Lucene search
+L

88 matches found

Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•25 views

PT-2025-18333 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. This could potentially expose confidential information. Recommendations: At the moment,...

3.2CVSS5.9AI score0.0023EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•20 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from the lack of a no cache header, which could lead to caching of sensitive data...

7.5CVSS6.6AI score0.0023EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/26 9:08 p.m.•31 views

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS6.6AI score0.00158EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/24 9:15 p.m.•14 views

CVE-2024-30127

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

3.2CVSS5.8AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/24 9:15 p.m.•15 views

CVE-2023-37516

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS5.8AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/24 9:15 p.m.•30 views

CVE-2024-30127

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

3.2CVSS0.00158EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/24 8:37 p.m.•96 views

CVE-2023-37516

CVE-2023-37516 affects HCL Leap; the root cause is missing no-cache headers, which permits caching of user directory information. The vulnerability is described with a CVSSv3.1 base score of 3.2 (LOW) with LOCAL attack vector, requiring user interaction and low privileges. There is no explicit ex...

3.2CVSS3.9AI score0.00158EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/24 8:37 p.m.•17 views

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS6.8AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/24 8:37 p.m.•40 views

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/24 8:35 p.m.•12 views

CVE-2024-30127 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

3.2CVSS6.8AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•19 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap suffers from a security vulnerability that stems from the lack of a no cache header, which could lead to sensitive data being cached...

3.2CVSS6.6AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•22 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...

3.2CVSS6.4AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•21 views

PT-2025-17854

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description The issue is related to missing "no cache" headers in HCL Leap, which allows user directory information to be cached. Recommendations At the moment, there is no information about a newer...

3.2CVSS6AI score0.00158EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•9 views

CVE-2023-37516: Use of Cache Containing Sensitive Information

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

3.2CVSS5.7AI score0.00158EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•5 views

CVE-2024-30127: Use of Cache Containing Sensitive Information

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

3.2CVSS5.7AI score0.00158EPSS
SaveExploits0References1
Pen Test Partners Blog
Pen Test Partners Blog
•added 2025/03/12 6:51 a.m.•26 views

Take control of Cache-Control and local caching

TL;DR Caching speeds up website content delivery What caching directives are and how to use them The No-cache directive does not prevent caching The No-store directiveprevents caching Introduction The HTTP Cache-Control header is sometimes misunderstood. It's important because it is used to speci...

6.5AI score
SaveExploits0
Patchstack
Patchstack
•added 2024/12/24 12:13 a.m.•14 views

WordPress Content No Cache plugin <= 0.1.2 - Unauthenticated Private Content Disclosure vulnerability

Unauthenticated Private Content Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Content No Cache versions = 0.1.2...

5.3CVSS7AI score0.00404EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/24 12:00 a.m.•20 views

PT-2024-17440 · WordPress · Content No Cache

Name of the Vulnerable Software and Affected Versions: Content No Cache: prevent specific content from being cached plugin for WordPress versions up to, and including, 0.1.2 Description: The issue allows unauthenticated attackers to extract data from password protected, private, or draft posts du...

5.3CVSS9.6AI score0.00404EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/24 12:00 a.m.•12 views

WordPress plugin Content No Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS7.9AI score0.00404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/24 12:00 a.m.•2 views

CVE-2024-12103: Authorization Bypass Through User-Controlled Key

The Content No Cache: prevent specific content from being cached plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.1.2 via the eosdyngetcontent action due to insufficient restrictions on which posts can be included. This makes it possible for...

5.3CVSS5.7AI score0.00404EPSS
SaveExploits0References1
Rows per page
Query Builder