https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:34:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-03549 bdu:2024-03549 https://cve.radiocsirt.org/vuln/bdu:2024-03549 https://cve.radiocsirt.org/vuln/cnvd-2024-21665 cnvd-2024-21665 https://cve.radiocsirt.org/vuln/cnvd-2024-21665 https://cve.radiocsirt.org/vuln/euvd-2026-259002 EUVD-2026-259002 https://cve.radiocsirt.org/vuln/euvd-2026-259002 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49606 <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49606 https://cve.radiocsirt.org/vuln/ghsa-w78j-vw2g-233v <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-w78j-vw2g-233v https://cve.radiocsirt.org/vuln/gsd-2023-49606 gsd-2023-49606 https://cve.radiocsirt.org/vuln/gsd-2023-49606 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0119-1 <p>Security update for tinyproxy</p> <p>Security update for tinyproxy</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0119-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49606 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tinyproxy, Ubuntu:Pro:16.04:LTS: tinyproxy, Ubuntu:Pro:18.04:LTS: tinyproxy, Ubuntu:20.04:LTS: tinyproxy, Ubuntu:Pro:22.04:LTS: tinyproxy, Ubuntu:24.04:LTS: tinyproxy, Ubuntu:25.10: tinyproxy, Ubuntu:26.04:LTS: tinyproxy</p> <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tinyproxy, Ubuntu:Pro:16.04:LTS: tinyproxy, Ubuntu:Pro:18.04:LTS: tinyproxy, Ubuntu:20.04:LTS: tinyproxy, Ubuntu:Pro:22.04:LTS: tinyproxy, Ubuntu:24.04:LTS: tinyproxy, Ubuntu:25.10: tinyproxy, Ubuntu:26.04:LTS: tinyproxy</p> <p>A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49606 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0997 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Tinyproxy ausnutzen, um beliebigen Programmcode auszuführen und um vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Tinyproxy ausnutzen, um beliebigen Programmcode auszuführen und um vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0997