Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•2 views

CVE-2026-47330: Use of Uninitialized Variable

Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses...

3.3CVSS5.7AI score0.00132EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/06/02 2:14 a.m.•26 views

varnish: request smuggling attacks

A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...

5.4CVSS5.7AI score0.00362EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/06/02 1:55 a.m.•18 views

varnish: request smuggling attacks

A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...

5.4CVSS5.7AI score0.00362EPSS
SaveExploits0References4
Redos
Redos
•added 2025/01/10 12:00 a.m.•9 views

ROS-20250110-07

A vulnerability in the DNS server responsible for coredns name resolution is related to an incorrect implementation of the of caching. Exploitation of the vulnerability could allow a remote attacker to execute a spoofing attack. spoofing attack...

5.3CVSS7.1AI score0.0076EPSS
SaveExploits0
Veracode
Veracode
•added 2024/09/18 6:58 a.m.•19 views

Cache Poisoning

Next is vulnerable to Cache Poisoning. The vulnerability is due to improper handling of crafted HTTP requests, causing the incorrect caching of non-dynamic server-side rendered routes in the pages router. It allows an attacker to manipulate the cache, potentially serving stale or incorrect conten...

7.5CVSS7.4AI score0.5918EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•1 views

CVE-2024-0874: Use of Cache Containing Sensitive Information

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...

5.3CVSS5.7AI score0.0076EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/31 2:15 a.m.•45 views

CVE-2024-23745

In Notion Web Clipper 1.0.37, a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling the execution of...

9.8CVSS6.4AI score0.01984EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/01/26 3:04 a.m.•9 views

SUSE CVE-2024-0874

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...

5.3CVSS7.6AI score0.0076EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/01/25 8:27 p.m.•58 views

CVE-2024-0874

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...

5.3CVSS7AI score0.0076EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2018/05/22 12:00 a.m.•1 views

PT-2018-2891

Name of the Vulnerable Software and Affected Versions HAProxy versions 1.8.0 through 1.8.9 Description The issue is related to incorrect caching of responses to requests including an Authorization header, which allows attackers to achieve information disclosure via an unauthenticated remote...

7.8CVSS0.02915EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
•added 2016/12/25 12:00 a.m.•2 views

PT-2016-4566

Name of the Vulnerable Software and Affected Versions Sprecher Automation SPRECON-E Service Program versions prior to 3.43 SP0 Description An issue in the SPRECON-E Service Program allows a non-admin user to execute telegram simulation under certain preconditions. This can occur when a user with ...

7.5CVSS0.01085EPSS
SaveExploits0References4
Rows per page
Query Builder