83 results · Feed
-
Unscored —
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can s…
-
Unscored —
An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user…
-
Unscored —
An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESICo…
-
Unscored —
An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the r…
-
Unscored —
Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.…
-
Unscored —CVE-2019-12528 EPSS 10%
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informa…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials pa…
-
Unscored —CVE-2020-8450 EPSS 72%
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ov…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests…
-
Unscored —CVE-2019-12526 EPSS 20%
An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. …
-
Unscored —
An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HT…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buff…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended c…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend…
-
Unscored —CVE-2019-18679 EPSS 43%
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to i…
-
Unscored —
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is config…
-
Unscored —CVE-2019-12525 EPSS 24%
An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authe…
-
Unscored —CVE-2019-13345 EPSS 74%
The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
-
Unscored —
Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.
-
Unscored —CVE-2018-1000027 EPSS 13%
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Derefere…
-
Unscored —
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointe…
-
Unscored —
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.…
-
Unscored —
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results i…
-
Unscored —CVE-2016-4556 EPSS 23%
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a d…
-
Unscored —CVE-2016-4553 EPSS 80%
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI …
-
Unscored —CVE-2016-4555 EPSS 18%
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of serv…
-
Unscored —CVE-2016-4554 EPSS 39%
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly …
-
Unscored —CVE-2016-4053 EPSS 14%
Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…
-
Unscored —CVE-2016-4051 EPSS 18%
Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…
-
Unscored —CVE-2016-4052 EPSS 13%
Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…
-
Unscored —CVE-2016-4054 EPSS 78%
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…
-
Unscored —CVE-2016-3948 EPSS 35%
Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause…
-
Unscored —CVE-2016-3947 EPSS 15%
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 an…
-
Unscored —
http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-pars…
-
Unscored —
Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote serve…
-
Unscored —
The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during…
-
Unscored —CVE-2015-5400 EPSS 21%
Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows…
-
Unscored —CVE-2015-3455 EPSS 11%
Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with clien…
-
Unscored —CVE-2014-7142 EPSS 25%
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of servi…
-
Unscored —CVE-2014-7141 EPSS 76%
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of servi…