PR
Product
Privoxy
29
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 21Medium 1Low 0
Watch
Add Privoxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3699 | 7.8 | Jan 24 | UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root Affected: before 3.0.28-lp151.1.1; before 3.0.28-2.1 |
| CVE-2021-44542 | 7.5 | Dec 23 | A memory leak vulnerability was found in Privoxy when handling errors Affected: before 3.0.33 |
| CVE-2021-44541 | 7.5 | Dec 23 | A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination Affected: before 3.0.33 |
| CVE-2021-44540 | 7.5 | Dec 23 | A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing Affected: before 3.0.33 |
| CVE-2021-20209 | 7.5 | May 25 | A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured Affected: before 3.0.29 |
| CVE-2021-20217 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.31 Affected: before 3.0.31 |
| CVE-2021-20216 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.31 Affected: before 3.0.31 |
| CVE-2021-20215 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20214 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20213 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20212 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20211 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20210 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2020-35502 | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 Affected: before 3.0.29 |
| CVE-2021-20276 | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 Affected: before 3.0.32 |
| CVE-2021-20275 | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 Affected: before 3.0.32 |
| CVE-2021-20274 | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 Affected: before 3.0.32 |
| CVE-2021-20273 | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 Affected: before 3.0.32 |
| CVE-2021-20272 | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 Affected: before 3.0.32 |
| CVE-2016-1983 | 7.5 | Jan 27 | The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header Affected: through 3.0.23 |
| CVE-2016-1982 | 7.5 | Jan 27 | The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted… Affected: through 3.0.23 |
Showing 21