The National Science Foundation's vulnerability footprint centers on Squid Web Proxy and related caching components, a narrowly scoped but widely embedded infrastructure software used across research networks and enterprise proxy deployments. Vulnerabilities affecting this vendor frequently acquire public exploit code, reflecting the network-edge deployment context and the value of proxy compromise for traffic interception and pivoting. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by National Science Foundation over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0541HIGH Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to | Aug 6, 2004 | 10.0 | 84 | NO | YES |
CVE-2004-2480MEDIUM Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer. | Dec 31, 2004 | 5.0 | 23 | NO | YES |
CVE-1999-1481MEDIUM Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. | Dec 31, 1999 | 5.0 | 23 | NO | YES |
CVE-1999-1273HIGH Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. | Feb 20, 1998 | 7.5 | 19 | NO | NO |
CVE-2004-2479MEDIUM Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in ref | Dec 31, 2004 | 5.0 | 15 | NO | NO |
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. | Mar 12, 2001 | 1.2 | 10 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by National Science Foundation.
Media articles that mention a CVE ID that affects a product developed by National Science Foundation — matched by CVE ID, not by vendor name.