Lucene search
+L

8608 matches found

NVD
NVD
•added 2026/09/08 3:18 p.m.•18 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

9.8CVSS0.00483EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 12:00 a.m.•11 views

EUVD-2026-72850

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

5.7AI score0.00483EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 12:00 a.m.•42 views

CVE-2026-79577

The sso-master v1.0.0 application contains a vulnerability in its /cas/login component. This flaw allows an attacker to bypass authentication and gain access to the application without a password by sending a crafted POST request . Detailed information regarding the specific root cause, exploitab...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

5.8AI score0.00483EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•39 views

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

0.00483EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87101

Name of the Vulnerable Software and Affected Versions sso-master version 1.0.0 Description A flaw in the '/cas/login' endpoint allows attackers to authenticate into the application without providing a password by sending a specially crafted POST request. Recommendations At the moment, there is no...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-79577: Improper Access Control

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/05 12:26 a.m.•13 views

SUSE CVE-2026-80842

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

5.5CVSS6.7AI score0.00177EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/04 7:17 p.m.•8 views

CVE-2026-80116

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to modify hardware configuration by exploiting exposed IOCTLs with no validation on...

8.5CVSS0.00167EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/04 4:18 p.m.•10 views

CVE-2026-80842

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

0.00177EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/04 4:18 p.m.•8 views

AZL-99528 CVE-2026-80842 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

6.7AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 3:54 p.m.•14 views

EUVD-2026-71292

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

6.7AI score0.00177EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/04 3:54 p.m.•39 views

CVE-2026-80842 net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

0.00177EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/04 3:54 p.m.•37 views

CVE-2026-80842

CVE-2026-80842 is a use-after-free in the Linux kernel bridge multicast subsystem, affecting master VLANs . When a master VLAN is deleted, br_multicast_toggle_one_vlan() returns early on the br_vlan_is_brentry() check without clearing BR_VLFLAG_MCAST_ENABLED under br->multicast_lock. The VLAN ...

6.7AI score0.00177EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/04 3:54 p.m.•27 views

CVE-2026-80842 net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

5.8AI score
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•20 views

PT-2026-86229

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description A privilege escalation issue exists in the DirectIo64.sys driver. Local users can...

8.5CVSS5.9AI score0.00167EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•21 views

PT-2026-85720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bridge multicast component of the Linux kernel. The problem occurs during the teardown of a master VLAN's multicast context. Specifically, the br...

8.8CVSS7.5AI score0.00434EPSS
SaveExploits3References129
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•8 views

CVE-2026-80842: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...

6.7AI score0.00177EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-80842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before...

6.5AI score0.00177EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/09/03 2:33 p.m.•20 views

kernel: netfilter: ctnetlink: ensure safe access to master conntrack

A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References5
Rows per page
Query Builder