PT-2021-24127 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A vulnerability was found in Privoxy, which was fixed by freeing the memory of the compiled pattern spec before bailing in the get url spec param function. Recommendations: At the moment,...

PT-2021-24130 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A cross-site scripting XSS issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template function when Privoxy is set to serve the us...

Debian DLA-2844-1 : privoxy - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2844 advisory. - An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual...

DLA-2844-1 privoxy - security update

Bulletin has no description...

Denial Of Service (DoS)

Privoxy is vulnerable to a denial of service, caused by a memory leak flaw in the sendhttprequest function. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition...

Cross-site Scripting (XSS)

privoxy is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the cgierrornotemplate function as it does not properly encode the template name when Privoxy is configured to servce...

Denial Of Service (DoS)

Privoxy is vulnerable to Denial Of Service DoS. caused by a flaw in the geturlspecparam function. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition...

Denial Of Service (DoS)

privoxy:edge is vulnerable to denial of service. The function processencryptedrequestheaders does not free header memory, therefore failing to get the request destination...

Privoxy 输入验证错误漏洞

Privoxy is a proxy server from the Privoxy team in the USA that does not cache web pages and comes with its own filtering features. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove advertisements and other annoying Internet...

Privoxy 输入验证错误漏洞

Privoxy is a proxy server from the American Privoxy team that does not cache web pages and comes with filtering. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove ads and other annoying Internet junk. privoxy has flexible...

Privoxy 跨站脚本漏洞

Privoxy is a proxy server from the Privoxy team in the USA that does not cache web pages and comes with its own filtering features. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove advertisements and other annoying Internet...

Privoxy 输入验证错误漏洞

Privoxy is a proxy server from the Privoxy team in the USA that does not cache web pages and comes with its own filtering features. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove advertisements and other annoying Internet...

Privoxy -- Multiple vulnerabilities (memory leak, XSS)

Privoxy reports: cgierrornotemplate: Encode the template name to prevent XSS cross-site scripting when Privoxy is configured to servce the user-manual itself. Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543. Reported by: Artem Ivanov geturlspecparam: Free memory of compiled pattern spec...

The vulnerability of the Privoxy proxy server in the OpenSUSE Leap operating systems arises from incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Privoxy proxy server in the OpenSUSE Leap operating system is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the show-status function of the CGI proxy HTTP Privoxy handler, related to improper memory release before deleting last links, allows a hacker to trigger a service failure.

The vulnerability of the show-status function in the CGI proxy HTTP Privoxy handler is related to improper memory release before deleting last links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Privoxy: Multiple vulnerabilities

Background Privoxy is a web proxy with advanced filtering capabilities for enhancing privacy. Description Multiple vulnerabilities have been discovered in privoxy. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a possible Denial of Service condition...

DEBIAN-CVE-2021-20209

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured...

CVE-2021-20209

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured...

CVE-2021-20209

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured...

CVE-2021-20209

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured...