Lucene search
+L

256 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:21 a.m.•10 views

CVE-2024-25142

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

5.5CVSS6.5AI score0.00321EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:15 a.m.•14 views

CVE-2023-47722

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912...

6.2CVSS6.1AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:19 p.m.•17 views

CVE-2021-23972

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached...

8.8CVSS6.2AI score0.01013EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:33 p.m.•22 views

CVE-2021-32004

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning...

5.3CVSS6.8AI score0.00642EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 2:44 a.m.•21 views

CVE-2013-4959

Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as 1 host name, 2 MAC address, and 3 SSH keys via the web browser cache...

2.1CVSS6.1AI score0.00352EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•2 views

CVE-2025-27525: Use of Web Browser Cache Containing Sensitive Information

Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06...

3.9CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•3 views

CVE-2023-43035: Use of Web Browser Cache Containing Sensitive Information

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system...

4CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/10 12:00 a.m.•18 views

PT-2025-15985 · Ibm · Ibm Sterling Control Center

Name of the Vulnerable Software and Affected Versions: IBM Sterling Control Center versions 6.2.1 through 6.4.0 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system, potentially exposing sensitive information. Recommendations: For...

4CVSS5.7AI score0.00159EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/26 12:00 a.m.•2 views

CVE-2024-31906: Use of Web Browser Cache Containing Sensitive Information

IBM Automation Decision Services 23.0.2 allows web pages to be stored locally which can be read by another user on the system...

6.2CVSS5.8AI score0.00184EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/20 12:00 a.m.•3 views

CVE-2024-22349: Use of Web Browser Cache Containing Sensitive Information

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system...

4CVSS5.8AI score0.00212EPSS
SaveExploits0References3
Metasploit
Metasploit
•added 2024/10/31 6:53 p.m.•499 views

Advanced Browser Data Extraction for Chromium and Gecko Browsers

This post-exploitation module extracts sensitive browser data from both Chromium-based and Gecko-based browsers on the target system. It supports the decryption of passwords and cookies using Windows Data Protection API DPAPI and can extract additional data such as browsing history, keyword searc...

7AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/09/04 4:08 p.m.•62 views

CVE-2024-45314 Flask-AppBuilder login form allows browser to cache sensitive fields

Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If...

3.6CVSS0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/19 12:03 a.m.•18 views

CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

3.7CVSS6.4AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/19 12:03 a.m.•31 views

CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

3.7CVSS0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/19 12:00 a.m.•1 views

CVE-2024-30130: Use of Web Browser Cache Containing Sensitive Information

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information...

7.5CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/07/04 12:00 a.m.•12 views

FreeBSD : Request Tracker -- information exposure vulnerability (51498ee4-39a1-11ef-b609-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 51498ee4-39a1-11ef-b609-002590c1f29c advisory. Request Tracker reports: CVE-2024-3262 describes previously viewed pages being stored in the browser...

5.5CVSS5.5AI score0.00285EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/28 12:00 a.m.•4 views

CVE-2022-38383: Use of Web Browser Cache Containing Sensitive Information

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673...

4CVSS5.5AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/18 7:17 a.m.•69 views

BIT-AIRFLOW-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

5.5CVSS5.2AI score0.00321EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/06/14 9:31 a.m.•34 views

Apache Airflow does not return the "Cache-Control" header for dynamic content

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

5.5CVSS6.5AI score0.00321EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2024/06/14 9:31 a.m.•21 views

GHSA-9XPJ-62MM-24H2 Apache Airflow does not return the "Cache-Control" header for dynamic content

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...

5.5CVSS6AI score0.00321EPSS
SaveExploits0References7
Rows per page
Query Builder