squid

Every one of the 107 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Squid Proxy - HTTP Authentication Credentials DisclosureCVE-2025-62168squid-cache · CVSS 10 · 62% likely

   CWE-550

2. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the pr…CVE-2021-31806Squid-Cache · 95% likely

   CWE-116

3. Denial of Service in HTTP Header parser in squid proxyCVE-2024-25617squid-cache · CVSS 5.3 · 89% likely

   CWE-400

4. Denial of Service in HTTP Message Processing in SquidCVE-2023-49285squid-cache · CVSS 8.6 · 88% likely

   CWE-126

5. client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.CVE-2013-4123Squid-Cache · 80% likely

   CWE-20

6. client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-…CVE-2016-4553Squid-Cache · 80% likely

   CWE-345

7. Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a head…CVE-2021-33620Squid-Cache · CVSS 6.5 · 80% likely

   CWE-20

8. Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.CVE-2016-4054Squid-Cache · 78% likely

   CWE-119

9. The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (…CVE-2014-7141Squid-Cache · 76% likely

   CWE-19

10. The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.CVE-2019-13345Squid-Cache · 74% likely

    CWE-79

11. An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.CVE-2020-8450Squid-Cache · 72% likely

    CWE-131

12. An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This he…CVE-2021-28662Squid-Cache · 72% likely

    CWE-116

13. SQUID-2024:1 Denial of Service in HTTP Chunked DecodingCVE-2024-25111squid-cache · CVSS 8.6 · 65% likely

    CWE-674

14. SQUID-2023:11 Denial of Service in Cache ManagerCVE-2024-23638squid-cache · CVSS 6.5 · 60% likely

    CWE-825

15. The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and…CVE-2010-3072Squid-Cache · 60% likely
16. SQUID-2023:10 Denial of Service in HTTP Request parsingCVE-2023-50269squid-cache · CVSS 8.6 · 58% likely

    CWE-674

17. Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol i…CVE-2009-2622Squid-Cache · 57% likely

    CWE-20

18. HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unide…CVE-2014-3609Squid-Cache · 56% likely

    CWE-20

19. An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does…CVE-2019-12527Squid-Cache · 50% likely

    CWE-7871 bounty report

20. Squid Denial of ServiceCVE-2024-45802squid-cache · CVSS 7.5 · 46% likely

    CWE-20

21. Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corru…CVE-2013-4115Squid-Cache · 44% likely

    CWE-119

22. An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentica…CVE-2019-18679Squid-Cache · 43% likely

    CWE-200

23. mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host head…CVE-2016-4554Squid-Cache · 39% likely

    CWE-345

24. The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containi…CVE-2011-4096Squid-Cache · 37% likely

    CWE-399

25. Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to…CVE-2016-3948Squid-Cache · 35% likely

    CWE-119

26. The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that…CVE-2009-2855Squid-Cache · 34% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.