Where
-Infinity
0

Vendor Risk Score

See how varnish cache project compares to other vendors in security performance

View Risk Score →

Varnish-software Varnish EnterpriseVarnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP…

Risk 26
Severity
5.4
EPSS
0.04%
First published (updated )

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

Risk 65
Severity
7.5
First published (updated )

Varnish-software Varnish Cache PlusInput Validation

Risk 43
Severity
7.5
First published (updated )

fedoraproject fedoraAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smugglin…

Risk 43
Severity
7.5
First published (updated )

Varnish Cache Project Varnish CacheIn Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to asser…

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Varnish-software Varnich CacheIn Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Var…

Risk 66
Severity
9.1
First published (updated )

Varnish-cache Varnish CacheVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a larg…

Risk 40
Severity
6.5
First published (updated )

Varnish Cache Project Varnish CacheVarnish HTTP cache before 3.0.4: ACL bug

Risk 43
Severity
7.5
First published (updated )

Varnish Cache Project Varnish CacheAn issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP…

Risk 44
Severity
7.8
First published (updated )

debian/varnishBuffer Overflow

Risk 66
Severity
9.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Varnish-software Varnish CacheInteger Overflow

Risk 45
Severity
7.5
First published (updated )

Varnish Cache Project Varnish CacheVarnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inj…

Risk 43
Severity
7.5
First published (updated )

Varnish Cache Project Varnish Cachevarnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files …

Risk 13
Severity
2.1
First published (updated )

Varnish Cache Project Varnish CacheBuffer Overflow

Risk 26
Severity
5
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203