The vulnerability of the Squid proxy server, related to the inconsistent interpretation of HTTP requests, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Squid proxy server is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

The vulnerability of the Squid proxy server, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to inject arbitrary HTTP headers.

The vulnerability of the Squid proxy server is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

The vulnerability of the http/ContentLengthInterpreter.cc component in the Squid proxy server allows a hacker to manipulate cache content.

The vulnerability of the http/ContentLengthInterpreter.cc component in the Squid proxy server is related to HTTP request processing flaws. Exploiting this vulnerability allows a malicious actor to poison the cache contents using a specially crafted HTTP request...

Debian: Security Advisory (DSA-4732-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the cachemgr.cgi component of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the cachemgr.cgi component of the Squid proxy server is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Ipc::Mem::PageStack::pop function in the Squid proxy server allows a hacker to cause a service failure.

The vulnerability of the Ipc::Mem::PageStack::pop function in the Squid proxy server is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information by interpreting the created HTTP requests in an unexpected manner...

The vulnerability of the Squid proxy server arises from insufficient validation of input data in the ext_lm_group_acl. This allows a hacker to terminate the Squid process and cause a service failure for all clients that use the proxy.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data in extlmgroupacl. Exploiting this vulnerability could allow a malicious actor to terminate the Squid process remotely and cause service failures for all clients using the proxy...

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to access features that can only be used by reverse proxies.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to features that can only be used by reverse proxies...

The vulnerability of the Squid proxy server, related to the lack of a authentication mechanism for url_regex, allows attackers to gain access to blocked resources.

The vulnerability of the Squid proxy server is related to the lack of authentication mechanism for urlregex. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to blocked resources...

The vulnerability of the Squid proxy server, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Squid proxy server arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server allows a hacker to trigger a service denial or execute arbitrary code.

The vulnerability of the HttpHeader::getAuth function in the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the Proxy-Authentication component of the Squid proxy server allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability in the cachemgr.cgi utility of the Squid proxy server allows a hacker to perform cross-site scripting attacks.

The vulnerability of the cachemgr.cgi utility of the Squid proxy server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks using the username or auth...

squid security update

CentOS Errata and Security Advisory CESA-2020:2040 An update for squid is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

Information disclosure

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

CVE-2020-13135 concerns the D-Link DSP-W215 smart plug (version 1.26b03). According to the provided documents, the issue is an information-disclosure vulnerability where an attacker can intercept messages on the local network, demonstrated via a Squid Proxy. The CVE entry notes local-network acce...