Lucene search
+L

409 matches found

Cvelist
Cvelist
added 2026/05/21 7:34 a.m.56 views

CVE-2026-44066 Heap out-of-bounds reads in Spotlight RPC unmarshalling

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...

7.1CVSS0.0029EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/21 7:34 a.m.25 views

EUVD-2026-31212

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/21 7:34 a.m.45 views

CVE-2026-44066

CVE-2026-44066 affects Netatalk 3.1.0 through 4.4.2, where heap out-of-bounds reads occur during Spotlight RPC unmarshalling. The issue is fixed in Netatalk 4.4.3. Debian and Alpine advisories describe remote exposure leading to information disclosure or minor service disruption, with the vulnera...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 7:34 a.m.11 views

CVE-2026-44066

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/21 7:34 a.m.15 views

CVE-2026-44066 Heap out-of-bounds reads in Spotlight RPC unmarshalling

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/05/21 7:34 a.m.28 views

CVE-2026-44066

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.31 views

PT-2026-42422

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.0 through 4.4.2 Description Multiple heap out-of-bounds reads occur in the Spotlight RPC unmarshalling code. A remote authenticated attacker can exploit this to obtain sensitive information or cause a minor service...

7.1CVSS5.9AI score0.0029EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.22 views

Netatalk 安全漏洞

Netatalk is an open-source software developed by Netatalk Inc., which provides AFP file server functionality for Classic Mac OS and macOS on Unix-like operating systems. Versions 3.0.0 to 4.4.2 of Netatalk contain security vulnerabilities. These vulnerabilities stem from dead-end checks in the...

3.1CVSS5.9AI score0.00186EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.20 views

Netatalk 缓冲区错误漏洞

Netatalk is an open-source software developed by Netatalk. It provides AFP file server functionality for Classic Mac OS and macOS on Unix-like operating systems. Versions 3.1.0 to 4.4.2 of Netatalk contain a buffer error vulnerability. This vulnerability stems from multiple heap out-of-bound read...

7.1CVSS6AI score0.0029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.27 views

PT-2026-42435

Name of the Vulnerable Software and Affected Versions Netatalk versions 3.0.0 through 4.4.2 Description A dead bounds check in the Spotlight RPC unmarshaller results in an unreachable code path that provides no effective bounds protection. This may allow a remote authenticated attacker to obtain...

3.1CVSS6AI score0.00186EPSS
SaveExploits0References10
OSV
OSV
added 2026/05/09 11:11 a.m.17 views

OESA-2026-2226 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

7.8CVSS5.9AI score0.00206EPSS
SaveExploits37References38
BDU FSTEC
BDU FSTEC
added 2026/05/07 12:00 a.m.10 views

The vulnerability of the spotlight_dissect_query_loop() function in the AFP Spotlight protocol analyzer for computer network traffic analysis tools by Wireshark allows a hacker to induce a service failure.

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2026/05/04 9:09 a.m.14 views

CVE-2026-5401

A flaw was found in Wireshark. An attacker could craft a malicious network trace file that, when opened by a user, would trigger a crash in the AFP Spotlight protocol dissector. This vulnerability leads to a denial of service, making the application unavailable. Mitigation To mitigate this issue,...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-5401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5401 Note that Nessus relies on the...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2026/05/01 9:16 a.m.13 views

WordPress Spotlight Social Feeds – Block, Shortcode, and Widget plugin <= 1.7.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Spotlight Social Media Feeds versions = 1.7.0...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2026/05/01 2:12 a.m.17 views

SUSE CVE-2026-5401

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00122EPSS
SaveExploits1References7
NVD
NVD
added 2026/04/30 7:16 a.m.13 views

CVE-2026-5401

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00122EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/30 7:16 a.m.8 views

AZL-85190 CVE-2026-5401 affecting package wireshark 4.4.7-2

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS6.1AI score0.00122EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/30 7:16 a.m.9 views

UBUNTU-CVE-2026-5401

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/30 5:39 a.m.7 views

CVE-2026-5401 Uncontrolled Recursion in Wireshark

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00122EPSS
SaveExploits1References2
Rows per page
Query Builder