Lucene search
K

5 matches found

OSV
OSV
added 2024/11/15 6:15 p.m.0 views

UBUNTU-CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

5.4CVSS7.3AI score0.00028EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.1 views

The vulnerability of the software for creating local copies of deleted container registries, such as the Mirror registry for Red Hat OpenShift, arises from the unencrypted storage of critical information. This allows an intruder to gain unauthorized access to protected data.

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

8.5CVSS7.5AI score0.0012EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.3 views

The vulnerability in the implementation of the fetch() function for obtaining resources from the Fetch API interface of Mozilla Firefox and Firefox-ESR browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the fetch function for obtaining resources through the Fetch API on Mozilla Firefox and Firefox-ESR browsers is related to an error in returning temporary local copies of resources. These resources were sent with a cache header indicating “no caching”...

7.1CVSS7AI score0.01281EPSS
Exploits0References13Affected Software7
Prion
Prion
added 2018/06/11 9:29 p.m.16 views

Design/Logic Flaw

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

4.3CVSS6.3AI score0.01281EPSS
Exploits0References11Affected Software9
Cvelist
Cvelist
added 2018/06/11 9:0 p.m.25 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

6.5AI score0.01281EPSS
Exploits0References11
Rows per page
Query Builder