National Science Foundation

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

National Science Foundation records in CISA KEV

No National Science Foundation vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Squid Web Proxy · all components

TI-1999-01221 CVE-1999-1273 · GHSA-3q7h-hq7j-vcqg

LOW 35

Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01295 Published 2001-09-12 No fix listed

TI-1999-01428 CVE-1999-1481 · GHSA-fx2h-93c2-339q

LOW 29

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03573 Published 2002-03-09 No fix listed

TI-2001-00142 CVE-2001-0142 · GHSA-j4fw-2x7f-vr9f

LOW 7

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

CVSS 2.0LOW 1.2 Local No auth Interaction — EPSS 0.00304 Published 2001-05-07 No fix listed