Поиск уязвимостей
Количество 29
Количество 29
ALT-PU-2016-1463
ALT-PU-2016-1463: package `squid` update to version 3.5.19-alt1
ELSA-2016-1140
ELSA-2016-1140: squid34 security update (MODERATE)
ELSA-2016-1139
ELSA-2016-1139: squid security update (MODERATE)
openSUSE-SU-2016:2081-1
Security update for squid
SUSE-SU-2016:2008-1
Security update for squid
SUSE-SU-2016:2089-1
Security update for squid3
CVE-2016-4553
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
CVE-2016-4553
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
CVE-2016-4553
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
CVE-2016-4553
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not p ...
GHSA-p6vj-j24g-56wp
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
ELSA-2016-1138
ELSA-2016-1138: squid security update (MODERATE)
CVE-2016-4554
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
CVE-2016-4554
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
CVE-2016-4554
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
CVE-2016-4554
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypas ...
ALT-PU-2014-1589
ALT-PU-2014-1589: package `squid` update to version 3.4.5-alt1
GHSA-p847-vwj5-4q73
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
SUSE-SU-2016:2147-1
Security update for squid
CVE-2016-4555
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2016-1463 ALT-PU-2016-1463: package `squid` update to version 3.5.19-alt1 | CVSS3: 8.6 | больше 10 лет назад | |
| ELSA-2016-1140 ELSA-2016-1140: squid34 security update (MODERATE) | больше 10 лет назад | ||
| ELSA-2016-1139 ELSA-2016-1139: squid security update (MODERATE) | больше 10 лет назад | ||
 | openSUSE-SU-2016:2081-1 Security update for squid | около 10 лет назад | ||
| SUSE-SU-2016:2008-1 Security update for squid | около 10 лет назад | ||
| SUSE-SU-2016:2089-1 Security update for squid3 | около 10 лет назад | ||
 | CVE-2016-4553 client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. | CVSS3: 8.6 | 80% Высокий | больше 10 лет назад |
 | CVE-2016-4553 client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. | CVSS2: 4.3 | 80% Высокий | больше 10 лет назад |
 | CVE-2016-4553 client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. | CVSS3: 8.6 | 80% Высокий | больше 10 лет назад |
| CVE-2016-4553 client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not p ... | CVSS3: 8.6 | 80% Высокий | больше 10 лет назад |
| GHSA-p6vj-j24g-56wp client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. | CVSS3: 8.6 | 80% Высокий | больше 4 лет назад |
| ELSA-2016-1138 ELSA-2016-1138: squid security update (MODERATE) | больше 10 лет назад | ||
| CVE-2016-4554 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue. | CVSS3: 8.6 | 39% Средний | больше 10 лет назад |
| CVE-2016-4554 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue. | CVSS2: 4 | 39% Средний | больше 10 лет назад |
| CVE-2016-4554 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue. | CVSS3: 8.6 | 39% Средний | больше 10 лет назад |
| CVE-2016-4554 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypas ... | CVSS3: 8.6 | 39% Средний | больше 10 лет назад |
| ALT-PU-2014-1589 ALT-PU-2014-1589: package `squid` update to version 3.4.5-alt1 | CVSS3: 8.8 | больше 12 лет назад | |
| GHSA-p847-vwj5-4q73 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue. | CVSS3: 8.6 | 39% Средний | больше 4 лет назад |
| SUSE-SU-2016:2147-1 Security update for squid | около 10 лет назад | ||
| CVE-2016-4555 client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses. | CVSS3: 7.5 | 18% Средний | больше 10 лет назад |
Уязвимостей на страницу