Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cache poisoning vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2015-8852
Varnish 3.x prior to 3.0.7, when used in certain stacked installations, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content...
Varnish Cache Project Varnish Cache 3.0.0Varnish Cache Project Varnish Cache 3.0.6Varnish Cache Project Varnish Cache 3.0.5Varnish Cache Project Varnish Cache 3.0.2Varnish Cache Project Varnish Cache 3.0.4Varnish Cache Project Varnish Cache 3.0.3Varnish Cache Project Varnish Cache 3.0.1Debian Debian Linux 7.0
6.5
CVSSv2
CVE-2020-15049
An issue exists in http/ContentLengthInterpreter.cc in Squid prior to 4.12 and 5.x prior to 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an un...
Squid-cache Squid 2.7Squid-cache SquidFedoraproject Fedora 31
7.5
CVSSv2
CVE-2021-41589
In Gradle Enterprise prior to 2021.3 (and Enterprise Build Cache Node prior to 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration. This configuration allows anonymous access to the configuration use...
Gradle Build Cache NodeGradle Enterprise
5
CVSSv2
CVE-2019-3978
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated malicious users to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially ...
Mikrotik Routeros
2.6
CVSSv2
CVE-2016-2784
CMS Made Simple 2.x prior to 2.1.3 and 1.x prior to 1.12.2, when Smarty Cache is activated, allow remote malicious users to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
Cmsmadesimple Cms Made Simple 2.1.1Cmsmadesimple Cms Made Simple 2.1Cmsmadesimple Cms Made Simple 1.11.11Cmsmadesimple Cms Made Simple 1.11.10Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.10Cmsmadesimple Cms Made Simple 1.9.4.3Cmsmadesimple Cms Made Simple 1.9.4.2Cmsmadesimple Cms Made Simple 1.6.10Cmsmadesimple Cms Made Simple 1.6.9Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.12.1
7.5
CVSSv2
CVE-2019-3943
MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read ...
Mikrotik RouterosMikrotik Routeros 6.41Mikrotik Routeros 6.42Mikrotik Routeros 6.43Mikrotik Routeros 6.44
5
CVSSv2
CVE-2008-4194
The p_exec_query function in src/dns_query.c in pdnsd prior to 1.2.7-par allows remote malicious users to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Pdnsd Pdnsd 1.1.11-parPdnsd Pdnsd 1.1.10-parPdnsd Pdnsd 1.1.7aPdnsd Pdnsd 1.1.7Pdnsd Pdnsd 1.2.5-parPdnsd PdnsdPdnsd Pdnsd 1.1.11a-parPdnsd Pdnsd 1.1.8b1-par5Pdnsd Pdnsd 1.1.8b1-par4Pdnsd Pdnsd 1.2-parPdnsd Pdnsd 1.2.4-parPdnsd Pdnsd 1.1.8b1-par7Pdnsd Pdnsd 1.1.8b1-par6Pdnsd Pdnsd 1.2.1 ParPdnsd Pdnsd 1.1.9-parPdnsd Pdnsd 1.1.8b1-par8
7.2
CVSSv2
CVE-2010-2693
FreeBSD 7.1 up to and including 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and gain privileges via the sendfile system call.
Freebsd Freebsd 7.1Freebsd Freebsd 7.2Freebsd Freebsd 7.3Freebsd Freebsd 8.0Freebsd Freebsd 8.1
5.8
CVSSv2
CVE-2020-10112
Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths, which implies ...
Citrix Gateway Firmware 11.1Citrix Gateway Firmware 12.0Citrix Gateway Firmware 12.1
5
CVSSv2
CVE-2008-1447
The DNS protocol, as implemented in (1) BIND 8 and 9 prior to 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote malicious users to spoof DNS traffic via a birthday attack th...
Isc Bind 4Isc Bind 8Isc Bind 9.2.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook