https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:49:21.037366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-200 certfr-2015-avi-200 — Une vulnérabilité a été corrigée dans <span class="textit">Squid</span>. Elle permet à un attaquant de provoquer un con… 2026-10-03T06:49:21.044029+00:00 certfr-2015-avi-200 https://cve.radiocsirt.org/vuln/cnvd-2015-02857 cnvd-2015-02857 2026-10-03T06:49:21.044065+00:00 cnvd-2015-02857 https://cve.radiocsirt.org/vuln/euvd-2026-91912 EUVD-2026-91912 2026-10-03T06:49:21.044080+00:00 EUVD-2026-91912 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3455 fkie_cve-2015-3455 2026-10-03T06:49:21.044091+00:00

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

 https://cve.radiocsirt.org/vuln/ghsa-5r9c-4h43-4v5m GHSA-5r9c-4h43-4v5m 2026-10-03T06:49:21.044118+00:00

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

 https://cve.radiocsirt.org/vuln/gsd-2015-3455 gsd-2015-3455 2026-10-03T06:49:21.044134+00:00 gsd-2015-3455 https://cve.radiocsirt.org/vuln/rhsa-2015:2378 RHSA-2015:2378 — Red Hat Security Advisory: squid security and bug fix update 2026-10-03T06:49:21.044145+00:00

squid: incorrect X509 server certificate validation (SQUID-2015:1)

 https://cve.radiocsirt.org/vuln/suse-su-2016:2008-1 SUSE-SU-2016:2008-1 — Security update for squid 2026-10-03T06:49:21.044162+00:00

Security update for squid

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3455 UBUNTU-CVE-2015-3455 2026-10-03T06:49:21.044179+00:00

Affected: Ubuntu:14.04:LTS: squid3

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.