11 matches found
CVE-2026-47330: Use of Uninitialized Variable
Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses...
varnish: request smuggling attacks
A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...
varnish: request smuggling attacks
A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...
ROS-20250110-07
A vulnerability in the DNS server responsible for coredns name resolution is related to an incorrect implementation of the of caching. Exploitation of the vulnerability could allow a remote attacker to execute a spoofing attack. spoofing attack...
Cache Poisoning
Next is vulnerable to Cache Poisoning. The vulnerability is due to improper handling of crafted HTTP requests, causing the incorrect caching of non-dynamic server-side rendered routes in the pages router. It allows an attacker to manipulate the cache, potentially serving stale or incorrect conten...
CVE-2024-0874: Use of Cache Containing Sensitive Information
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-23745
In Notion Web Clipper 1.0.37, a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling the execution of...
SUSE CVE-2024-0874
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-0874
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
PT-2018-2891
Name of the Vulnerable Software and Affected Versions HAProxy versions 1.8.0 through 1.8.9 Description The issue is related to incorrect caching of responses to requests including an Authorization header, which allows attackers to achieve information disclosure via an unauthenticated remote...
PT-2016-4566
Name of the Vulnerable Software and Affected Versions Sprecher Automation SPRECON-E Service Program versions prior to 3.43 SP0 Description An issue in the SPRECON-E Service Program allows a non-admin user to execute telegram simulation under certain preconditions. This can occur when a user with ...