Skip to content
Noroxi

squid-cache records

111 published records for vendor squid-cache.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 1.8%
Pre-auth RCE
9
With a fix record
95.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

111 records
  • CVE-2016-4553
    58Plan

    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which al

    HighCVSS 8.6No exploitEPSS 80%

    canonical · ubuntu linuxMay 10, 2016

  • CVE-2023-46847
    57Plan

    Squid: denial of service in http digest authentication

    HighCVSS 7.5No exploitEPSS 88%

    squid-cache · squidNov 3, 2023

  • CVE-2023-49285
    56Plan

    Denial of Service in HTTP Message Processing in Squid

    HighCVSS 7.5No exploitEPSS 88%

    squid-cache · squidDec 4, 2023

  • CVE-2024-25617
    56Plan

    Denial of Service in HTTP Header parser in squid proxy

    HighCVSS 7.5No exploitEPSS 88%

    squid-cache · squidFeb 14, 2024

  • CVE-2021-31806
    55Plan

    An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.

    MediumCVSS 6.5WeaponizedEPSS 96%

    squid-cache · squidMay 27, 2021

  • CVE-2016-4054
    55Plan

    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Incl

    HighCVSS 8.1No exploitEPSS 78%

    canonical · ubuntu linuxApr 25, 2016

  • CVE-2020-8450
    51Plan

    An issue was discovered in Squid before 4.10.

    HighCVSS 7.3No exploitEPSS 72%

    squid-cache · squidFeb 4, 2020

  • CVE-2021-33620
    50Plan

    Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTT

    MediumCVSS 6.5No exploitEPSS 80%

    squid-cache · squidMay 28, 2021

  • CVE-2024-25111
    50Plan

    SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

    HighCVSS 7.5No exploitEPSS 65%

    squid-cache · squidMar 6, 2024

  • CVE-2019-12527
    50Plan

    An issue was discovered in Squid 4.0.23 through 4.7.

    HighCVSS 8.8No exploitEPSS 49%

    squid-cache · squidJul 11, 2019

  • CVE-2025-62168
    49Plan

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    HighCVSS 7.5Proof of conceptEPSS 63%

    squid-cache · squidOct 17, 2025

  • CVE-2014-7141
    48Plan

    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds rea

    MediumCVSS 6.4No exploitEPSS 76%

    squid-cache · squidNov 26, 2014

  • CVE-2021-28662
    48Plan

    An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6.

    MediumCVSS 6.5No exploitEPSS 72%

    squid-cache · squidMay 27, 2021

  • CVE-2023-50269
    47Plan

    SQUID-2023:10 Denial of Service in HTTP Request parsing

    HighCVSS 7.5No exploitEPSS 58%

    squid-cache · squidDec 14, 2023

  • CVE-2020-11945
    47Plan

    An issue was discovered in Squid before 5.0.2.

    CriticalCVSS 9.8No exploitEPSS 27%

    squid-cache · squidApr 23, 2020

  • CVE-2019-13345
    46Plan

    The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

    MediumCVSS 6.1No exploitEPSS 74%

    squid-cache · squidJul 5, 2019

  • CVE-2016-4555
    46Plan

    client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via craft

    HighCVSS 7.5No exploitEPSS 54%

    squid-cache · squidMay 10, 2016

  • CVE-2016-4554
    46Plan

    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoni

    HighCVSS 8.6No exploitEPSS 39%

    oracle · linuxMay 10, 2016

  • CVE-2019-12525
    46Plan

    An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7.

    CriticalCVSS 9.8No exploitEPSS 24%

    squid-cache · squidJul 11, 2019

  • CVE-2025-54574
    46Plan

    Squid's URN Handling can lead to Buffer Overflow

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    squid-cache · squidAug 1, 2025

  • CVE-2019-12526
    45Plan

    An issue was discovered in Squid before 4.9.

    CriticalCVSS 9.8No exploitEPSS 20%

    squid-cache · squidNov 26, 2019

  • CVE-2013-4123
    44Plan

    client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafte

    MediumCVSS 5.0Proof of conceptEPSS 80%

    squid-cache · squidSep 16, 2013

  • CVE-2024-23638
    44Plan

    SQUID-2023:11 Denial of Service in Cache Manager

    MediumCVSS 6.5No exploitEPSS 60%

    squid-cache · squidJan 23, 2024

  • CVE-2024-45802
    44Plan

    Squid Denial of Service

    HighCVSS 7.5No exploitEPSS 48%

    squid-cache · squidOct 28, 2024

  • CVE-2013-4115
    43Plan

    Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to

    HighCVSS 7.5No exploitEPSS 44%

    opensuse · opensuseAug 9, 2013