Lucene search
+L

3732 matches found

NVD
NVD
•added 2026/01/13 6:16 p.m.•10 views

CVE-2026-20839

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

5.5CVSS0.00488EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/13 5:56 p.m.•61 views

CVE-2026-20839

CVE-2026-20839 : Improper access control in the Windows Client-Side Caching (CSC) Service may allow an authorized local attacker to disclose information. The CVSSv3.1 vector indicates a local attack with low complexity and low privileges required, but with high confidentiality impact (C:H, I:N, A...

5.5CVSS6.1AI score0.00488EPSS
SaveExploits0References1Affected Software14
Cvelist
Cvelist
•added 2026/01/13 5:56 p.m.•36 views

CVE-2026-20839 Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability

...

5.5CVSS0.00488EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/13 5:56 p.m.•5 views

CVE-2026-20839 Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability

...

5.5CVSS6.6AI score0.00488EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/13 5:56 p.m.•11 views

CVE-2026-20839

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

5.5CVSS5.3AI score0.00488EPSS
SaveExploits0References2Affected Software22
Microsoft CVE
Microsoft CVE
•added 2026/01/13 4:00 p.m.•13 views

Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

5.5CVSS6.6AI score0.00488EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a lockup issue caused by a race condition between inode eviction and inode caching. There is a race condition between inode eviction and inode caching that can cause a live struct btrfsinode to be missing from the...

4.7CVSS5.8AI score0.00106EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•24 views

PT-2026-2689

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description An issue with access control in the Windows Client-Side Caching CSC Service can allow an attacker to disclose information locally. The vulnerability allows...

5.5CVSS6.1AI score0.00488EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2026/01/13 12:00 a.m.•79 views

KLA90840 Multiple vulnerabilities were found in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

9.8CVSS8AI score0.20059EPSS
SaveExploits10References111
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•0 views

CVE-2026-20839: Improper Access Control

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/01/12 8:10 a.m.•12 views

Sensitive Information Disclosure

authkit-nextjs is vulnerable to Sensitive Information Disclosure. The vulnerability is due to missing anti-caching headers on authenticated responses, where session tokens can be cached by CDNs and inadvertently served to other users, leading to unauthorized session exposure in environments with...

9.3CVSS6.8AI score0.00369EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•26 views

CVE-2023-43503

A vulnerability has been identified in COMOS All versions V10.4.4. Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP...

7.5CVSS6.4AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:53 a.m.•13 views

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

5.3CVSS6.9AI score0.00925EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:13 a.m.•28 views

CVE-2019-2183

In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6.9AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:21 a.m.•21 views

CVE-2021-41251

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform abstractions. This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In affected versions and in some...

5.9CVSS6.6AI score0.01712EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2026/01/07 8:38 p.m.•12 views

actix-web-csp (0.1.0), actor-kit (>=0.1.0, <=0.2.1) +659 more potentially affected by unknown CVE via lru (>=0.9.0, <=0.15.0)

lru CARGO version =0.9.0, =0.1.0, =0.9.0, =0.0.24, =0.0.23, =0.1.0, =1.0.0, =0.4.0, =0.1.0, =0.1.0, =0.1.3, =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RHFX-M35P-FF5J...

5.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/07 9:43 a.m.•15 views

CVE-1999-0755

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option...

5CVSS7.1AI score0.14955EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•17 views

CVE-1999-0387

A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...

7.8CVSS6.8AI score0.07853EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•14 views

CVE-1999-0910

Microsoft Site Server and Commercial Internet System MCIS do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user...

5CVSS6.9AI score0.05777EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:30 a.m.•17 views

CVE-2019-16177

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

7.5CVSS6.9AI score0.01464EPSS
SaveExploits0References1
Rows per page
Query Builder