https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:02:50.193582+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03549 bdu:2024-03549 2026-10-03T13:02:50.318073+00:00 bdu:2024-03549 https://cve.radiocsirt.org/vuln/cnvd-2024-21665 cnvd-2024-21665 2026-10-03T13:02:50.318110+00:00 cnvd-2024-21665 https://cve.radiocsirt.org/vuln/euvd-2026-259002 EUVD-2026-259002 2026-10-03T13:02:50.318125+00:00 EUVD-2026-259002 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49606 fkie_cve-2023-49606 2026-10-03T13:02:50.318137+00:00

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-w78j-vw2g-233v GHSA-w78j-vw2g-233v 2026-10-03T13:02:50.318168+00:00

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-49606 gsd-2023-49606 2026-10-03T13:02:50.318186+00:00 gsd-2023-49606 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0119-1 openSUSE-SU-2024:0119-1 — Security update for tinyproxy 2026-10-03T13:02:50.318197+00:00

Security update for tinyproxy

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49606 UBUNTU-CVE-2023-49606 2026-10-03T13:02:50.318216+00:00

Affected: Ubuntu:Pro:14.04:LTS: tinyproxy, Ubuntu:Pro:16.04:LTS: tinyproxy, Ubuntu:Pro:18.04:LTS: tinyproxy, Ubuntu:20.04:LTS: tinyproxy, Ubuntu:Pro:22.04:LTS: tinyproxy, Ubuntu:24.04:LTS: tinyproxy, Ubuntu:25.10: tinyproxy, Ubuntu:26.04:LTS: tinyproxy

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0997 WID-SEC-W-2024-0997 — Tinyproxy: Mehrere Schwachstellen 2026-10-03T13:02:50.318246+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Tinyproxy ausnutzen, um beliebigen Programmcode auszuführen und um vertrauliche Informationen offenzulegen.