Stack buffer overflow via UCS-2 type confusion in convert_charset()

SQL injection in MySQL CNID backend

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager

Arbitrary file read via attacker-controlled symlink creation

Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file

EA path traversal via incomplete sanitization

Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()

Missing o_len bounds check in pull_charset_flags()

Integer underflow in dsi_writeinit() leads to denial of service

Bitwise OR logic bug enables shell injection

LDAP simple-bind password exposure in log output

Out-of-bounds write in convert_charset() null termination

Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BN_bin2bn in…

Weak cryptography in DHCAST128 UAM

Authentication bypass via admin auth user

Heap out-of-bounds reads in Spotlight RPC unmarshalling

ASP session ID out-of-bounds access