#cwe-524

共收录 63 条相关情报。

← 返回所有主题
漏洞预警2026-10-31 发布MEDIUM

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.16.5 via the 'invoi...

CVE-2026-109217

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in

来源摘录 · NVD / GitHub Advisory

安全公告2026-10-27 发布INFO

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

CVE-2026-109829

### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布LOW

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public ...

CVE-2026-105711

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 1

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for...

CVE-2026-108088

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using

来源摘录 · NVD

漏洞预警2026-10-10 发布INFO

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'comm...

CVE-2026-104006

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches ...

CVE-2026-107851

Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Contao: Improper access control in the table access voter

CVE-2026-107851

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container (DCA) backend,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

CVE-2026-94544

Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

CVE-2026-94543

Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

CVE-2026-94484

Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

CVE-2026-105752

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted through "POST /v1/responses" requests rebuild the next-t...

CVE-2026-105752

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mod...

CVE-2026-94544

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically gene...

CVE-2026-94543

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generat...

CVE-2026-94484

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, application

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Compone...

CVE-2026-103004

Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return valu

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same...

CVE-2026-19202

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cache

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an applicatio...

CVE-2026-19202

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cache

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to re...

CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP.Plug.verify_creden...

CVE-2026-89186

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and ser

历史摘要 · 未重新核验 · NVD