A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request...
7.5CVSS
7.2AI Score
0.001EPSS
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before...
7.5CVSS
7.3AI Score
0.001EPSS
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual...
6.1CVSS
6.2AI Score
0.001EPSS
7.5CVSS
7.2AI Score
0.001EPSS
A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are...
7.5CVSS
7.3AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system...
7.5CVSS
7.3AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system...
7.5CVSS
7.2AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system...
7.5CVSS
7.2AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system...
7.5CVSS
7.3AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system...
7.5CVSS
7.2AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation...
7.5CVSS
7.2AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system...
7.5CVSS
7.2AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system...
7.5CVSS
7.1AI Score
0.002EPSS
A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system...
7.5CVSS
7AI Score
0.001EPSS
A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server...
7.5CVSS
7.3AI Score
0.002EPSS
A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server...
7.5CVSS
7.1AI Score
0.008EPSS
A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of...
7.5CVSS
7.1AI Score
0.001EPSS
A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of...
7.5CVSS
7.1AI Score
0.002EPSS
A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled...
7.5CVSS
7.2AI Score
0.003EPSS
The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded...
7.5CVSS
7.1AI Score
0.026EPSS
The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host...
7.5CVSS
7.1AI Score
0.031EPSS
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained...
6.9AI Score
0.007EPSS
Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified...
6.7AI Score
0.066EPSS
jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded...
6.5AI Score
0.019EPSS
parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time...
6.3AI Score
0.032EPSS
Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is...
6.7AI Score
0.007EPSS
Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
6.7AI Score
0.002EPSS
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status...
6.2AI Score
0.02EPSS