VA
Vendor
Varnish-cache
8
CVEs
0
On KEV
0
New 30D
Products
VA9.1
Varnish
Varnish-cache
3 CVEs0 on KEV0 new
VC7.5
Varnish Cache
Varnish-cache
3 CVEs0 on KEV0 new
VA7.5
Varnish-modules
Varnish-cache
1 CVEs0 on KEV0 new
VK7.5
Varnish-modules Klarlack
Varnish-cache
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-36740 | VC Varnish Cache Varnish-cache | 6.5 | Jul 14 | Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request |
| CVE-2021-28543 | VA Varnish-modules Varnish-cache | 7.5 | Mar 16 | Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations |
| CVE-2020-11653 | VC Varnish Cache Varnish-cache | 7.5 | Apr 8 | An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2 |
| CVE-2019-20637 | VC Varnish Cache Varnish-cache | 7.5 | Apr 8 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1 |
| CVE-2017-8807 | VA Varnish Varnish-cache | 9.1 | Nov 16 | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from… |
| CVE-2017-12425 | VA Varnish Varnish-cache | 7.5 | Aug 4 | An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2 |
| CVE-2013-4484 | VA Varnish Varnish-cache | – | Nov 1 | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters… |