from 0, < 4.13-10+deb11u5
CRITICAL9.8CVE-2025-21311Windows NTLM V1 Elevation of Privilege Vulnerability from 0
CRITICAL9.8CVE-2020-11945An issue was discovered in Squid before 5.0.2. from 0, < 4.11-1
CRITICAL9.8squid - security update
from 0, < 4.6-1+deb10u2
CRITICAL9.8squid - security update
from 0, < 4.11-1
CRITICAL9.8An issue was discovered in Squid through 4.7.
from 0, < 4.8-1
CRITICAL9.8squid3 - security update
from 0, < 4.9-1
CRITICAL9.8squid - security update
from 0, < 4.8-1
CRITICAL9.8squid - security update
from 0, < 4.6-1+deb10u1
CRITICAL9.1An issue was discovered in Squid before 4.9.
from 0, < 4.9-1
HIGH8.8squid3 - security update
from 0, < 4.12-1
HIGH8.8An issue was discovered in Squid 4.0.23 through 4.7.
from 0, < 4.8-1
HIGH8.8squid3 - security update
from 0, < 4.1-1
HIGH8.6A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6.
from 0, < 4.13-10+deb11u2
HIGH8.6squid - security update
from 0, < 4.13-8
HIGH8.6squid - security update
from 0, < 4.6-1+deb10u5
HIGH8.6squid - security update
from 0, < 4.1-1
HIGH8.6squid - security update
from 0, < 2.7.STABLE9-4.1+deb7u2
HIGH8.2Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 a…
from 0, < 4.1-1
HIGH7.5Squid is a caching proxy for the Web.
from 0
HIGH7.5Squid is a caching proxy for the Web.
from 0
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u6
HIGH7.5squid - security update
from 0, < 5.7-2+deb12u4
HIGH7.5Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.
from 0, < 4.13-10+deb11u4
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u4
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u4
HIGH7.5Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.
from 0, < 4.13-10+deb11u3
HIGH7.5Squid is a caching proxy for the Web.
from 0, < 4.13-10+deb11u3
HIGH7.5Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.
from 0
HIGH7.5Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.
from 0, < 4.13-10+deb11u3
HIGH7.5Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.
from 0, < 4.13-10+deb11u3
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u5
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u5
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u5
HIGH7.5squid - security update
from 0, < 5.7-2+deb12u3
HIGH7.5Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constr…
from 0, < 5.7-2+deb12u1
HIGH7.5Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary d…
from 0, < 4.13-10+deb11u3
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u3
HIGH7.5squid - security update
from 0, < 4.13-10+deb11u3
HIGH7.5An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2.
from 0, < 5.2-1
HIGH7.5squid - security update
from 0, < 4.6-1+deb10u6
HIGH7.5squid - security update
from 0, < 4.13-10
HIGH7.5Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during hand…
from 0, < 4.13-1
HIGH7.5An issue was discovered in Squid before 4.12 and 5.x before 5.0.3.
from 0, < 4.12-1
HIGH7.5An issue was discovered in Squid through 4.7 and 5.
from 0, < 4.8-1
HIGH7.5An issue was discovered in Squid before 4.10.
from 0, < 4.10-1
HIGH7.5An issue was discovered in Squid before 4.10.
from 0, < 4.10-1
HIGH7.5An issue was discovered in Squid before 4.10.
from 0, < 4.10-1
HIGH7.5An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8.
from 0, < 4.9-1
HIGH7.5An issue was discovered in Squid 3.x and 4.x through 4.8.
from 0, < 4.9-1
HIGH7.5Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory.
from 0, < 4.8-1
HIGH7.5squid - security update
from 0, < 2.7.STABLE9-4.1+deb7u3
HIGH7.5squid - security update
from 0, < 4.1-1
HIGH7.5squid3 - security update
from 0, < 4.1-1
HIGH7.5squid3 - security update
from 0, < 4.1-1
HIGH7.3An issue was discovered in Squid before 4.10.
from 0, < 4.10-1
MEDIUM6.5Squid is a caching proxy for the Web.
from 0
MEDIUM6.5Squid is a caching proxy for the Web.
from 0, < 4.13-10+deb11u3
MEDIUM6.5squid - security update
from 0, < 4.13-10+deb11u2
MEDIUM6.5squid - security update
from 0, < 4.13-10+deb11u2
MEDIUM6.5squid - security update
from 0, < 4.6-1+deb10u8
MEDIUM6.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when pr…
from 0, < 4.13-10+deb11u1
MEDIUM6.5An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.
from 0, < 4.13-10
MEDIUM6.5Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HT…
from 0, < 4.13-10
MEDIUM6.5An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.
from 0, < 4.13-10
MEDIUM6.5An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.
from 0, < 4.13-10
MEDIUM6.5An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6.
from 0, < 4.13-10
MEDIUM6.5An issue was discovered in Squid before 4.13 and 5.x before 5.0.4.
