VC
Product
Varnish Cache
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 2Low 0
Watch
Add Varnish Cache to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45060 | 7.5 | Nov 9 | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1 Affected: 5.0.0 before 6.0.11; 7.0.0 before 7.1.2; 7.2.0 |
| CVE-2022-45059 | 7.5 | Nov 9 | An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1 Affected: 7.0.0 before 7.1.2; 7.2.0 |
| CVE-2022-38150 | 7.5 | Aug 11 | In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses Affected: 7.0.0; 7.0.1; 7.0.2; 7.1.0 |
| CVE-2013-4090 | 7.5 | Feb 12 | Varnish HTTP cache before 3.0.4: ACL bug Affected: before 3.0.4 |
| CVE-2019-15892 | 7.5 | Sep 3 | An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1 Affected: 6.1.0 through 6.1.1; 6.2.0 before 6.2.1 |
| CVE-2017-12425 | 7.5 | Aug 4 | An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2 Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 5.0.0; 5.1.0; +2 more |
| CVE-2015-8852 | 7.5 | Apr 25 | Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a… Affected: 3.0.0; 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; +2 more |
Showing 7