CVE Vulnerability Catalog

Insufficient validation of member zone data may cause catalog zone transfer to fail.

Concurrency and locking defects in GSS-TSIG may lead to improper authentication mechanism behavior.

Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.

Vulnerability involves incorrect behavior of views with TCP PROXY requests. No further details in the description.

A vulnerability in Honeywell Control Network Module (CNM) where sensitive information is inserted into an unintended directory. An attacker can probe system files to gain unauthorized access to protected data.

The WordPress plugin CF7 WOW Styler up to version 1.7.6 contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

The WordPress plugin Mail Mint up to version 1.19.5 exposes sensitive system information to unauthorized entities, allowing retrieval of embedded sensitive data.

Mattermost Mobile Apps versions up to 2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin, allowing an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO code exchange flow through the mobile application.

Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run, allowing an authenticated team member to create runs in teams where they lack permission by specifying a different team ID in the API request.

Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.

Netatalk versions 2.1.0 through 4.4.2 contain a heap over-read vulnerability in extended attribute (EA) header parsing. A remote authenticated attacker can use crafted EA data to obtain limited information or cause minor service disruption.

An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.

Netatalk versions 2.1.0 through 4.4.2 contain an LDAP injection vulnerability. A remote authenticated attacker can manipulate LDAP queries, obtaining limited information or modifying LDAP entries via crafted filter input.

A vulnerability in Netatalk versions 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, allowing a remote attacker to recover authentication credentials via timing analysis.

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause minor service disruption.

A stack-based buffer overflow in desktop.c in Netatalk versions 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify limited data.

Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.

In mlflow/mlflow up to version 3.9.0, the SearchModelVersions REST API and GraphQL endpoints lack proper authorization checks, allowing any authenticated user to enumerate all model versions. Fixed in version 3.10.0.

The Avada (Fusion) Builder plugin for WordPress up to version 3.15.2 is vulnerable to stored XSS via multiple shortcodes due to insufficient input sanitization and output escaping.