Squid

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Squid records in CISA KEV

No Squid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Squid 37 records MEDIUM Squid Web Proxy 2 records LOW Squid Web Proxy Cache 2 records MEDIUM

Records

2 records in Squid Web Proxy Cache · all components

TI-2007-05954 CVE-2007-6239 · GHSA-6pw6-cgf2-h2v8

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and…

MEDIUM 45

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memor…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.26659 Published 2007-12-04 Fixed CWE-20

TI-2009-00761 CVE-2009-0801 · GHSA-w87g-c2c7-4fx5

Squid, when transparent interception mode is enabled, uses the HTTP Host header to…

LOW 30

Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other t…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.03089 Published 2009-03-04 Will not fix CWE-264

Open these records in search →

Critical	1
High	10
Medium	28
Low	2
No CVSS	0