Lucene search
K

28 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.6 views

TencentOS Server 2: squid (TSSA-2025:1012)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1012 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

10CVSS7.2AI score0.16244EPSS
Exploits1References2
OSV
OSV
added 2026/03/15 5:53 a.m.2 views

OESA-2026-1551 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a...

10CVSS6.5AI score0.16244EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2026/01/29 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: squid (UTSA-2026-005211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005211 advisory. Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information...

10CVSS6AI score0.16244EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.1 views

MiracleLinux 7 : squid-3.5.20-17.0.5.99.0.2.el7.AXS7 (AXSA:2025-11536:06)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11536:06 advisory. CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure emailerrdata directive now default...

10CVSS8.1AI score0.16244EPSS
Exploits1References2
OSV
OSV
added 2025/11/27 10:13 p.m.2 views

CLSA-2025-1764281284 squid: Fix of CVE-2025-62168

CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - emailerrdata directive now defaults to 'off' for security previously 'on'...

10CVSS5.8AI score0.16244EPSS
Exploits1References1
OSV
OSV
added 2025/11/26 10:12 a.m.2 views

CLSA-2025-1764151964 squid: Fix of CVE-2025-62168

CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - emailerrdata directive now defaults to 'off' for security previously 'on'...

10CVSS7.3AI score0.16244EPSS
Exploits1References1
Redos
Redos
added 2025/11/12 12:0 a.m.3 views

ROS-20251112-01

Squid proxy server vulnerability related to data boundary checking errors during encoding processing ASN.1 long SNMP OIDs in asnbuildobjid function in lib/snmplib/asn1.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service Vulnerability of emailerrdata...

10CVSS6.5AI score0.16244EPSS
Exploits2
OSV
OSV
added 2025/10/31 2:13 p.m.1 views

OESA-2025-2606 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact...

10CVSS6.8AI score0.16244EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.9 views

Amazon Linux 2023 : squid (ALAS2023-2025-1238)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1238 advisory. Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a...

10CVSS5.5AI score0.16244EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.4 views

Amazon Linux 2 : squid, --advisory ALAS2-2025-3045 (ALAS-2025-3045)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3045 advisory. Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error...

10CVSS5.5AI score0.16244EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-62168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information...

10CVSS6.7AI score0.16244EPSS
Exploits1References3
Amazon
Amazon
added 2025/10/27 12:0 a.m.5 views

Important: squid

Issue Overview: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a remote client to identify security tokens or credentials used internally by a web...

10CVSS6.9AI score0.16244EPSS
Exploits1
Amazon
Amazon
added 2025/10/27 12:0 a.m.3 views

Important: squid

Issue Overview: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a remote client to identify security tokens or credentials used internally by a web...

10CVSS6.6AI score0.16244EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/10/17 11:57 p.m.1 views

CVE-2025-62168

A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...

10CVSS6.5AI score0.16244EPSS
Exploits1References5
NVD
NVD
added 2025/10/17 5:15 p.m.1 views

CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS0.16244EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-1297

Malware in sbrugna...

2.1CVSS6.2AI score0.00081EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 4:16 p.m.3 views

CVE-2020-13280

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

6.5CVSS6.4AI score0.00106EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 8:44 a.m.4 views

CVE-2019-6122

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address...

4.3CVSS6.6AI score0.00356EPSS
Exploits1References1
NVD
NVD
added 2020/08/13 1:15 p.m.11 views

CVE-2020-13280

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

6.5CVSS6.5AI score0.00106EPSS
Exploits1References2
OSV
OSV
added 2020/08/13 1:15 p.m.17 views

CVE-2020-13280

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

6.5CVSS6.4AI score0.00106EPSS
Exploits1References2
Rows per page
Query Builder