Lucene search
+L

87 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2018-3500

Malware in sbrugna...

5.9CVSS6.5AI score0.02915EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-0316

Malware in sbrugna...

7.1CVSS7.2AI score0.0226EPSS
SaveExploits0References38
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2012-0370

Malware in sbrugna...

6.4CVSS6.5AI score0.00264EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-16917

Malware in sbrugna...

5.9CVSS7.4AI score0.02293EPSS
SaveExploits0References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2013-3910

Malware in sbrugna...

5CVSS6.4AI score0.01173EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-2252

Malware in sbrugna...

8.2CVSS6.7AI score0.01281EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2020-3463

Malware in sbrugna...

9.8CVSS8.1AI score0.02044EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/09/29 12:00 a.m.•19 views

PT-2025-39916

Name of the Vulnerable Software and Affected Versions go-f3 versions 0.8.8 and below Description go-f3’s justification verification caching mechanism improperly caches verification results without considering the message context. An attacker can bypass justification verification by submitting a...

6.5CVSS7.7AI score0.00239EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/02 8:23 p.m.•29 views

CVE-2025-54425

Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restricted from public access where an API key must be provided in a header to authorize the request. It's also possible to configure output caching, such...

5.3CVSS6.1AI score0.00342EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/18 12:00 a.m.•19 views

The vulnerability of Prisma Access Browser, related to the disclosure of information through caching, allows attackers to circumvent existing security restrictions and disclose the protected information.

The vulnerability of Prisma Access Browser is related to the disclosure of information through caching. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions and disclose the protected information...

10CVSS5.5AI score0.00187EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/06 9:17 p.m.•31 views

CVE-2025-48947

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, session cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three preconditions must be met in order for...

7.7CVSS7.2AI score0.00433EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:07 p.m.•26 views

CVE-2020-10110

Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end...

5.3CVSS6.4AI score0.02661EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/05/22 5:04 a.m.•25 views

CVE-2012-0334

Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-the-middle attacks...

6.4CVSS6.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/24 9:15 p.m.•33 views

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•22 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...

3.2CVSS6.4AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/19 12:00 a.m.•15 views

vLLM 安全漏洞

vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM that stems from a caching mechanism in the outlines library that could lead to a denial of service by running out of file system space...

6.5CVSS6.3AI score0.00461EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/03/06 9:02 p.m.•24 views

CVE-2025-1953

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

2.6CVSS7.1AI score0.00264EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/02/06 8:00 p.m.•66 views

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

Summary Maliciously constructed prompts can lead to hash collisions, resulting in prefix cache reuse, which can interfere with subsequent responses and cause unintended behavior. Details vLLM's prefix caching makes use of Python's built-in hash function. As of Python 3.12, the behavior of hashNon...

2.6CVSS3.3AI score0.00191EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•26 views

The vulnerability of the Coredns DNS server, related to information disclosure through caching, allows attackers to perform spoofing attacks.

The vulnerability of the coredns DNS server relates to the disclosure of information through caching. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

5.3CVSS6.1AI score0.0076EPSS
SaveExploits0References7Affected Software5
Snyk
Snyk
•added 2024/11/29 7:41 p.m.•9 views

Acceptance of Extraneous Untrusted Data With Trusted Data

Overview check-jsonschema is an A jsonschema CLI and pre-commit hook Affected versions of this package are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data via the default caching mechanism for remote schemas. An attacker can manipulate the cache to insert a malicious schem...

7.1CVSS6.7AI score0.00145EPSS
SaveExploits0References2
Rows per page
Query Builder