Login Request a demo
VA
Product
Varnish
by Varnish-cache · last CVE Nov 16, 2017
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities3Critical1High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Varnish to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8807
9.1
4%
Nov 16
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from…
Affected: 4.1.0 before 4.1.9
CVE-2017-12425
7.5
2%
Aug 4
An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2
Affected: 4.0.2; 4.0.3; 4.0.3; 4.0.3; 4.0.3; 4.1.0
CVE-2013-4484
–
3%
Nov 1
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters…
Affected: 2.0.0
Showing 3