from 0, < 4.13-1
MEDIUM6.5squid - security update
from 0, < 4.13-1
MEDIUM6.5squid - security update
from 0, < 4.6-1+deb10u4
MEDIUM6.3squid - security update
from 0, < 4.13-10+deb11u4
MEDIUM6.3squid - security update
from 0, < 5.7-2+deb12u2
MEDIUM6.1squid - security update
from 0, < 4.6-1+deb10u3
MEDIUM6.1squid - security update
from 0, < 4.9-1
MEDIUM6.1An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not pro…
from 0, < 4.9-1
MEDIUM6.1squid3 - security update
from 0, < 4.8-1
MEDIUM6.1Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
from 0, < 4.4-1
MEDIUM5.9An issue was discovered in Squid through 4.7.
from 0, < 4.11-1
MEDIUM5.9An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7.
from 0, < 4.8-1
MEDIUM5.9squid3 - security update
from 0, < 4.4-1
MEDIUM5.9This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-201803…
from 0, < 4.1-1
MEDIUM5.9The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake er…
from 0, < 4.1-1
MEDIUM5.3squid - security update
from 0, < 4.13-10+deb11u3
MEDIUM5.3squid - security update
from 0, < 4.6-1+deb10u9
MEDIUM5.3squid - security update
from 0, < 4.13-10+deb11u1
MEDIUM5.3squid - security update
from 0, < 4.6-1+deb10u7
MEDIUM5.3An issue was discovered in Squid 3.x and 4.x through 4.8.
from 0, < 4.9-1
MEDIUM4.9An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.
from 0, < 4.13-10
MEDIUM4.5An issue was discovered in Squid through 4.7.
from 0
MEDIUM4.0squid - security update
from 0, < 4.13-10+deb11u6
MEDIUM4.0squid - security update
from 0, < 4.13-10+deb11u6
—(no summary)
from 0
—(no summary)
from 0
—squid3 - security update
from 0, < 4.1-1
—Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do…
from 0, < 4.1-1
—CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response split…
from 0, < 4.1-1
—The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a cra…
from 0, < 4.1-1
—The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds re…
from 0, < 4.1-1
—Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attacke…
from 0, < 4.1-1
—squid - security update
from 0, < 2.7.STABLE9-2.1+deb6u1
—squid - security update
from 0, < 2.7.STABLE9-4.1+deb7u1
—squid - security update
from 0, < 2.7.STABLE9-5
—cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (re…
from 0, < 2.7.STABLE9-2
—squid3 - denial of service
from 0, < 2.7.STABLE9-2
—The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STAB…
from 0, < 2.7.STABLE8-1
—lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assert…
from 0, < 2.7.STABLE8-1
—squid squid3 - denial of service
from 0, < 2.7.STABLE7-1
—squid squid3 - denial of service
from 0, < 2.6.5-6etch5
—Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attac…
from 0, < 4.1-1
—squid3 - denial of service
from 0, < 2.7.STABLE3-4.1
—The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vecto…
from 0, < 2.6.18-1
—squid - array bounds check
from 0, < 2.6.5-6etch1
—squid - array bounds check
from 0, < 2.6.17-1
—squid - array bounds check
from 0, < 2.6.5-6etch4
—The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of serv…
from 0, < 2.6.5-6
—The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an extern…
from 0, < 2.6.5-4
—squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory li…
from 0, < 2.6.5-4
—squid - several
from 0, < 2.5.10-7
—squid - several
from 0, < 2.5.9-10sarge2
—The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentati…
from 0, < 2.5.10-5
—squid - assertion error
from 0, < 2.5.9-10sarge1
—squid - assertion error
from 0, < 2.5.10-5
—squid - assertion error
from 0, < 2.4.6-2woody11
—squid - IP spoofing
from 0, < 2.5.9-9
—squid - IP spoofing
from 0, < 2.4.6-2woody9
—Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitra…
from 0, < 2.5.7-6
—squid - mising input sanitising
from 0, < 2.4.6-2woody7
—squid - several
from 0, < 2.4.6-2woody6
—squid - design flaw
from 0, < 2.4.6-2woody8
—squid - design flaw
from 0, < 2.5.9-7
—squid - mising input sanitising
from 0, < 2.5.8-3
—squid - several
from 0, < 2.5.7-4
—The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling…
from 0, < 2.5.7-7
—Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth…
from 0, < 2.5.7-7
—Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a…
from 0, < 2.5.8
—Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may…
from 0, < 2.5.9-2
—Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP…
from 0, < 2.5.7-6
—Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
from 0, < 2.5.7-6
—The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a d…
from 0, < 2.5.7
—Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory…
from 0, < 2.5.7-4
—The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed W…
from 0, < 2.5.7-4
—squid - buffer overflow, integer overflow
from 0, < 2.5.7-4
—squid - buffer overflow, integer overflow
from 0, < 2.4.6-2woody5
—The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type…
from 0, < 2.5.7-4
—Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS…
from 0, < 2.5.8
—Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a…
from 0, < 2.5
—The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of serv…
from 0, < 2.5.6
—The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote atta…
from 0, < 2.5.6-8
—Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM hand…
from 0, < 2.5.5-5
—squid - ACL bypass
from 0, < 2.4.6-2woody2
—squid - ACL bypass
from 0, < 2.5.5-1
—Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and…
from 0, < 2.4.7
—Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary cod…
from 0, < 2.4.6-2
—Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy…
from 0, < 2.4.6-2
—FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows r…
from 0, < 2.4.6
—squid - multiple
from 0, < 2.4.6-2woody4
—squid - multiple
from 0, < 2.5.7-1