Lucene search
+L

4109 matches found

RedhatCVE
RedhatCVE
•added 2026/09/14 8:04 a.m.•17 views

CVE-2026-78807

A flaw was found in wpasupplicant. A local attacker can exploit missing validation in the driver-based PMKSA Pairwise Master Key Security Association selection path to bypass proper network context and AKMP Authentication Key Management Protocol matching for PMKSA caching. This could allow the...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•35 views

PT-2026-91440

Name of the Vulnerable Software and Affected Versions Squid proxy affected versions not specified Description An issue involving request smuggling in HTTP Transfer-Encoding allows a trusted client to poison the web cache. This enables the storage of arbitrary malicious content at any URL, which c...

7.7CVSS6AI score0.04678EPSS
SaveExploits0References29
osv_mgasa
osv_mgasa
•added 2026/09/12 3:59 a.m.•32 views

MGASA-2026-0393 Updated perl-Catalyst-Plugin-Static-Simple packages fix a security vulnerability

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable...

5.7CVSS5.7AI score0.00322EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/11 11:56 p.m.•20 views

CVE-2026-89667

A flaw was found in the Linux kernel's Network File System Daemon nfsd file caching mechanism. A race condition can occur during concurrent shutdown operations and file disposal, where a file might be unhashed and moved to a dispose list, but the shutdown process misses it. This can lead to a...

8.1CVSS5.6AI score0.00537EPSS
SaveExploits0References4
Fedora
Fedora
•added 2026/09/11 7:05 p.m.•11 views

[SECURITY] Fedora 45 Update: memcached-1.6.45-1.fc45

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load...

5.8AI score
SaveExploits0
osv_debian
osv_debian
•added 2026/09/11 6:16 p.m.•25 views

DEBIAN-CVE-2026-78807

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/11 6:16 p.m.•23 views

CVE-2026-78807

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS0.0008EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/11 6:16 p.m.•17 views

AZL-103386 CVE-2026-78807 affecting package wpa_supplicant 2.10-3

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

5.3AI score0.0008EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/09/11 6:16 p.m.•18 views

UBUNTU-CVE-2026-78807

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/11 6:16 p.m.•18 views

CVE-2026-78807

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/11 12:00 a.m.•54 views

CVE-2026-78807

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

0.0008EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•6 views

CVE-2026-78807: Origin Validation Error

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•25 views

PT-2026-90040

Name of the Vulnerable Software and Affected Versions wpa supplicant versions prior to 2.12 Description A local attacker can bypass proper network context and AKMP Authentication and Key Management Protocol matching for PMKSA Pairwise Master Key Security Association caching. This occurs due to...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References27
CVE
CVE
•added 2026/09/11 12:00 a.m.•56 views

CVE-2026-78807

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching. This vulnerability is caused by missing validation in the driver-based PMKSA selection path located in wpa.c . No specific exploitation details or re...

5.3AI score0.0008EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-78807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing...

5.3AI score0.0008EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/11 12:00 a.m.•20 views

EUVD-2026-76184

An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...

7.1CVSS5.3AI score0.0008EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/09/10 11:22 p.m.•25 views

qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

7.5CVSS7AI score0.00774EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/10 4:34 p.m.•29 views

qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...

7.5CVSS7AI score0.00774EPSS
SaveExploits0References5
Veracode
Veracode
•added 2026/09/10 7:07 a.m.•20 views

Improper Caching

Spring Cloud Stream is vulnerable to improper caching of the original content type. The vulnerability is due to the Avro handling component caching the original content type, where the cached value is reused for subsequent messages and an attacker can supply a crafted content type to cause...

3.8CVSS5.8AI score0.00211EPSS
SaveExploits0References1Affected Software3
RedHat Linux
RedHat Linux
•added 2026/09/09 1:42 p.m.•18 views

undici: undici: Integrity failure due to caching of unsafe HTTP method responses

A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...

5.3CVSS5.3AI score0.00118EPSS
SaveExploits0References6
Rows per page
Query Builder