privoxy records
29 published records for vendor privoxy.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 96.6%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-401 Missing Release of Memory after Effective Lifetime10
- CWE-20 Improper Input Validation6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-399 Resource Management Errors2
- CWE-476 NULL Pointer Dereference2
- CWE-617 Reachable Assertion2
The weakness classes this vendor ships most often: where to look.
CWEAll records
29 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2016-1983No exploit | The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash)privoxy · privoxy · CWE-20 | High7.5 | — | 2.8% | Jan 27, 2016 |
31Monitor | CVE-2016-1982No exploit | The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invaprivoxy · privoxy · CWE-20 | High7.5 | — | 2.7% | Jan 27, 2016 |
31Monitor | CVE-2015-1031No exploit | Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1privoxy · privoxy | High7.5 | — | 2.4% | Feb 10, 2015 |
31Monitor | CVE-2020-35502No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.3% | Mar 25, 2021 |
31Monitor | CVE-2021-20210No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.3% | Mar 25, 2021 |
31Monitor | CVE-2021-20216No exploit | A flaw was found in Privoxy in versions before 3.0.31.privoxy · privoxy · CWE-400 | High7.5 | — | 2.2% | Mar 25, 2021 |
31Monitor | CVE-2021-20215No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.2% | Mar 25, 2021 |
31Monitor | CVE-2021-20211No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.1% | Mar 25, 2021 |
31Monitor | CVE-2021-20272No exploit | A flaw was found in privoxy before 3.0.32.privoxy · privoxy · CWE-617 | High7.5 | — | 2.1% | Mar 9, 2021 |
31Monitor | CVE-2021-20214No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.0% | Mar 25, 2021 |
31Monitor | CVE-2021-20212No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-401 | High7.5 | — | 2.0% | Mar 25, 2021 |
31Monitor | CVE-2021-20275No exploit | A flaw was found in privoxy before 3.0.32.privoxy · privoxy · CWE-119 | High7.5 | — | 1.9% | Mar 9, 2021 |
31Monitor | CVE-2021-20276No exploit | A flaw was found in privoxy before 3.0.32.privoxy · privoxy · CWE-119 | High7.5 | — | 1.9% | Mar 9, 2021 |
31Monitor | CVE-2021-20273No exploit | A flaw was found in privoxy before 3.0.32.privoxy · privoxy · CWE-20 | High7.5 | — | 1.9% | Mar 9, 2021 |
31Monitor | CVE-2021-20274No exploit | A flaw was found in privoxy before 3.0.32.privoxy · privoxy · CWE-476 | High7.5 | — | 1.9% | Mar 9, 2021 |
31Monitor | CVE-2021-20209No exploit | A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.privoxy · privoxy · CWE-401 | High7.5 | — | 1.8% | May 25, 2021 |
31Monitor | CVE-2019-3699No exploit | Local privilege escalation from user privoxy to rootprivoxy · privoxy · CWE-59 | High7.8 | — | 0.4% | Jan 24, 2020 |
30Monitor | CVE-2021-20213No exploit | A flaw was found in Privoxy in versions before 3.0.29.privoxy · privoxy · CWE-476 | High7.5 | — | 1.5% | Mar 25, 2021 |
30Monitor | CVE-2021-44541No exploit | A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get theprivoxy · privoxy · CWE-401 | High7.5 | — | 1.4% | Dec 23, 2021 |
30Monitor | CVE-2021-20217No exploit | A flaw was found in Privoxy in versions before 3.0.31.privoxy · privoxy · CWE-617 | High7.5 | — | 1.3% | Mar 25, 2021 |
30Monitor | CVE-2021-44540No exploit | A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.privoxy · privoxy · CWE-401 | High7.5 | — | 1.3% | Dec 23, 2021 |
30Monitor | CVE-2021-44542No exploit | A memory leak vulnerability was found in Privoxy when handling errors.privoxy · privoxy · CWE-401 | High7.5 | — | 1.2% | Dec 23, 2021 |
24Monitor | CVE-2013-2503Proof of concept | Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which maprivoxy · privoxy · CWE-20 | Medium5.8 | — | 4.6% | Mar 11, 2013 |
24Monitor | CVE-2021-44543No exploit | An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured privoxy · privoxy · CWE-79 | Medium6.1 | — | 0.7% | Dec 23, 2021 |
21Monitor | CVE-2015-1380No exploit | jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.privoxy · privoxy · CWE-20 | Medium5.0 | — | 3.3% | Feb 3, 2015 |
- CVE-2016-198331Monitor
The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash)
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyJan 27, 2016
- CVE-2016-198231Monitor
The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (inva
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyJan 27, 2016
- CVE-2015-103131Monitor
Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyFeb 10, 2015
- CVE-2020-3550231Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2021031Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2021631Monitor
A flaw was found in Privoxy in versions before 3.0.31.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2021531Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2021131Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2027231Monitor
A flaw was found in privoxy before 3.0.32.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 9, 2021
- CVE-2021-2021431Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2021231Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 2%privoxy · privoxyMar 25, 2021
- CVE-2021-2027531Monitor
A flaw was found in privoxy before 3.0.32.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 9, 2021
- CVE-2021-2027631Monitor
A flaw was found in privoxy before 3.0.32.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 9, 2021
- CVE-2021-2027331Monitor
A flaw was found in privoxy before 3.0.32.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 9, 2021
- CVE-2021-2027431Monitor
A flaw was found in privoxy before 3.0.32.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 9, 2021
- CVE-2021-2020931Monitor
A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMay 25, 2021
- CVE-2019-369931Monitor
Local privilege escalation from user privoxy to root
HighCVSS 7.8No exploitEPSS 0%privoxy · privoxyJan 24, 2020
- CVE-2021-2021330Monitor
A flaw was found in Privoxy in versions before 3.0.29.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 25, 2021
- CVE-2021-4454130Monitor
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyDec 23, 2021
- CVE-2021-2021730Monitor
A flaw was found in Privoxy in versions before 3.0.31.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyMar 25, 2021
- CVE-2021-4454030Monitor
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyDec 23, 2021
- CVE-2021-4454230Monitor
A memory leak vulnerability was found in Privoxy when handling errors.
HighCVSS 7.5No exploitEPSS 1%privoxy · privoxyDec 23, 2021
- CVE-2013-250324Monitor
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which ma
MediumCVSS 5.8Proof of conceptEPSS 4%privoxy · privoxyMar 11, 2013
- CVE-2021-4454324Monitor
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured
MediumCVSS 6.1No exploitEPSS 0%privoxy · privoxyDec 23, 2021
- CVE-2015-138021Monitor
jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.
MediumCVSS 5.0No exploitEPSS 3%privoxy · privoxyFeb 3, 2015