CWE-525 · 31 kayıt
Use of Web Browser Cache Containing Sensitive Information
Bu sınıftaki CVE’ler
31 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2025-48947İstismar yok | NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookiesauth0 · nextjs-auth0 · CWE-525 | Yüksek7,7 | — | %0,4 | 4 Haz 2025 |
30İzleyin | CVE-2024-30130İstismar yok | HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityhcltech · nomad server on domino · CWE-525 | Yüksek7,5 | — | %0,3 | 18 Tem 2024 |
30İzleyin | CVE-2025-52625İstismar yok | HCL AION is susceptible to Cacheable SSL Page Found vulnerabilityhcltech · aion · CWE-525 | Yüksek7,5 | — | %0,2 | 10 Eki 2025 |
30İzleyin | CVE-2025-52659İstismar yok | HCL AION is affected by a Cacheable HTTP Response vulnerabilityhcltech · aion · CWE-525 | Yüksek7,5 | — | %0,2 | 19 Oca 2026 |
24İzleyin | CVE-2024-31906İstismar yok | IBM Automation Decision Services information disclosureibm · automation decision services · CWE-525 | Orta6,2 | — | %0,2 | 26 Oca 2025 |
24İzleyin | CVE-2025-15554İstismar yok | Admin Passwords Cached by Browsers in Truesec LAPSWebUItruesec · lapswebui · CWE-525 | Orta6,0 | — | %0,2 | 16 Mar 2026 |
23İzleyin | CVE-2026-41918İstismar yok | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).siemens · ruggedcom rst2428p · CWE-525 | Orta5,9 | — | %0,3 | 2 Haz 2026 |
22İzleyin | CVE-2024-25142İstismar yok | Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cacheapache · airflow · CWE-525 | Orta5,5 | — | %0,3 | 14 Haz 2024 |
22İzleyin | CVE-2024-45314İstismar yok | Flask-AppBuilder login form allows browser to cache sensitive fieldsdpgaspar · flask-appbuilder · CWE-525 | Orta5,5 | — | %0,3 | 4 Eyl 2024 |
22İzleyin | CVE-2021-42015İstismar yok | A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (Allmendix · mendix · CWE-525 | Orta5,5 | — | %0,2 | 9 Kas 2021 |
22İzleyin | CVE-2023-27545İstismar yok | IBM Watson CloudPak for Data Data Stores information disclosureibm · cloud pak for data · CWE-525 | Orta5,5 | — | %0,2 | 28 Şub 2024 |
22İzleyin | GHSA-hq75-xg7r-rx6cİstismar yok | Better Call routing bug can lead to Cache Deceptionnpm · better-call · CWE-525 | Orta5,5 | — | — | 11 Tem 2025 |
21İzleyin | CVE-2026-41322İstismar yok | @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformedwithastro · astro · CWE-525 | Orta5,3 | — | %0,4 | 24 Nis 2026 |
19İzleyin | CVE-2026-24437İstismar yok | Tenda W30E V2 Missing Cache Controls for Credential-bearing Pagestenda · w30e firmware · CWE-525 | Orta4,8 | — | %0,2 | 26 Oca 2026 |
18İzleyin | CVE-2025-62276İstismar yok | The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay Dliferay · digital experience platform · CWE-525 | Orta4,6 | — | %0,1 | 31 Eki 2025 |
17İzleyin | CVE-2024-23571İstismar yok | HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to whichhclsoftware · aftermarket epc · CWE-525 | Orta4,3 | — | %0,3 | 17 Tem 2026 |
16İzleyin | CVE-2025-1334İstismar yok | IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosureibm · cloud pak for security · CWE-525 | Orta4,0 | — | %0,2 | 3 Haz 2025 |
16İzleyin | CVE-2025-1348İstismar yok | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureibm · sterling b2b integrator · CWE-525 | Orta4,0 | — | %0,1 | 18 Haz 2025 |
15İzleyin | CVE-2025-27525İstismar yok | Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Managerhitachi · jp1/it desktop management 2 - smart device manager · CWE-525 | Düşük3,9 | — | %0,1 | 15 May 2025 |
14İzleyin | CVE-2025-13083İstismar yok | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008drupal · drupal · CWE-525 | Düşük3,7 | — | %0,3 | 18 Kas 2025 |
13İzleyin | CVE-2024-22343İstismar yok | IBM TXSeries for Multiplatforms information disclosureibm · txseries for multiplatform · CWE-525 | Düşük3,3 | — | %0,2 | 14 May 2024 |
13İzleyin | CVE-2024-22349İstismar yok | IBM UrbanCode Velocity information disclosureibm · urbancode velocity · CWE-525 | Düşük3,3 | — | %0,2 | 20 Oca 2025 |
13İzleyin | CVE-2023-46181İstismar yok | IBM Secure Proxy information disclosureibm · sterling secure proxy · CWE-525 | Düşük3,3 | — | %0,2 | 15 Mar 2024 |
