squid squid

Name: squid squid
Brand: squid

productUS

cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical10high25medium2low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-0478US	medium5.0	72.0% (99th)	Exploit	no fix	2009-02-08	22 versions
CVE-2007-0247US	medium5.0	20.1% (97th)	Exploit	no fix	2007-01-16	6 versions
CVE-2002-0163US	high7.5	15.1% (97th)	Exploit	no fix	2002-03-26	≤ 2.4_9
CVE-2004-0189US	high7.5	13.8% (97th)	Exploit	no fix	2004-03-15	7 versions
CVE-2002-0068US	high7.5	9.45% (95th)	Exploit	no fix	2002-03-08	≤ 2.4_stable_3
CVE-2005-0241US	medium5.0	69.7% (99th)	—	no fix	2005-05-02	7 versions
CVE-2005-0095US	medium5.0	68.8% (99th)	—	no fix	2005-01-15	27 versions
CVE-2005-0174US	medium5.0	50.5% (99th)	—	no fix	2005-02-07	16 versions
CVE-2005-0446US	medium5.0	41.1% (99th)	—	no fix	2005-05-02	59 versions
CVE-2005-0175US	medium5.0	40.7% (99th)	—	no fix	2005-02-07	16 versions
CVE-2005-0173US	high7.5	31.9% (98th)	—	no fix	2005-05-02	38 versions
CVE-2007-1560US	medium5.0	28.2% (98th)	—	no fix	2007-03-21	11 versions
CVE-2004-0918US	medium5.0	15.8% (97th)	—	no fix	2005-01-27	16 versions
CVE-2005-0718US	medium5.0	12.5% (96th)	—	no fix	2005-04-14	58 versions
CVE-2005-0097US	medium5.0	10.6% (96th)	—	no fix	2005-01-11	27 versions
CVE-2004-0832US	medium5.0	10.4% (96th)	—	no fix	2004-11-03	≤ 2.5.6
CVE-2005-0096US	medium5.0	9.42% (95th)	—	no fix	2005-01-25	27 versions
CVE-2005-0094US	medium5.0	8.63% (95th)	—	no fix	2005-01-15	27 versions
CVE-2005-2796US	medium5.0	7.83% (95th)	—	no fix	2005-09-07	61 versions
CVE-2007-0248US	medium5.0	7.08% (94th)	—	no fix	2007-01-16	= 2.6.stable6
CVE-2002-0713US	high7.5	5.54% (93rd)	—	no fix	2002-07-26	≤ 2.4.stable6
CVE-2005-0194US	high10.0	5.12% (92nd)	—	no fix	2005-05-02	38 versions
CVE-2002-0067US	high7.5	3.65% (90th)	—	no fix	2002-03-08	≤ 2.4_stable_2
CVE-2005-2917US	medium5.0	3.40% (89th)	—	no fix	2005-09-30	2 versions
CVE-2005-2794US	medium5.0	3.15% (88th)	—	no fix	2005-09-07	42 versions
CVE-2002-0069US	low2.6	2.78% (86th)	—	no fix	2002-03-08	≤ 2.4_stable_2
CVE-2002-0714US	high7.5OT elevated	2.75% (86th)	—	no fix	2002-07-26	≤ 2.4.stable6
CVE-2005-3322US	medium5.0	2.55% (85th)	—	no fix	2005-10-27	= 2.6.stable1
CVE-2005-1519US	medium6.4	2.36% (84th)	—	no fix	2005-05-11	≤ 2.5_stable9
CVE-2002-0715US	medium5.0	2.30% (83rd)	—	no fix	2002-07-26	≤ 2.4.stable6
CVE-2008-1612US	medium4.3	2.18% (82nd)	—	no fix	2008-04-01	= 2.6.stable17
CVE-2005-3258US	medium5.0	2.10% (82nd)	—	no fix	2005-10-20	45 versions
CVE-2004-2654US	medium5.0	2.04% (81st)	—	no fix	2004-12-31	= 2.5_stable5
CVE-2005-1345US	high7.5	1.71% (77th)	—	no fix	2005-05-02	9 versions
CVE-2005-0626US	low2.6	1.35% (71st)	—	no fix	2005-03-08	3 versions
CVE-2002-2414US	medium4.3	1.19% (68th)	—	no fix	2002-12-31	= 2.4
CVE-2005-1711US	high7.5	1.05% (64th)	—	no fix	2005-05-24	= 2.6.stable1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-284Improper Access Control6 CVEs
CWE-399CWE-3996 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan