1164 matches found
WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin Varnish/Nginx Proxy Caching versions = 1.8.3...
PT-2025-54365
Name of the Vulnerable Software and Affected Versions Varnish/Nginx Proxy Caching versions through 1.8.3 Description A flaw exists in Varnish/Nginx Proxy Caching that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations...
📄 Varnish / Styx HTTP Request Smuggling
Proof of concept exploit that demonstrates an HTTP request smuggling vulnerability between Varnish and Styx / Nginx. ============================================================================================================================================= | Title : HTTP Request Smuggling TE.CL...
The vulnerability of the Varnish cache server, related to deficiencies in HTTP request processing, allows attackers to send arbitrary HTTP requests.
The vulnerability of the Varnish cache server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send arbitrary HTTP requests remotely...
ROS-20251215-7312
Vulnerability in varnish related to flaws in http request handling. Exploitation of the vulnerability could allow a remote attacker to send a hidden http request http request smuggling attack...
FreeBSD : www/varnish-libvmod-digest -- base64 decoding vulnerability (64bec4c7-d785-11f0-a1c0-0050569f0b83)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 64bec4c7-d785-11f0-a1c0-0050569f0b83 advisory. varnish developers report: Common usage of vmod-digest is for basic HTTP authentication, in which case ...
The vulnerability of HTTP accelerator Varnish Cache, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests.
The vulnerability of the HTTP accelerator Varnish Cache is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out attacks by replacing HTTP requests with malicious content...
CVE-2025-62867
Missing Authorization vulnerability in ergonet Ergonet Cache ergonet-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ergonet Cache: from n/a through = 1.0.13...
EUVD-2025-202016
Missing Authorization vulnerability in ergonet Ergonet Cache ergonet-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ergonet Cache: from n/a through = 1.0.11...
CVE-2025-62867
Missing Authorization vulnerability in ergonet Ergonet Cache ergonet-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ergonet Cache: from n/a through = 1.0.13...
ROS-20251203-06
A vulnerability in Varnish web content caching software is related to incorrect HTTP/1 requests HTTP/1 request validation. Exploitation of the vulnerability could allow a remote attacker, Perform HTTP request spoofing attacks...
CLSA-2025-1763374645 varnish: Fix of 2 CVEs
CVE-2024-30156: fix HTTP/2 flow control vulnerability allowing window credit exhaustion Broke Window Attack causing potential denial of service - CVE-2025-47905: fix client-side request smuggling via malformed HTTP/1 chunked requests...
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files schemes that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This...
Fedora 44 : varnish (2025-2ff6e32273)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2ff6e32273 advisory. Automatic update for varnish-7.7.3-2.fc44. Changelog Wed Oct 29 2025 Lubo Uhliarik - 7.7.3-2 - Add tmpfiles.d rules for /var directories bootc...
Updated varnish & lighttpd packages fix security vulnerability
It was discovered that a denial of service attack can be performed on cache servers that have the HTTP/2 protocol turned on. An attacker can create a large number of streams and immediately reset them without ever reaching the maximum number of concurrent streams allowed for the session, causing...
MGASA-2025-0239 Updated varnish & lighttpd packages fix security vulnerability
It was discovered that a denial of service attack can be performed on cache servers that have the HTTP/2 protocol turned on. An attacker can create a large number of streams and immediately reset them without ever reaching the maximum number of concurrent streams allowed for the session, causing...
Mageia: Security Advisory (MGASA-2025-0239)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 10 : varnish (ALSA-2025:8550)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8550 advisory. varnish: request smuggling attacks CVE-2025-47905 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...