Information Disclosure

mediawiki/core is vulnerable to information disclosure. Files are possibly publicly cached in the caching server using the imgauth.php image authorization security feature due to misconfigured Cache-Control and Vary headers. An unauthenticated user is potentially able to access and view these fil...

The vulnerability of the arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c components of the Linux operating system allows a hacker to gain unauthorized access to certain information.

The vulnerability of the arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c components of the Linux operating system is related to the recovery of data that remains in the processor cache as a result of speculative execution of instructions. Exploiting this vulnerability can allow a...

CVE-2020-9042

In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request...

Cross site request forgery (csrf)

In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request...

PT-2020-20455

Name of the Vulnerable Software and Affected Versions Couchbase Server version 6.0 Description The issue allows credentials cached by a browser to be used for a CSRF attack if an administrator has used their browser to check the results of a REST API request. Recommendations For Couchbase Server...

xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source

In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2020-31094)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

CVE-2020-4312

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089...

CVE-2020-4312

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089...

PT-2020-17994

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 6.0.3.1 Description The issue allows an authenticated user to obtain sensitive information from a cached web page. Recommendations For versions 5.2.0.0 through 6.0.3.1, at t...

CVE-2020-4312: Undefined Security Weakness

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 trough 6.0.3.1 could allow an authenticated user to obtain sensitive information from a cached web page. IBM X-Force ID: 177089...

Denial Of Service (DoS)

squid is vulnerable to denial of service. A flaw was found in the way squid stored HTTP headers for cached objects in system memory. An attacker could cause squid to use additional memory, and trigger high CPU usage when processing requests for certain cached objects, possibly leading to a denial...

Kernel update: Virtuozzo ReadyKernel patch 103.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 3.5

The cumulative Virtuozzo ReadyKernel patch was updated with an enhancement. The patch applies to the kernels 3.10.0-1062.4.2.vz7.116.7 Virtuozzo 7.0.12 HF1 and Virtuozzo Infrastructure Platform 3.5, 3.10.0-1062.12.1.vz7.131.10 Virtuozzo 7.0.13. Vulnerability id: PSBM-102848...

CVE-2018-12404

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack AKA Bleichenbacher attack and affects all NSS versions prior to NSS 3.41...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-33795)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by attackers to gain access to cached data...

CVE-2020-10853

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 January 2020...

CVE-2020-10853

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 January 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 January 2020...

CVE-2020-10853: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 January 2020...