Lucene search
K

4774 matches found

NVD
NVD
added 2025/11/04 4:15 a.m.2 views

CVE-2025-11008

The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as oth...

9.8CVSS0.00398EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/04 12:0 a.m.4 views

Squid < 7.2 Information Disclosure

According to its self-reported version number,the version of Squid installed on the remote host is prior to 7.2. It is, therefore, affected by an Information Disclosure due to a failure to redact HTTP Authentication credentials. Note that the scanner has not tested for these issues but has instea...

10CVSS6.7AI score0.6332EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2025/11/02 9:42 a.m.455 views

Exploit for Server-generated Error Message Containing Sensitive Information in Squid-Cache Squid

CVE-2025-62168Squid Proxy Information Disclosure in Error hand...

10CVSS6.8AI score0.6332EPSS
Exploits1
CNVD
CNVD
added 2025/10/31 12:0 a.m.4 views

IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27703)

IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from insufficient PROT parameter cleanup and escaping, which can be exploited by an attacker to steal a victim's...

5.4CVSS6.6AI score0.00403EPSS
Exploits0References1
Ubuntu
Ubuntu
added 2025/10/28 7:14 p.m.6 views

USN-7845-1: Squid vulnerability

Leonardo Giovannini discovered that Squid failed to redact HTTP Authentication credentials in a default configuration. An attacker could possibly use this issue to obtain sensitive information...

10CVSS8.2AI score0.6332EPSS
Exploits1
OSV
OSV
added 2025/10/28 7:14 p.m.2 views

USN-7845-1 squid, squid3 vulnerability

Leonardo Giovannini discovered that Squid failed to redact HTTP Authentication credentials in a default configuration. An attacker could possibly use this issue to obtain sensitive information...

10CVSS5.8AI score0.6332EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2025/10/28 12:21 p.m.5 views

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

10CVSS5.8AI score0.6332EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2025/10/28 1:49 a.m.3 views

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

10CVSS5.8AI score0.6332EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2025/10/28 1:18 a.m.3 views

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

10CVSS5.8AI score0.6332EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2025/10/27 4:55 p.m.3 views

squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

10CVSS5.8AI score0.6332EPSS
Exploits1References6
OSV
OSV
added 2025/10/27 12:0 a.m.5 views

ALSA-2025:19107 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 For more details about the security issues,...

10CVSS6.6AI score0.6332EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2025/10/20 12:0 a.m.7 views

Squid Information Disclosure Vulnerability (GHSA-c8cc-phh7-xmxr, SQUID-2025:2)

Squid is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...

10CVSS6.1AI score0.6332EPSS
Exploits1References1
Microsoft CVE
Microsoft CVE
added 2025/10/19 8:1 a.m.10 views

Squid vulnerable to information disclosure via authentication credential leakage in error handling

...

10CVSS7AI score0.6332EPSS
Exploits1
CNVD
CNVD
added 2025/10/17 12:0 a.m.3 views

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2025-24201)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication...

4.8CVSS6.5AI score0.00247EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/17 12:0 a.m.1 views

Squid 安全漏洞

Squid is a suite of proxy server and web caching server software from Squid open source. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in versions prior to Squid 7.2 that stems from unedited HTTP...

10CVSS6.3AI score0.6332EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-4731

Malware in sbrugna...

5CVSS6.4AI score0.01404EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2002-2390

Malware in sbrugna...

2.1CVSS6.4AI score0.00313EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-26243

Malware in sbrugna...

6.5CVSS6.1AI score0.00368EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2004-0165

Malware in sbrugna...

5CVSS6.4AI score0.03807EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-8703

Malware in sbrugna...

7.5CVSS7.8AI score0.00447EPSS
Exploits0References2
Rows per page
Query Builder