varnish cache project kayıtları
varnish cache project üreticisine ait 14 yayımlanmış kayıt. Bunların 1 tanesi sahada sömürüldü (CISA KEV listesinde), 1 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 1 · %7,1
- Silahlaştırılmış
- 1 · %7,1
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %92,9
- Yayından KEV’e ortanca
- 0 gün
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4
- CWE-400 Uncontrolled Resource Consumption2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-617 Reachable Assertion1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-190 Integer Overflow or Wraparound1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
90Hemen | CVE-2023-44487Silahlaştırılmış | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, assiemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware · CWE-400 | Yüksek7,5KEV | %99,910 Eki 2023 |
37İzleyin | CVE-2017-8807İstismar yok | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to ovarnish-cache · varnish · CWE-119 | Kritik9,1 | %4,015 Kas 2017 |
37İzleyin | CVE-2022-23959İstismar yok | In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x beforvarnish-software · varnich cache · CWE-444 | Kritik9,1 | %2,025 Oca 2022 |
32İzleyin | CVE-2019-15892İstismar yok | An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1.varnish-software · varnish cache · CWE-617 | Yüksek7,5 | %5,93 Eyl 2019 |
31İzleyin | CVE-2015-8852İstismar yok | Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct Hvarnish cache project · varnish cache | Yüksek7,5 | %3,525 Nis 2016 |
31İzleyin | CVE-2017-12425İstismar yok | An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.varnish-cache · varnish · CWE-190 | Yüksek7,5 | %2,44 Ağu 2017 |
31İzleyin | CVE-2022-45059Kavram kanıtı | An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1.varnish cache project · varnish cache · CWE-444 | Yüksek7,5 | %1,89 Kas 2022 |
30İzleyin | CVE-2022-38150İstismar yok | In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forgvarnish cache project · varnish cache · CWE-400 | Yüksek7,5 | %1,410 Ağu 2022 |
30İzleyin | CVE-2022-45060İstismar yok | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.varnish-software · varnish cache · CWE-20 | Yüksek7,5 | %1,29 Kas 2022 |
30İzleyin | CVE-2013-4090İstismar yok | Varnish HTTP cache before 3.0.4: ACL bugvarnish cache project · varnish cache | Yüksek7,5 | %1,212 Şub 2020 |
26İzleyin | CVE-2021-36740İstismar yok | Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST requevarnish-cache · varnish cache · CWE-444 | Orta6,5 | %1,514 Tem 2021 |
21İzleyin | CVE-2013-4484İstismar yok | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET requevarnish-cache · varnish · CWE-119 | Orta5,0 | %3,231 Eki 2013 |
19İzleyin | CVE-2025-30346İstismar yok | Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.varnish-software · varnish enterprise · CWE-444 | Orta4,8 | %0,321 Mar 2025 |
8İzleyin | CVE-2013-0345İstismar yok | varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local usevarnish cache project · varnish cache · CWE-264 | Düşük2,1 | %0,38 May 2014 |
- CVE-2023-4448790Hemen
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023
- CVE-2017-880737İzleyin
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to o
KritikCVSS 9,1İstismar yokEPSS %4varnish-cache · varnish15 Kas 2017
- CVE-2022-2395937İzleyin
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x befor
KritikCVSS 9,1İstismar yokEPSS %2varnish-software · varnich cache25 Oca 2022
- CVE-2019-1589232İzleyin
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1.
YüksekCVSS 7,5İstismar yokEPSS %5varnish-software · varnish cache3 Eyl 2019
- CVE-2015-885231İzleyin
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct H
YüksekCVSS 7,5İstismar yokEPSS %3varnish cache project · varnish cache25 Nis 2016
- CVE-2017-1242531İzleyin
An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.
YüksekCVSS 7,5İstismar yokEPSS %2varnish-cache · varnish4 Ağu 2017
- CVE-2022-4505931İzleyin
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1.
YüksekCVSS 7,5Kavram kanıtıEPSS %1varnish cache project · varnish cache9 Kas 2022
- CVE-2022-3815030İzleyin
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forg
YüksekCVSS 7,5İstismar yokEPSS %1varnish cache project · varnish cache10 Ağu 2022
- CVE-2022-4506030İzleyin
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.
YüksekCVSS 7,5İstismar yokEPSS %1varnish-software · varnish cache9 Kas 2022
- CVE-2013-409030İzleyin
Varnish HTTP cache before 3.0.4: ACL bug
YüksekCVSS 7,5İstismar yokEPSS %1varnish cache project · varnish cache12 Şub 2020
- CVE-2021-3674026İzleyin
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST reque
OrtaCVSS 6,5İstismar yokEPSS %1varnish-cache · varnish cache14 Tem 2021
- CVE-2013-448421İzleyin
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET reque
OrtaCVSS 5,0İstismar yokEPSS %3varnish-cache · varnish31 Eki 2013
- CVE-2025-3034619İzleyin
Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.
OrtaCVSS 4,8İstismar yokEPSS %0varnish-software · varnish enterprise21 Mar 2025
- CVE-2013-03458İzleyin
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local use
DüşükCVSS 2,1İstismar yokEPSS %0varnish cache project · varnish cache8 May 2014