87 matches found
EUVD-2018-3500
Malware in sbrugna...
EUVD-2020-0316
Malware in sbrugna...
EUVD-2012-0370
Malware in sbrugna...
EUVD-2018-16917
Malware in sbrugna...
EUVD-2013-3910
Malware in sbrugna...
EUVD-2021-2252
Malware in sbrugna...
EUVD-2020-3463
Malware in sbrugna...
PT-2025-39916
Name of the Vulnerable Software and Affected Versions go-f3 versions 0.8.8 and below Description go-f3’s justification verification caching mechanism improperly caches verification results without considering the message context. An attacker can bypass justification verification by submitting a...
CVE-2025-54425
Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restricted from public access where an API key must be provided in a header to authorize the request. It's also possible to configure output caching, such...
The vulnerability of Prisma Access Browser, related to the disclosure of information through caching, allows attackers to circumvent existing security restrictions and disclose the protected information.
The vulnerability of Prisma Access Browser is related to the disclosure of information through caching. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions and disclose the protected information...
CVE-2025-48947
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, session cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three preconditions must be met in order for...
CVE-2020-10110
Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end...
CVE-2012-0334
Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks...
CVE-2023-37516
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...
vLLM 安全漏洞
vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM that stems from a caching mechanism in the outlines library that could lead to a denial of service by running out of file system space...
CVE-2025-1953
A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...
vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache
Summary Maliciously constructed prompts can lead to hash collisions, resulting in prefix cache reuse, which can interfere with subsequent responses and cause unintended behavior. Details vLLM's prefix caching makes use of Python's built-in hash function. As of Python 3.12, the behavior of hashNon...
The vulnerability of the Coredns DNS server, related to information disclosure through caching, allows attackers to perform spoofing attacks.
The vulnerability of the coredns DNS server relates to the disclosure of information through caching. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
Acceptance of Extraneous Untrusted Data With Trusted Data
Overview check-jsonschema is an A jsonschema CLI and pre-commit hook Affected versions of this package are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data via the default caching mechanism for remote schemas. An attacker can manipulate the cache to insert a malicious schem...