13İzleyin | CVE-2024-22333İstismar yok | IBM Maximo Application Suite information disclosureibm · maximo application suite · CWE-525 | Düşük3,3 | — | %0,2 | 13 Haz 2024 |
13İzleyin | CVE-2023-23469İstismar yok | IBM Cloud Pak for Business Automation information disclosureibm · cloud pak for business automation · CWE-525 | Düşük3,3 | — | %0,2 | 1 Şub 2023 |
- CVE-2025-4894730İzleyin
NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
YüksekCVSS 7,7İstismar yokEPSS %0auth0 · nextjs-auth04 Haz 2025
- CVE-2024-3013030İzleyin
HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0hcltech · nomad server on domino18 Tem 2024
- CVE-2025-5262530İzleyin
HCL AION is susceptible to Cacheable SSL Page Found vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0hcltech · aion10 Eki 2025
- CVE-2025-5265930İzleyin
HCL AION is affected by a Cacheable HTTP Response vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0hcltech · aion19 Oca 2026
- CVE-2024-3190624İzleyin
IBM Automation Decision Services information disclosure
OrtaCVSS 6,2İstismar yokEPSS %0ibm · automation decision services26 Oca 2025
- CVE-2025-1555424İzleyin
Admin Passwords Cached by Browsers in Truesec LAPSWebUI
OrtaCVSS 6,0İstismar yokEPSS %0truesec · lapswebui16 Mar 2026
- CVE-2026-4191823İzleyin
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).
OrtaCVSS 5,9İstismar yokEPSS %0siemens · ruggedcom rst2428p2 Haz 2026
- CVE-2024-2514222İzleyin
Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache
OrtaCVSS 5,5İstismar yokEPSS %0apache · airflow14 Haz 2024
- CVE-2024-4531422İzleyin
Flask-AppBuilder login form allows browser to cache sensitive fields
OrtaCVSS 5,5İstismar yokEPSS %0dpgaspar · flask-appbuilder4 Eyl 2024
- CVE-2021-4201522İzleyin
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All
OrtaCVSS 5,5İstismar yokEPSS %0mendix · mendix9 Kas 2021
- CVE-2023-2754522İzleyin
IBM Watson CloudPak for Data Data Stores information disclosure
OrtaCVSS 5,5İstismar yokEPSS %0ibm · cloud pak for data28 Şub 2024
- GHSA-hq75-xg7r-rx6c22İzleyin
Better Call routing bug can lead to Cache Deception
OrtaCVSS 5,5İstismar yoknpm · better-call11 Tem 2025
- CVE-2026-4132221İzleyin
@astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed
OrtaCVSS 5,3İstismar yokEPSS %0withastro · astro24 Nis 2026
- CVE-2026-2443719İzleyin
Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
OrtaCVSS 4,8İstismar yokEPSS %0tenda · w30e firmware26 Oca 2026
- CVE-2025-6227618İzleyin
The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D
OrtaCVSS 4,6İstismar yokEPSS %0liferay · digital experience platform31 Eki 2025
- CVE-2024-2357117İzleyin
HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which
OrtaCVSS 4,3İstismar yokEPSS %0hclsoftware · aftermarket epc17 Tem 2026
- CVE-2025-133416İzleyin
IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
OrtaCVSS 4,0İstismar yokEPSS %0ibm · cloud pak for security3 Haz 2025
- CVE-2025-134816İzleyin
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
OrtaCVSS 4,0İstismar yokEPSS %0ibm · sterling b2b integrator18 Haz 2025
- CVE-2025-2752515İzleyin
Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager
DüşükCVSS 3,9İstismar yokEPSS %0hitachi · jp1/it desktop management 2 - smart device manager15 May 2025
- CVE-2025-1308314İzleyin
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
DüşükCVSS 3,7İstismar yokEPSS %0drupal · drupal18 Kas 2025
- CVE-2024-2234313İzleyin
IBM TXSeries for Multiplatforms information disclosure
DüşükCVSS 3,3İstismar yokEPSS %0ibm · txseries for multiplatform14 May 2024
- CVE-2024-2234913İzleyin
IBM UrbanCode Velocity information disclosure
DüşükCVSS 3,3İstismar yokEPSS %0ibm · urbancode velocity20 Oca 2025
- CVE-2023-4618113İzleyin
IBM Secure Proxy information disclosure
DüşükCVSS 3,3İstismar yokEPSS %0ibm · sterling secure proxy15 Mar 2024
- CVE-2024-2233313İzleyin
IBM Maximo Application Suite information disclosure
DüşükCVSS 3,3İstismar yokEPSS %0ibm · maximo application suite13 Haz 2024
- CVE-2023-2346913İzleyin
IBM Cloud Pak for Business Automation information disclosure
DüşükCVSS 3,3İstismar yokEPSS %0ibm · cloud pak for business automation1 Şub 2023