Lucene search
+L

434 matches found

osv_debian
osv_debian
•added 2026/09/25 11:17 a.m.•24 views

DEBIAN-CVE-2026-98005

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

6.1AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 10:23 a.m.•24 views

CVE-2026-98005

The Linux kernel contains a vulnerability within the erofs file system regarding the encoding of inode_share cache keys . Previously, keys were encoded as fingerprint || domain_id, which created ambiguity as the fingerprint could be incorrectly parsed as part of a domain ID. The fix involves chan...

5.9AI score0.00155EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/25 10:23 a.m.•18 views

CVE-2026-98005 erofs: delimit inode_share cache key components

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

5.8AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/25 10:23 a.m.•44 views

CVE-2026-98005 erofs: delimit inode_share cache key components

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

0.00155EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/25 10:23 a.m.•21 views

CVE-2026-98005

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

6.1AI score0.00155EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-98005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separat...

5.9AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 9:17 p.m.•19 views

CVE-2026-14441

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:58 p.m.•40 views

CVE-2026-14441

A logic flaw in the Java cache key handling of Brocade SANnav allows for improper identifier resolution when processing specific user account structures. This vulnerability exists in SANnav versions before 3.0.1a . The issue has been remediated by updating the internal comparison routines to ensu...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 8:58 p.m.•17 views

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 8:58 p.m.•35 views

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS0.00355EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 8:58 p.m.•21 views

EUVD-2026-86470

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-14441: Comparison Using Wrong Factors

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•8 views

PT-2026-98304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic flaw in Java cache key handling object comparison could lead to improper identifier resolution when processing specific user account structures. This iss...

6.9CVSS5.7AI score0.00355EPSS
SaveExploits0References5
Broadcom
Broadcom
•added 2026/09/22 12:00 a.m.•18 views

Logic flaw in Brocade SANnav Java cache key handling object comparison handling

A logic flaw in Brocade SANnav Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and...

6.9CVSS5.6AI score0.00355EPSS
SaveExploits0
Patchstack
Patchstack
•added 2026/09/21 11:30 a.m.•17 views

WordPress APCu Manager plugin < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution vulnerability

Unauthenticated Stored XSS via Cache Key Pollution vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin APCu Manager versions 4.5.0...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2026/09/18 4:38 p.m.•22 views

grafana: Grafana: Session takeover via Auth Proxy cache key collision

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

8.1CVSS5.9AI score0.00325EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/18 7:16 a.m.•16 views

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

6.5CVSS0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•16 views

CVE-2026-79713: Inconsistent Interpretation of HTTP Requests

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

6.5CVSS5.9AI score0.00294EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-90102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct...

7.5CVSS7.2AI score0.00696EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•9 views

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

7.5CVSS6.5AI score0.00696EPSS
SaveExploits0References1
Rows per page
Query Builder