Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

varnish-software varnish cache plus vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-45060
An HTTP Request Forgery issue exists in Varnish Cache 5.x and 6.x prior to 6.0.11, 7.x prior to 7.1.2, and 7.2.x prior to 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish serve...
Varnish-software Varnish Cache Plus 6.0.8Varnish Cache Project Varnish Cache 7.2.0Varnish Cache Project Varnish CacheVarnish-software Varnish Cache Plus 6.0.10Varnish-software Varnish Cache Plus 6.0.0Varnish-software Varnish Cache Plus 6.0.1Varnish-software Varnish Cache Plus 6.0.2Varnish-software Varnish Cache Plus 6.0.3Varnish-software Varnish Cache Plus 6.0.4Varnish-software Varnish Cache Plus 6.0.5Varnish-software Varnish Cache Plus 6.0.6Varnish-software Varnish Cache Plus 6.0.7Varnish-software Varnish Cache Plus 6.0.9Varnish-software Varnish CacheFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
9.1
CVSSv3
CVE-2022-23959
In Varnish Cache prior to 6.6.2 and 7.x prior to 7.0.2, Varnish Cache 6.0 LTS prior to 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x prior to 4.1.11r6 and 6.0.x prior to 6.0.9r4, request smuggling can occur for HTTP/1 connections.
Varnish-software Varnich Cache 4.1Varnish-software Varnich CacheVarnish Cache Project Varnish CacheVarnish-software Varnish CacheVarnish-software Varnish Cache PlusFedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook