PR
Vendor
Privoxy
29
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-44543 | PR Privoxy Privoxy | 6.1 | Dec 23 | An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself |
| CVE-2021-44542 | PR Privoxy Privoxy | 7.5 | Dec 23 | A memory leak vulnerability was found in Privoxy when handling errors |
| CVE-2021-44541 | PR Privoxy Privoxy | 7.5 | Dec 23 | A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination |
| CVE-2021-44540 | PR Privoxy Privoxy | 7.5 | Dec 23 | A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing |
| CVE-2021-20209 | PR Privoxy Privoxy | 7.5 | May 25 | A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured |
| CVE-2021-20217 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.31 |
| CVE-2021-20216 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.31 |
| CVE-2021-20215 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20214 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20213 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20212 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20211 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20210 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2020-35502 | PR Privoxy Privoxy | 7.5 | Mar 25 | A flaw was found in Privoxy in versions before 3.0.29 |
| CVE-2021-20276 | PR Privoxy Privoxy | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 |
| CVE-2021-20275 | PR Privoxy Privoxy | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 |
| CVE-2021-20274 | PR Privoxy Privoxy | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 |
| CVE-2021-20273 | PR Privoxy Privoxy | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 |
| CVE-2021-20272 | PR Privoxy Privoxy | 7.5 | Mar 9 | A flaw was found in privoxy before 3.0.32 |
| CVE-2019-3699 | PR Privoxy Privoxy | 7.8 | Jan 24 | UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root |
| CVE-2016-1983 | PR Privoxy Privoxy | 7.5 | Jan 27 | The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header |
| CVE-2016-1982 | PR Privoxy Privoxy | 7.5 | Jan 27 | The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted… |
| CVE-2015-1031 | PR Privoxy Privoxy | – | Feb 10 | Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2)… |
| CVE-2015-1382 | PR Privoxy Privoxy | – | Feb 3 | parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header |
| CVE-2015-1381 | PR Privoxy Privoxy | – | Feb 3 | Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via… |
| CVE-2015-1380 | PR Privoxy Privoxy | – | Feb 3 | jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body |
| CVE-2015-1201 | PR Privoxy Privoxy | – | Jan 20 | Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors |
| CVE-2015-1030 | PR Privoxy Privoxy | – | Jan 20 | Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number… |
| CVE-2013-2503 | PR Privoxy Privoxy | – | Mar 11 | Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers… |