Lucene search
+L

78 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2015-4975

Malware in sbrugna...

3.3CVSS4.2AI score0.00285EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-8610

Malicious code in bioql PyPI...

5.4CVSS9AI score0.0014EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/10/01 12:00 a.m.•12 views

The vulnerability of IBM OpenPages, a risk management platform for enterprises, relates to the disclosure of information through browser caching, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM OpenPages, a risk management platform for enterprises, relates to the disclosure of information through browser caching. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information...

4CVSS5.8AI score0.00128EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2018-18640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure...

6.5CVSS6.8AI score0.01157EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/06/09 12:00 a.m.•22 views

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in their ability to cache information through browser caching, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to the disclosure of information through browser caching. Exploiting these vulnerabilities can allow attackers to gain...

4CVSS5.5AI score0.00179EPSS
SaveExploits0References2Affected Software2
RedhatCVE
RedhatCVE
•added 2025/03/30 12:42 p.m.•25 views

CVE-2025-31439

Cross-Site Request Forgery CSRF vulnerability in tobias.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a...

5.4CVSS8.6AI score0.0014EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/28 12:54 p.m.•15 views

WordPress Browser Caching with .htaccess 1.2.1 plugin - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Browser Caching with .htaccess versions 1.2.1...

5.4CVSS6.8AI score0.0014EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/28 12:15 p.m.•17 views

CVE-2025-31439

Cross-Site Request Forgery CSRF vulnerability in tobias.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a...

5.4CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/28 11:54 a.m.•23 views

CVE-2025-31439 WordPress Browser Caching with .htaccess 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in tobias.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a...

5.4CVSS7.2AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 11:54 a.m.•33 views

CVE-2025-31439 WordPress Browser Caching with .htaccess 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in tobias.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a...

5.4CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/28 11:54 a.m.•75 views

CVE-2025-31439

CVE-2025-31439 is a CSRF vulnerability reported for the WordPress plugin “Browser Caching with .htaccess” (affected version: 1.2.1 and later). The connected Wordfence details explicitly mark the issue as a Cross-Site Forgery for Browser Caching with .htaccess 1.2.1, and list the patch status as U...

5.4CVSS8.6AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•13 views

WordPress plugin Browser Caching with .htaccess 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

5.4CVSS8.6AI score0.0014EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•2 views

CVE-2025-31439: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tobias.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a...

5.4CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Pen Test Partners Blog
Pen Test Partners Blog
•added 2025/03/12 6:51 a.m.•23 views

Take control of Cache-Control and local caching

TL;DR Caching speeds up website content delivery What caching directives are and how to use them The No-cache directive does not prevent caching The No-store directiveprevents caching Introduction The HTTP Cache-Control header is sometimes misunderstood. It's important because it is used to speci...

6.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/06 12:00 a.m.•12 views

The vulnerability of the IBM Automation Decision Services platform for modeling and managing business solutions lies in its ability to disclose information through browser caching. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Automation Decision Services platform for modeling and managing business solutions relates to the disclosure of information through browser caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.2CVSS5.4AI score0.00184EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/26 12:00 a.m.•8 views

PT-2025-2404 · Ibm · Ibm Automation Decision Services

Name of the Vulnerable Software and Affected Versions: IBM Automation Decision Services version 23.0.2 Description: The issue is related to the disclosure of information through browser caching. This can allow an attacker to gain unauthorized access to protected information. The problem arises...

6.2CVSS6.3AI score0.00184EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•17 views

The vulnerability of the IBM DevOps Velocity lifecycle management platform (formerly known as IBM UrbanCode Velocity) relates to the disclosure of information through browser caching, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the IBM DevOps Velocity formerly IBM UrbanCode Velocity lifecycle management platform relates to the disclosure of information through browser caching. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4CVSS5.4AI score0.00212EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2024/09/04 4:08 p.m.•14 views

CVE-2024-45314 Flask-AppBuilder login form allows browser to cache sensitive fields

Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If...

3.6CVSS7AI score0.00265EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
•added 2024/09/04 12:00 a.m.•104 views

Flask-AppBuilder's login form allows browser to cache sensitive fields

Auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources...

5.5CVSS6.6AI score0.00265EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/21 12:00 a.m.•17 views

Vulnerability: The software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow is vulnerable due to a flaw related to browser caching, which allows attackers to disclose protected information.

The vulnerability of Apache Airflow’s software for creating, monitoring, and orchestrating data processing scenarios is related to the disclosure of information through browser caching. Exploiting this vulnerability can allow attackers to disclose sensitive information via the Cache-Control heade...

3.3CVSS5.8AI score0.00321EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder