25429 matches found
Improper Cache Control
Liferay Portal is vulnerable to improper cache control. The vulnerability is due to the use of incorrect cache-control headers, which allows an attacker to gain unauthorized access to downloaded files through the browser’s cache...
Unity Linux 20.1060a / 20.1070a Security Update: bind (UTSA-2025-991236)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991236 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...
CVE-2025-43410
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes...
CVE-2025-43410
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.2, macOS Sonoma 14.8.2. An attacker with physical access may be able to view deleted notes...
CVE-2025-43410
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes...
CVE-2025-43410
CVE-2025-43410 affects macOS where an attacker with physical access could view deleted notes due to improved handling of caches. The vulnerability is tied to macOS Sequoia (15.7.2), macOS Tahoe (26.2), and macOS Sonoma (14.8.2) releases, which patch the issue. Connected disclosures confirm the ro...
EUVD-2025-203164
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2. An attacker with physical access may be able to view deleted notes...
CVE-2025-43410
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes...
CVE-2025-64702 vulnerabilities
Vulnerabilities for packages: spegel-fips, caddy-fips, eks-distro, dkron, k8sgateway, kubernetes-dns-node-cache-fips, kargo, caddy, frp, buf, seaweedfs, k3s, dkron-fips, teleport, seaweedfs-fips, traefik, ipfs-cluster-fips, kubernetes-dns-node-cache, coredns-fips, rke2-runtime, spegel, q,...
GHSA-G754-HX8W-X2G6 vulnerabilities
Vulnerabilities for packages: spegel-fips, caddy-fips, eks-distro, dkron, k8sgateway, kubernetes-dns-node-cache-fips, kargo, caddy, frp, buf, seaweedfs, k3s, dkron-fips, teleport, seaweedfs-fips, traefik, ipfs-cluster-fips, kubernetes-dns-node-cache, coredns-fips, rke2-runtime, spegel, q,...
WordPress WPGraphQL Smart Cache plugin < 2.0.1 - Unauthenticated Private Content Disclosure vulnerability
Unauthenticated Private Content Disclosure vulnerability discovered by WPscan in WordPress Plugin WPGraphQL Smart Cache versions 2.0.1...
OESA-2025-2842 dhcp security update
The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: Unde...
OESA-2025-2843 dhcp security update
The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: Unde...
CVE-2025-10583
The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web reques...
CVE-2025-10583
CVE-2025-10583 — WordPress WP Fastest Cache Premium : A SSRF vulnerability via the get_server_time_ajax_request action affects WP Fastest Cache Premium versions
CVE-2025-10583 WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery
The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web reques...
EUVD-2025-203050
The WP Fastest Cache plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...
CVE-2025-67738
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions the "cms" security option...
SUSE CVE-2025-14523
A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the...