Known vulnerabilities in tinyproxy

Vendor: tinyproxy
Software: tinyproxy
Software CPE: cpe:2.3:a:tinyproxy:tinyproxy:*:*:*:*:*:*:*:*
Website: https://github.com/tinyproxy/
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tinyproxy tinyproxy is affected by 8 known vulnerabilities: 3 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89115 - Use After Free
CVE-2023-49606		 CWE-416 High
Available
No
 - 02.05.2024 SB2024050226
SB20240711123
SB2024080549
and 6 more
#VU89114 - Use of Uninitialized Variable
CVE-2023-40533		 CWE-457 Medium
No
No
 - 02.05.2024 SB2024050226
#VU79739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-11747		 CWE-362 Low
No
No
 1.10.0 20.08.2023 SB2017073004
SB20230820103
#VU79737 - Insecure Default Initialization of Resource
CVE-2022-40468		 CWE-1188 Low
No
No
 - 20.08.2023 SB2022091934
SB20230820128
SB2024120902
#VU79736 - Double Free
CVE-2002-0847		 CWE-415 High
No
No
 - 20.08.2023 SB2002081204
#VU79735 - Memory corruption
CVE-2001-0129		 CWE-119 High
Available
No
 - 20.08.2023 SB2001031201
#VU33318 - Improper input validation
CVE-2012-3505		 CWE-20 Medium
No
No
 1.8.4 10.10.2012 SB2012101002
SB2012120603
SB2013122301
and 1 more
#VU45096 - Improper input validation
CVE-2011-1843		 CWE-20 Medium
No
No
 - 03.05.2011 SB2011050305
SB2013090903