VC
Vendor
Varnish Cache Project
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-30346 | VC Varnish Cache Varnish Cache Project | 4.8 | Mar 21 | Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests |
| CVE-2022-45060 | VC Varnish Cache Varnish Cache Project | 7.5 | Nov 9 | An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1 |
| CVE-2022-45059 | VC Varnish Cache Varnish Cache Project | 7.5 | Nov 9 | An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1 |
| CVE-2022-38150 | VC Varnish Cache Varnish Cache Project | 7.5 | Aug 11 | In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses |
| CVE-2022-23959 | VC Varnish Cache Varnish Cache Project | 9.1 | Jan 26 | In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4,… |
| CVE-2021-36740 | VC Varnish Cache Varnish Cache Project | 6.5 | Jul 14 | Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request |
| CVE-2013-4090 | VC Varnish Cache Varnish Cache Project | 7.5 | Feb 12 | Varnish HTTP cache before 3.0.4: ACL bug |
| CVE-2019-15892 | VC Varnish Cache Varnish Cache Project | 7.5 | Sep 3 | An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1 |
| CVE-2017-8807 | VC Varnish Cache Varnish Cache Project | 9.1 | Nov 16 | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from… |
| CVE-2017-12425 | VC Varnish Cache Varnish Cache Project | 7.5 | Aug 4 | An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2 |
| CVE-2015-8852 | VC Varnish Cache Varnish Cache Project | 7.5 | Apr 25 | Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a… |
| CVE-2013-0345 | VC Varnish Cache Varnish Cache Project | – | May 8 | varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by… |
| CVE-2013-4484 | VC Varnish Cache Varnish Cache Project | – | Nov 1 | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters… |