varnish.projects.linpro records
2 published records for vendor varnish.projects.linpro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 50%
- Pre-auth RCE
- 2
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
49Plan | CVE-2009-2936Weaponized | The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before varnish.projects.linpro · varnish · CWE-287 | High7.5 | — | 63.8% | Apr 5, 2010 |
43Plan | CVE-2009-4488Proof of concept | Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window'svarnish.projects.linpro · varnish · CWE-20 | Critical9.8 | — | 12.9% | Jan 13, 2010 |
- CVE-2009-293649Plan
The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before
HighCVSS 7.5WeaponizedEPSS 63%varnish.projects.linpro · varnishApr 5, 2010
- CVE-2009-448843Plan
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's
CriticalCVSS 9.8Proof of conceptEPSS 12%varnish.projects.linpro · varnishJan 13, 2010