Lucene search
K

200 matches found

Snyk
Snyk
added 2026/06/15 4:44 p.m.7 views

Use of Cache Containing Sensitive Information

Overview @angular/service-worker is an Angular - service worker tooling! Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the request reconstruction. An attacker can access sensitive session-restricted data or expose credentials by exploiting...

5.7CVSS5.9AI score0.00129EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.11 views

Astra Linux - уязвимость в linux

The IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors may allow a local user to obtain sensitive information from the data in the L1 cache under certain circumstances. IBM X-Force ID: 189296...

5.1CVSS6.4AI score0.0039EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.3 views

EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-1633)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker ...

8.6CVSS6.9AI score0.00509EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003514 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

5.6CVSS7.4AI score0.05577EPSS
Exploits0References56
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003524 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

5.6CVSS7.4AI score0.08101EPSS
Exploits0References59
OSV
OSV
added 2026/01/08 10:40 p.m.4 views

GHSA-FG6F-75JQ-6523 Authlib has 1-click Account Takeover vulnerability

Security Advisory: Cache-Backed State Storage CSRF in Authlib The Security Labs team at Snyk has reported a security issue affecting Authlib, identified during a recent research project. The Snyk Security Labs team has identified a vulnerability that can result in a one-click account takeover in...

5.7CVSS6AI score0.00237EPSS
Exploits1References5
OSV
OSV
added 2025/12/30 12:16 p.m.6 views

OESA-2025-2875 dhcp security update

The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: Unde...

8.6CVSS6.8AI score0.00509EPSS
Exploits1References2
OSV
OSV
added 2025/12/10 6:16 p.m.3 views

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

7.5CVSS5.9AI score0.0049EPSS
Exploits1References2
NVD
NVD
added 2025/12/10 6:16 p.m.2 views

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

7.5CVSS0.0049EPSS
Exploits1References2
CVE
CVE
added 2025/12/10 12:0 a.m.19 views

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 are affected by a speculative execution/indirect branch prediction vulnerability that enables side-channel access to data in the cache, allowing potential disclosure of sensitive information. Exploitation details are not provided in the connected docum...

7.5CVSS6.6AI score0.0049EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/12/10 12:0 a.m.25 views

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

0.0049EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/12/10 12:0 a.m.2 views

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

6.6AI score0.0049EPSS
Exploits1References2
OSV
OSV
added 2025/11/28 12:52 p.m.8 views

OESA-2025-2766 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.CVE-2024-36357 In the Lin...

7.8CVSS5.9AI score0.00298EPSS
Exploits1References63
OSV
OSV
added 2025/11/28 9:20 a.m.6 views

CLSA-2025-1764321653 bind: Fix of CVE-2025-40778

CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache...

8.6CVSS5.8AI score0.00509EPSS
Exploits1References1
OSV
OSV
added 2025/11/28 9:15 a.m.4 views

CLSA-2025-1764321323 bind: Fix of CVE-2025-40778

CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache...

8.6CVSS5.8AI score0.00509EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.5 views

kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

5.6CVSS7.5AI score0.00298EPSS
Exploits0References5
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

A transient execution vulnerability in some AMD processors may allow an attacker to extract data from the L1D cache, potentially leading to the leakage of sensitive information across privileged boundaries...

5.6CVSS7AI score0.00298EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-2047

Malware in sbrugna...

5.5CVSS6.2AI score0.00587EPSS
Exploits0References37
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2020-7212

Malware in sbrugna...

6.9CVSS6.3AI score0.00577EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-24063

Malicious code in bioql PyPI...

4.7CVSS3.9AI score0.00148EPSS
Exploits0References4
Rows per page
Query Builder