varnish-cache kayıtları

varnish-cache üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %85,7
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2017-8807İstismar yok	vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to ovarnish-cache · varnish · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,1	—	%4,1	15 Kas 2017
31İzleyin	CVE-2017-12425İstismar yok	An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.varnish-cache · varnish · CWE-190 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%2,4	4 Ağu 2017
31İzleyin	CVE-2020-11653İstismar yok	An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.varnish-cache · varnish cache · CWE-617 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%2,2	8 Nis 2020
31İzleyin	CVE-2019-20637İstismar yok	An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.varnish-cache · varnish cache · CWE-212 Kimlik doğrulamasız	Yüksek7,5	—	%1,8	8 Nis 2020
30İzleyin	CVE-2021-28543İstismar yok	Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations.varnish-cache · varnish-modules · CWE-476 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%1,5	16 Mar 2021
26İzleyin	CVE-2021-36740İstismar yok	Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST requevarnish-cache · varnish cache · CWE-444 Kimlik doğrulamasız	Orta6,5	—	%1,6	14 Tem 2021
21İzleyin	CVE-2013-4484İstismar yok	Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET requevarnish-cache · varnish · CWE-119 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Orta5,0	—	%3,2	31 Eki 2013

CVE-2017-8807
37İzleyin
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to o
KritikCVSS 9,1İstismar yokEPSS %4
- Kimlik doğrulamasız
- Bellek hatası
varnish-cache · varnish15 Kas 2017
CVE-2017-12425
31İzleyin
An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.
YüksekCVSS 7,5İstismar yokEPSS %2
varnish-cache · varnish4 Ağu 2017
CVE-2020-11653
31İzleyin
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
- Hizmet dışı bırakma
varnish-cache · varnish cache8 Nis 2020
CVE-2019-20637
31İzleyin
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
varnish-cache · varnish cache8 Nis 2020
CVE-2021-28543
30İzleyin
Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations.
YüksekCVSS 7,5İstismar yokEPSS %1
varnish-cache · varnish-modules16 Mar 2021
CVE-2021-36740
26İzleyin
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST reque
OrtaCVSS 6,5İstismar yokEPSS %2
- Kimlik doğrulamasız
varnish-cache · varnish cache14 Tem 2021
CVE-2013-4484
21İzleyin
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET reque
OrtaCVSS 5,0İstismar yokEPSS %3
varnish-cache · varnish31 Eki 2013