Use of Web Browser Cache Containing Sensitive Information

Every one of the 37 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NextJS-Auth0 SDK Vulnerable to CDN Caching of Session CookiesCVE-2025-48947auth0 · CVSS 7.7 · 0.4% likely

   Auth0

2. AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270CVE-2026-118550Drupal · CVSS 5.9 · 0.3% likely

   Drupal

3. Apache Airflow: Cache Control - Storage of Sensitive Data in Browser CacheCVE-2024-25142Apache Software Foundation · CVSS 5.5 · 0.3% likely

   Apache

4. HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be…CVE-2024-23571HCLSoftware · CVSS 4.3 · 0.3% likely

   HCLSoftware

5. HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityCVE-2024-30130HCL Software · CVSS 3.7 · 0.3% likely

   HCL Software

6. @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformedCVE-2026-41322withastro · CVSS 5.3 · 0.3% likely

   Withastro

7. Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008CVE-2025-13083Drupal · CVSS 3.7 · 0.3% likely

   Drupal

8. Flask-AppBuilder login form allows browser to cache sensitive fieldsCVE-2024-45314dpgaspar · CVSS 3.6 · 0.3% likely

   Dpgaspar

9. HCL AION is susceptible to Cacheable SSL Page Found vulnerabilityCVE-2025-52625HCL · CVSS 3.7 · 0.2% likely

   HCL Software

10. Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138CVE-2026-87940Drupal · CVSS 5.4 · 0.2% likely

    Drupal

11. A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applicati…CVE-2021-42015Siemens · 0.2% likely

    Siemens

12. IBM TXSeries for Multiplatforms information disclosureCVE-2024-22343IBM · CVSS 4 · 0.2% likely

    IBM

13. IBM UrbanCode Velocity information disclosureCVE-2024-22349IBM · CVSS 4 · 0.2% likely

    IBM

14. Webform - Less critical - Access bypass - SA-CONTRIB-2026-165CVE-2026-96369Drupal · CVSS 3.1 · 0.2% likely

    Drupal

15. Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292CVE-2026-118571Drupal · CVSS 5.9 · 0.2% likely

    Drupal

16. ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247CVE-2026-114548Drupal · CVSS 3.7 · 0.2% likely

    Drupal

17. Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245CVE-2026-114546Drupal · CVSS 3.7 · 0.2% likely

    Drupal

18. IBM Watson CloudPak for Data Data Stores information disclosureCVE-2023-27545IBM · CVSS 4 · 0.2% likely

    IBM

19. A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when a…CVE-2026-41918Siemens · CVSS 5.7 · 0.2% likely

    Siemens

20. HCL AION is affected by a Cacheable HTTP Response vulnerabilityCVE-2025-52659HCL Software · CVSS 2.8 · 0.2% likely

    HCL Software

21. IBM Automation Decision Services information disclosureCVE-2024-31906IBM · CVSS 6.2 · 0.2% likely

    IBM

22. IBM Cloud Pak for Business Automation information disclosureCVE-2023-23469IBM · CVSS 4 · 0.2% likely

    IBM

23. Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242CVE-2026-114542Drupal · CVSS 5.4 · 0.2% likely

    Drupal

24. IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosureCVE-2025-1334IBM · CVSS 4 · 0.2% likely

    IBM

25. IBM Maximo Application Suite information disclosureCVE-2024-22333IBM · CVSS 3.3 · 0.2% likely

    IBM

26. IBM Secure Proxy information disclosureCVE-2023-46181IBM · CVSS 4 · 0.2% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.