https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2010-2350.htmlhttps://patchthecve.com/cve/CVE-2010-2350.htmlTue, 16 Jun 2026 23:20:35 +0000MEDIUM 6.8: Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.https://patchthecve.com/cve/CVE-2010-1513.htmlhttps://patchthecve.com/cve/CVE-2010-1513.htmlTue, 16 Jun 2026 23:18:32 +0000MEDIUM 6.8: Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows.https://patchthecve.com/cve/CVE-2009-0804.htmlhttps://patchthecve.com/cve/CVE-2009-0804.htmlTue, 16 Jun 2026 23:05:51 +0000MEDIUM 5.4: Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, vi