TYPE DE FAIBLESSE

CWE-524

82 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-524 (en anglais) →

CVE-2026-24472Les applications web conçues avec le framework Hono (versions antérieures à 4.11.7) utilisant le middleware de mise en cache sont concernées. Un attaquant peut consulter des donnée… 5.3 MOYENNE

CVE-2025-69581Chamillo LMS 1.11.2 ne parvient pas à empêcher les navigateurs web de mettre en cache des données sensibles du profil utilisateur après la déconnexion de ce dernier. Un attaquant a… 5.5 MOYENNE

CVE-2025-69202Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor retu… 6.0 MOYENNE

CVE-2025-43410The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may b… 2.4 FAIBLE

CVE-2025-64696Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malic… 4.8 MOYENNE

CVE-2025-65681An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence o… 3.3 FAIBLE

CVE-2025-64762Les applications Next.js utilisant la bibliothèque AuthKit (version 2.11.0 et versions antérieures) avec un CDN activé sont affectées par un défaut de mise en cache. Un attaquant p… 8.0 ÉLEVÉE

CVE-2025-61598Discourse is an open source discussion platform. Version before 3.6.2 and 3.6.0.beta2, default Cache-Control response header with value no-store, no-cache was missing from error re… 6.3 MOYENNE

CVE-2025-9901A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropri… 5.9 MOYENNE

CVE-2025-57752Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affect… 6.2 MOYENNE

CVE-2025-5141A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0… 5.5 MOYENNE

CVE-2025-4233An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies. 5.1 MOYENNE

CVE-2023-37517Missing "no cache" headers in HCL Leap permits sensitive data to be cached. 3.2 FAIBLE

CVE-2024-30127Missing "no cache" headers in HCL Leap permits sensitive data to be cached. 3.2 FAIBLE

CVE-2023-37516Missing "no cache" headers in HCL Leap permits user directory information to be cached. 3.2 FAIBLE

CVE-2024-12314Les sites WordPress utilisant l'extension Rapid Cache (version 1.2.3 et versions antérieures) sont vulnérables à l'empoisonnement du cache (cache poisoning). Un attaquant distant n… 7.2 ÉLEVÉE

CVE-2024-49580In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure 5.3 MOYENNE

CVE-2024-45596Les installations Directus utilisant OpenID ou OAuth2 sont susceptibles de subir une fuite d'identifiants causée par une mise en cache incorrecte des réponses d'authentification. U… 7.4 ÉLEVÉE

CVE-2024-41906A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses… 6.3 MOYENNE

CVE-2024-33004SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, th… 4.3 MOYENNE

CVE-2024-0874A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching. 5.3 MOYENNE

CVE-2024-27917Les boutiques Shopware (versions 6.5.8.0 à 6.5.8.6) utilisant le gestionnaire de session Symfony par défaut sont concernées. Un attaquant distant non authentifié peut exploiter cet… 7.5 ÉLEVÉE

CVE-2023-45696Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser. 4.0 MOYENNE

CVE-2023-37486Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be rest… 5.9 MOYENNE

CVE-2021-44854An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis. 5.3 MOYENNE

CVE-2022-32909The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data. 5.5 MOYENNE

CVE-2022-3292Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8. 4.6 MOYENNE

CVE-2021-24027Les versions de WhatsApp et WhatsApp Business pour Android antérieures à la v2.21.4.18 sont affectées par une erreur de configuration du cache. Un attaquant ayant accès au stockage… 7.5 ÉLEVÉE

CVE-2019-14997The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose thr… 4.3 MOYENNE

CVE-2019-11244In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permiss… 5.0 MOYENNE

CVE-2019-9495The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant… 3.7 FAIBLE

CVE-2019-9494The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker … 5.9 MOYENNE