Weaknesses of type CWE-524
50 resultsCVE-2026-44457MEDIUMHono: Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakageEPSS 0.2%CVE-2025-65681LOWAn issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to seEPSS 0.2%CVE-2023-37517LOWHCL Domino Volt and Domino Leap are affected by missing "no cache" headersEPSS 0.2%CVE-2025-4233MEDIUMPrisma Access Browser: Inappropriate implementation in CacheEPSS 0.2%CVE-2026-50169MEDIUMAngular Service Worker Policy-Bypass & Credential-Stripping VulnerabilitiesEPSS 0.1%CVE-2024-30127LOWHCL Leap is affected by missing "no cache" headersEPSS 0.1%CVE-2023-37516LOWHCL Leap is affected by missing "no cache" headersEPSS 0.1%CVE-2025-5141MEDIUMCore Privileged Access Manager (BoKS) Leakage of Sensitive Data via the CacheEPSS 0.1%CVE-2026-50184MEDIUMAngular: Request Credential & Cache Policy Stripping in Angular Service WorkerEPSS 0.1%CVE-2025-64696MEDIUMAndroid App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specifiEPSS 0.1%