squid-cache squid

Name: squid-cache squid
Brand: squid-cache

productUS

cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical51high48medium2low

updated 2026-10-27

vulnerabilities (111)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-31806US	medium6.5	95.3% (100th)	Exploit	5.0.6	2021-05-27	2 versions
CVE-2013-4123US	medium5.0	80.5% (100th)	Exploit	no fix	2013-09-16	41 versions
CVE-2025-62168US	high7.5	63.4% (99th)	Exploit	7.2	2025-10-17	< 7.2
CVE-2016-2569US	high7.5	31.2% (98th)	Exploit	no fix	2016-02-27	133 versions
CVE-2025-54574US	critical9.8	24.0% (98th)	Exploit	6.4	2025-08-01	< 6.4
CVE-2021-31807US	medium6.5	15.6% (97th)	Exploit	5.0.6	2021-06-08	17 versions
CVE-2018-19131US	medium6.1	3.32% (88th)	Exploit	4.4	2018-11-09	< 4.4
CVE-2026-47729US	—	1.50% (74th)	Exploit	7.6	2026-07-16	< 7.6
CVE-2023-49285US	high7.5	88.1% (100th)	—	no fix	2023-12-04	≤ 6.4
CVE-2024-25617US	high7.5	88.1% (100th)	—	6.5	2024-02-14	3.0 → 6.5
CVE-2016-4553US	high8.6OT high	80.0% (100th)	—	no fix	2016-05-10	10 versions
CVE-2021-33620US	medium6.5	79.6% (100th)	—	5.0.6	2021-05-28	2 versions
CVE-2023-46847US	high7.5	78.5% (100th)	—	6.4	2023-11-03	3.2.0.1 → 6.4
CVE-2016-4054US	high8.1	77.6% (100th)	—	no fix	2016-04-25	140 versions
CVE-2014-7141US	medium6.4	76.1% (100th)	—	no fix	2014-11-26	80 versions
CVE-2019-13345US	medium6.1	74.5% (99th)	—	no fix	2019-07-05	≤ 4.7
CVE-2020-8450US	high7.3	71.8% (99th)	—	4.10	2020-02-04	< 4.10
CVE-2021-28662US	medium6.5	71.8% (99th)	—	4.15	2021-05-27	2 versions
CVE-2024-25111US	high7.5	65.3% (99th)	—	6.8	2024-03-06	3.5.27 → 6.8
CVE-2024-23638US	medium6.5	60.1% (99th)	—	6.6	2024-01-24	2 versions
CVE-2010-3072US	medium5.0	59.9% (99th)	—	no fix	2010-09-20	53 versions
CVE-2023-50269US	high7.5	57.6% (99th)	—	no fix	2023-12-14	4 versions
CVE-2009-2622US	medium5.0	56.9% (99th)	—	no fix	2009-07-28	6 versions
CVE-2014-3609US	medium5.0	56.2% (99th)	—	no fix	2014-09-11	88 versions
CVE-2019-12527US	high8.8	49.0% (99th)	—	no fix	2019-07-11	4.0.23 → 4.7
CVE-2024-45802US	high7.5	47.9% (99th)	—	6.10	2024-10-28	3.0 → 6.10
CVE-2013-4115US	high7.5	43.9% (99th)	—	no fix	2013-08-09	17 versions
CVE-2019-18679US	high7.5	41.0% (99th)	—	no fix	2019-11-26	4 versions
CVE-2016-4554US	high8.6OT high	38.9% (99th)	—	no fix	2016-05-10	≤ 3.5.17
CVE-2011-4096US	medium5.0	37.2% (99th)	—	no fix	2011-11-17	61 versions
CVE-2016-3948US	high7.5	35.3% (98th)	—	no fix	2016-04-07	148 versions
CVE-2009-2855US	medium5.0	34.0% (98th)	—	no fix	2009-08-18	= 2.7
CVE-2014-0128US	medium5.0	32.6% (98th)	—	no fix	2014-04-14	86 versions
CVE-2010-2951US	medium5.0	31.5% (98th)	—	no fix	2010-10-12	= 3.1.6
CVE-2010-0639US	medium5.0	31.1% (98th)	—	no fix	2010-02-15	31 versions
CVE-2010-0308US	medium4.0	27.8% (98th)	—	no fix	2010-02-03	46 versions
CVE-2011-3205US	medium6.8	27.5% (98th)	—	no fix	2011-09-06	69 versions
CVE-2020-11945US	critical9.8	27.2% (98th)	—	5.0.2	2020-04-23	3 versions
CVE-2016-2390US	medium5.9	25.6% (98th)	—	no fix	2016-04-19	3 versions
CVE-2014-7142US	medium6.4	24.9% (98th)	—	no fix	2014-11-26	80 versions
CVE-2019-12525US	critical9.8	24.4% (98th)	—	no fix	2019-07-11	2 versions
CVE-2014-6270US	medium6.8	23.3% (98th)	—	no fix	2014-09-12	170 versions
CVE-2016-4556US	high7.5	23.1% (98th)	—	no fix	2016-05-10	142 versions
CVE-2009-2621US	medium5.0	23.0% (98th)	—	no fix	2009-07-28	6 versions
CVE-2012-5643US	medium5.0	23.0% (98th)	—	no fix	2012-12-20	90 versions
CVE-2005-0211US	high7.5	22.2% (98th)	—	no fix	2005-05-02	6 versions
CVE-2013-0189US	medium5.0	21.9% (98th)	—	no fix	2013-02-08	59 versions
CVE-2015-5400US	medium6.8	20.8% (98th)	—	no fix	2015-09-28	≤ 3.5.2
CVE-2019-12526US	critical9.8	20.3% (97th)	—	no fix	2019-11-26	2 versions
CVE-2016-4051US	high8.8	18.3% (97th)	—	no fix	2016-04-25	148 versions

showing 50 of 111

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation38 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer19 CVEs
CWE-787Out-of-bounds Write11 CVEs
CWE-476NULL Pointer Dereference8 CVEs
CWE-125Out-of-bounds Read7 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6 CVEs
CWE-617Reachable Assertion6 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE111 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan