Lucene search
+L

6194 matches found

OSV
OSV
added 2022/09/23 12:00 a.m.7 views

UBUNTU-CVE-2022-41318

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a...

8.6CVSS7.3AI score0.0282EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/09/23 12:00 a.m.56 views

CVE-2022-41318

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a...

8.6CVSS7.2AI score0.0282EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.6 views

Squid 安全漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid has a security vulnerability. An attacker can exploit this vulnerability to read sensitive information by...

6.5CVSS6.8AI score0.0169EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.5 views

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from an out-of-bounds read vulnerability. The vulnerability stems from a boundary error when handling...

8.6CVSS6.7AI score0.0282EPSS
SaveExploits0References14
OSV
OSV
added 2022/09/23 12:00 a.m.9 views

UBUNTU-CVE-2022-41317

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7...

6.5CVSS6.8AI score0.0169EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/23 12:00 a.m.52 views

CVE-2022-41317

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7...

6.5CVSS6.8AI score0.0169EPSS
SaveExploits0References3
Schneier on Security
Schneier on Security
added 2022/09/16 9:01 p.m.12 views

Friday Squid Blogging: Mayfly Squid

This is surprisingly funny. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/09/09 9:03 p.m.13 views

Friday Squid Blogging: Colossal Squid in New Zealand Museum

Its in Timaru. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.3AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/09/02 9:32 p.m.20 views

Friday Squid Blogging: Squid Images

iStock has over 13,000 royalty-free images of squid. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.1AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/08/26 9:08 p.m.22 views

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Its an Architeuthis dux, the second this year. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

2.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.20 views

Ubuntu: Security Advisory (USN-93-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.7AI score0.01352EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.32 views

Ubuntu: Security Advisory (USN-19-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.1603EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.19 views

Ubuntu: Security Advisory (USN-111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.12534EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.25 views

Ubuntu: Security Advisory (USN-77-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.50775EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.27 views

Ubuntu: Security Advisory (USN-67-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.68776EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.30 views

Ubuntu: Security Advisory (USN-84-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.41109EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2022/08/19 9:05 p.m.25 views

Friday Squid Blogging: The Language of the Jumbo Flying Squid

The jumbo flying squid Dosidicus gigas uses its color-changing ability as a language: In 2020, however, marine biologists discovered that jumbo flying squid are surprisingly coordinated. Despite their large numbers, the squid rarely bumped into each other or competed for the same prey. The...

0.7AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/08/12 9:06 p.m.21 views

Friday Squid Blogging: SQUID Acronym for Making Conscious Choices

I think the U is forced: SQUID consists of five steps: Stop, Question, Understand, Imagine, and Decide. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

1.5AI score
SaveExploits0
Photon
Photon
added 2022/08/11 12:00 a.m.40 views

Important Photon OS Security Update - PHSA-2022-3.0-0433

Updates of 'linux-aws', 'linux', 'linux-secure', 'squid', 'linux-esx', 'linux-rt', 'python3' packages of Photon OS have been released...

7.8CVSS7AI score0.10458EPSS
SaveExploits13
Photon
Photon
added 2022/08/06 12:00 a.m.37 views

Important Photon OS Security Update - PHSA-2022-0224

Updates of 'squid', 'libtirpc' packages of Photon OS have been released...

1.7AI score0.04544EPSS
SaveExploits0
Rows per page
Query Builder