squid

12 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-47729 Public exploit

  Squid: Memory disclosure in FTP gateway

  Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB d…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Jul 16, 2026
• Critical 10.0
  CVE-2025-62168 Public exploit EPSS 65%

  Squid vulnerable to information disclosure via authentication credential leakage in error handling

  Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

  squid-cache squid squid squid3 Debian Ubuntu Alpine
  Oct 17, 2025
• Critical 9.3
  CVE-2025-54574 Public exploit EPSS 22%

  Squid's URN Handling can lead to Buffer Overflow

  Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around…

  squid-cache squid squid squid3 Debian Ubuntu
  Aug 1, 2025
• Unscored —
  CVE-2021-31807 Public exploit EPSS 16%

  An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server t…

  squid squid3 squid squid Debian Ubuntu Alpine
  Jun 8, 2021
• Unscored —
  CVE-2021-31806 Public exploit EPSS 95%

  An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to …

  squid squid3 squid squid Debian Ubuntu Alpine
  May 27, 2021
• Unscored —
  CVE-2018-19131 Public exploit

  Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.

  squid Debian
  Nov 9, 2018
• Unscored —
  CVE-2009-0478 Public exploit EPSS 72%

  Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service …

  squid Debian
  Feb 8, 2009
• Unscored —
  CVE-2007-0247 Public exploit EPSS 20%

  squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…

  squid Debian
  Jan 16, 2007
• Unscored —
  CVE-2004-2480 Public exploit

  Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…

  squid Debian
  Aug 21, 2005
• Unscored —
  CVE-2004-0189 Public exploit EPSS 14%

  The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …

  squid Debian
  Sep 1, 2004
• Unscored —
  CVE-2004-0541 Public exploit EPSS 71%

  Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when com…

  squid Debian
  Jun 10, 2004
• Unscored —
  CVE-1999-0710 Public exploit EPSS 12%

  The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web director…

  squid Debian
  Jan 4, 2000