Lucene search
+L

150 matches found

Cvelist
Cvelist
•added 2026/05/21 7:34 a.m.•67 views

CVE-2026-44055 Bitwise OR logic bug enables shell injection

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code...

7.5CVSS0.0061EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/21 7:34 a.m.•13 views

CVE-2026-44055 Bitwise OR logic bug enables shell injection

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code...

7.5CVSS6.1AI score0.0061EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/21 12:00 a.m.•21 views

PT-2026-42437

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths...

3.7CVSS5.8AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/21 12:00 a.m.•3 views

CVE-2026-44074: Incorrect Calculation

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths...

3.7CVSS5.9AI score0.0039EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•22 views

Netatalk 操作系统命令注入漏洞

Netatalk is an open-source software developed by Netatalk Inc. It provides AFP file server functionality for Classic Mac OS and macOS on Unix-like operating systems. Versions 3.1.4 to 4.4.2 of Netatalk contained a vulnerability related to operating system command injection. This vulnerability...

7.5CVSS6.1AI score0.0061EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/21 12:00 a.m.•1 views

CVE-2026-44055: Improper Neutralization of Special Elements used in an OS Command

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code...

7.5CVSS6.5AI score0.0061EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•36 views

Netatalk 安全漏洞

Netatalk is an open-source software developed by Netatalk. It provides AFP file server functionality for Classic Mac OS and macOS on Unix-like operating systems. Versions 2.1.0 to 4.4.2 of Netatalk contain security vulnerabilities. These vulnerabilities stem from the use of bitwise OR operations...

3.7CVSS5.8AI score0.0039EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/19 12:00 a.m.•44 views

MongoDB 7.0.x < 7.0.34 / 8.0.x < 8.0.23 / 8.2.x < 8.2.9 / 8.3.x < 8.3.2 Multiple Vulnerabilities (SERVER-122032 / SERVER-122449)

The version of MongoDB installed on the remote host is 7.0 prior to 7.0.34, 8.0 prior to 8.0.23, 8.2 prior to 8.2.9, or 8.3 prior to 8.3.2. It is, therefore, affected by multiple vulnerabilities: - An authenticated user can cause excess memory usage via bitwise match expression AST processing of...

8.8CVSS5.8AI score0.00451EPSS
SaveExploits0References4
OSV
OSV
•added 2026/05/14 8:50 a.m.•29 views

BIT-MONGODB-2026-8199 Post-auth memory exhaustion via bitwise match expressions

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/14 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-8199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear...

7.1CVSS5.5AI score0.00451EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/13 6:30 p.m.•34 views

EUVD-2026-29890

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/13 4:17 a.m.•15 views

UBUNTU-CVE-2026-8199

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/13 4:17 a.m.•14 views

CVE-2026-8199

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/13 12:05 a.m.•16 views

CVE-2026-8199

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/13 12:05 a.m.•10 views

CVE-2026-8199 Post-auth memory exhaustion via bitwise match expressions

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/13 12:05 a.m.•12 views

CVE-2026-8199 Post-auth memory exhaustion via bitwise match expressions

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.9AI score
SaveExploits0References3
MongoDB
MongoDB
•added 2026/05/13 12:05 a.m.•21 views

Post-auth memory exhaustion via bitwise match expressions

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/05/13 12:05 a.m.•74 views

CVE-2026-8199 Post-auth memory exhaustion via bitwise match expressions

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS0.00451EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/13 12:05 a.m.•99 views

CVE-2026-8199

CVE-2026-8199 affects MongoDB Server before certain patched versions across multiple lines: v7.0 &lt;7.0.34, v8.0 &lt;8.0.23, v8.2 &lt;8.2.9, and v8.3

7.1CVSS5.8AI score0.00451EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•3 views

CVE-2026-8199: Improperly Controlled Sequential Memory Allocation

An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to...

7.1CVSS6.6AI score0.00451EPSS
SaveExploits0References3
Rows per page
Query Builder