Known vulnerabilities in Squid - page 4

Software: Squid
Software CPE: cpe:2.3:a:squid-cache_org:squid:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 92
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Squid Squid is affected by 92 known vulnerabilities: 9 high, 67 medium, 16 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27669 - Missing Authentication for Critical Function
CVE-2019-12524
CWE-306 Low
No
No
4.8 11.05.2020 SB2020051116
SB2020110501
SB2021072198
and 3 more
#VU27668 - Improper input validation
CVE-2019-12520
CWE-20 Low
No
No
4.8 11.05.2020 SB2020051116
SB2020110501
SB2021072198
and 3 more
#VU19169 - Heap-based Buffer Overflow
CVE-2019-12527
CWE-122 High
No
No
4.8 15.07.2019 SB2019071101
SB2019071701
SB2019082403
and 5 more
#VU19140 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13345
CWE-79 Medium
No
No
4.8 11.07.2019 SB2019071101
SB2019071804
SB2019082010
and 12 more
#VU15903 - Missing release of memory after effective lifetime
CVE-2018-19132
CWE-401 Medium
No
No
4.4 15.11.2018 SB2018111415
SB2018112104
SB2018112108
and 3 more
#VU15896 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19131
CWE-79 Low
Available
No
4.4 14.11.2018 SB2018111415
SB2018112104
SB2018112108
and 2 more
#VU12437 - Improper input validation
CVE-2018-1172
CWE-20 Low
No
No
- 08.05.2018 SB2018051415
SB2018062025
#VU10383 - NULL Pointer Dereference
CVE-2018-1000024
CWE-476 Medium
No
No
3.5.28, 4.0.23 06.02.2018 SB2018012312
SB2018020610
SB2018022305
and 7 more
#VU10164 - NULL Pointer Dereference
CVE-2018-1000027
CWE-476 Medium
No
No
- 23.01.2018 SB2018012312
SB2022121201
SB2018012336
and 1 more
#VU8429 - Exposure of sensitive information to an unauthorized actor
CVE-2016-10002
CWE-200 Medium
No
No
- 14.09.2017 SB2016121701
SB2017020602
SB2017012406
and 3 more
#VU8428 - Exposure of sensitive information to an unauthorized actor
CVE-2016-10003
CWE-200 Medium
No
No
- 14.09.2017 SB2016121701
SB2017020602
SB2016122912
and 3 more
#VU32273 - Improper input validation
CVE-2016-4556
CWE-20 Medium
No
No
3.5.18 10.05.2016 SB2016051019
SB2016072906
#VU32272 - Improper input validation
CVE-2016-4555
CWE-20 Medium
No
No
3.5.18 10.05.2016 SB2016051018
SB2016072905
#VU32271 - Insufficient Verification of Data Authenticity
CVE-2016-4554
CWE-345 High
No
No
3.5.18 10.05.2016 SB2016051017
SB2016072904
#VU32300 - Memory corruption
CVE-2016-4054
CWE-119 High
No
No
3.5.17 25.04.2016 SB2016042504
SB2016050939
#VU32299 - Memory corruption
CVE-2016-4053
CWE-119 Low
No
No
3.5.17 25.04.2016 SB2016042503
SB2016050938
#VU32298 - Stack-based buffer overflow
CVE-2016-4052
CWE-121 High
No
No
3.5.17 25.04.2016 SB2016042502
SB2016050937
#VU40340 - Improper input validation
CVE-2016-2390
CWE-20 Medium
No
No
- 20.04.2016 SB2016042003
#VU32297 - Heap-based Buffer Overflow
CVE-2016-3947
CWE-122 High
No
No
3.5.16, 4.0.8 07.04.2016 SB2016040704
SB2016050936
SB2016040502
and 1 more
#VU40609 - Permissions, Privileges, and Access Controls
CVE-2014-9749
CWE-264 Low
No
No
- 06.11.2015 SB2015110606


Showing elements 61 - 80 out of 92