across admin form fields, bypassing length restrictions.

The CSP report endpoint in MISP intended to limit reports to 1 KB but incorrectly accepted reports up to 1 MB before truncation. If reachable by untrusted clients, attackers can generate excessive logs, leading to resource exhaustion or log flooding.

Active debug code exists in the ARN resolver of amazon-mq rabbitmq-aws before version 0.2.1. A debug ARN scheme (arn:aws-debug:file) accepted by the PUT /api/aws/arn/validate validation endpoint might allow remote authenticated users to perform arbitrary file reads on any file accessible to the RabbitMQ process.

Use after free in DOM in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Heap buffer overflow in the Chromecast component of Google Chrome on Android, Linux, and ChromeOS prior to 148.0.7778.179 allows a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. Severity is medium.

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Use-after-free vulnerability in the WebRTC component in Google Chrome prior to 148.0.7778.179. A remote attacker can execute arbitrary code via a crafted HTML page.

Google Chrome prior to 148.0.7778.179 has a heap buffer overflow in WebRTC that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Type Confusion in the GFX component in Google Chrome on Linux and ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)