최근 6개월의 모든 CVE를 매일 업데이트합니다.

4개 중 4개 표시

• 높음CVE-2026-13697CVSS 점수 7.42026. 7. 29.

  undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stor

  CWE-200CWE-248CWE-525nodejs undici
• 중간CVE-2024-23571CVSS 점수 4.32026. 7. 17.

  HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local

  CWE-525
• 중간CVE-2026-41918CVSS 점수 5.72026. 6. 2.

  A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenti

  CWE-525
• 중간CVE-2026-41322CVSS 점수 5.32026. 4. 24.

  @astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from _astro path with an incorrect/malformed if-match header returns a 500 error with a one year cache lifetime instead of 412 in some cas

  CWE-525