Vendors / Apt-cacher-ng Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Apt-cacher-ng Project records in CISA KEV No Apt-cacher-ng Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00714 · Published 2017-04-05 · No fix listed CWE-113
Priority LOW 27
The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00264 · Published 2020-01-23 · Fixed in 3.1-lp151.3.3.1 CWE-269
Priority LOW 25
apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00469 · Published 2020-01-21 · No fix listed
Priority LOW 22
Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0018 · Published 2025-09-29 · No fix listed CWE-79
Priority LOW 22
Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0018 · Published 2025-09-29 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 5 0 0
