Lucene search
+L

2008 matches found

Cvelist
Cvelist
•added 2026/08/20 6:15 p.m.•49 views

CVE-2026-15743 Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

0.00322EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/20 6:15 p.m.•21 views

CVE-2026-15743 Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

5.7CVSS5.4AI score
SaveExploits0References8
CVE
CVE
•added 2026/08/20 6:15 p.m.•56 views

CVE-2026-15743

The Catalyst::Plugin::Static::Simple component in Perl (versions through 0.38 ) contains a flaw where the _serve_static method incorrectly sets the Cache-Control header to public for all responses without providing a means to override it. This misconfiguration can lead to unauthorized information...

5.7CVSS5.8AI score0.00322EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•27 views

PT-2026-79087

Name of the Vulnerable Software and Affected Versions Catalyst::Plugin::Static::Simple versions through 0.38 Description The serve static function always sets the Cache-Control header to "public", which cannot be overridden. This informs proxies that content can be stored in a shared cache and...

5.7CVSS5.7AI score0.00322EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•0 views

CVE-2026-15743: Use of Cache Containing Sensitive Information

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

5.7CVSS5.8AI score0.00322EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/07 12:00 a.m.•19 views

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

9.9CVSS7.9AI score0.00588EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/08/07 12:00 a.m.•26 views

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) relates to deficiencies in access control, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

9.9CVSS7AI score0.00424EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/07 12:00 a.m.•21 views

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the improper definition of symbolic links before accessing a file. This allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the improper definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

9.1CVSS7AI score0.00588EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/07 12:00 a.m.•10 views

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9.9CVSS7.1AI score0.00487EPSS
SaveExploits0References3Affected Software1
The Hacker News
The Hacker News
•added 2026/08/06 5:13 p.m.•32 views

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE...

9.9CVSS7.7AI score0.00734EPSS
SaveExploits1
NCSC
NCSC
•added 2026/08/06 7:18 a.m.•24 views

Vulnerabilities in Cisco Catalyst SD-WAN

Cisco has identified several vulnerabilities in Cisco Catalyst SD-WAN. The identified issues include incorrect input validation, incorrect access control, incorrect link resolution before file access, and the storage of sensitive information in cleartext. Due to these vulnerabilities, the softwar...

9.9CVSS7.8AI score0.00588EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/05 5:16 p.m.•17 views

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

7.7CVSS0.00417EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/05 5:16 p.m.•17 views

CVE-2026-20312

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.8CVSS0.00307EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/05 5:16 p.m.•17 views

CVE-2026-20310

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

9.1CVSS0.00588EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/05 5:16 p.m.•18 views

CVE-2026-20304

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

9.9CVSS0.00424EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/05 5:16 p.m.•14 views

CVE-2026-20303

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

9.9CVSS0.00487EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/05 4:33 p.m.•140 views

CVE-2026-20313

CVE-2026-20313 relates to memory corruption vulnerabilities in Cisco Catalyst SD-WAN components stemming from improper link resolution before file access (CWE-1284). The connected CVE records reference Cisco’s internal security hardening releases addressing multiple previously discovered issues. ...

7.7CVSS7.3AI score0.00417EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/05 4:33 p.m.•15 views

CVE-2026-20313 Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

7.7CVSS7.3AI score0.00417EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/05 4:33 p.m.•17 views

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

7.7CVSS7.3AI score0.00417EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2026/08/05 4:31 p.m.•29 views

EUVD-2026-53472

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

8.8CVSS7.8AI score0.00307EPSS
SaveExploits0References1
Rows per page
Query Builder