Vulnerability index

Browse CVEs

23 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Privoxy HIGH 7.5
CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors.

Fix: 3.0.33+
Fix from $1,950 2021-12-23
Privoxy MEDIUM 6.1
CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce…

Fix: 3.0.33+
Fix from $1,600 2021-12-23
Privoxy HIGH 7.5
CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.

Fix: 3.0.33+
Fix from $1,950 2021-12-23
Privoxy HIGH 7.5
CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request …

Fix: 3.0.33+
Fix from $1,950 2021-12-23
Privoxy HIGH 7.5
CVE-2021-20209

A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.

Fix: 3.0.29+
Fix from $1,950 2021-05-25
Privoxy HIGH 7.5
CVE-2021-20214

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocat…

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20215

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system …

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of servic…

Fix: 3.0.31+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20217

A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The hig…

Fix: 3.0.31+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2020-35502

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running…

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20210

A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a s…

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20211

A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash.

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20212

A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error l…

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20213

A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was …

Fix: 3.0.29+
Fix from $1,950 2021-03-25
Privoxy HIGH 7.5
CVE-2021-20274

A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.

Fix: 3.0.32+
Fix from $1,950 2021-03-09
Privoxy HIGH 7.8
CVE-2019-3699

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate fr…

Fix: 3.0.28-lp151.1.1 / 3.0.28-2.1+
Fix from $1,950 2020-01-24
Privoxy HIGH 7.5
CVE-2016-1983

The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an e…

Fix: after 3.0.23
Fix from $1,950 2016-01-27
Privoxy HIGH 7.5
CVE-2016-1982

The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read …

Fix: after 3.0.23
Fix from $1,950 2016-01-27
Privoxy HIGH 7.5
CVE-2015-1031

Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unm…

Fix: after 3.0.21
Fix from $1,950 2015-02-10
Privoxy MEDIUM 5.0
CVE-2015-1380

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.

Fix: after 3.0.22
Fix from $1,600 2015-02-03
Privoxy MEDIUM 5.0
CVE-2015-1201

Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenan…

Fix: after 3.0.21
Fix from $1,600 2015-01-20
Privoxy MEDIUM 5.0
CVE-2015-1030

Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory co…

Fix: after 3.0.21
Fix from $1,600 2015-01-20
Privoxy MEDIUM 5.8
CVE-2013-2503

Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it ea…

Fix: after 3.0.20
Fix from $1,600 2013-03-11