Vulnerabilities of n/a https://github.com/curl/curl
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-28322 | An information disclosure vulnerability exists in… | 5.3 Medium | May 26, 2023 |
| CVE-2023-28321 | An improper certificate validation vulnerability exists in… | 5.9 Medium | May 26, 2023 |
| CVE-2023-28320 | A denial of service vulnerability exists in… | 5.9 Medium | May 26, 2023 |
| CVE-2023-28319 | A use after free vulnerability exists in… | 7.5 High | May 26, 2023 |
| CVE-2023-27538 | An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH… | 7.7 High | Mar 30, 2023 |
| CVE-2023-27537 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles" | Not rated | Mar 30, 2023 |
| CVE-2023-27536 | An authentication bypass vulnerability exists… | 5.9 Medium | Mar 30, 2023 |
| CVE-2023-27535 | An authentication bypass vulnerability exists in… | 5.9 Medium | Mar 30, 2023 |
| CVE-2023-27534 | A path traversal vulnerability exists in… | 8.8 High | Mar 30, 2023 |
| CVE-2023-27533 | A vulnerability in input validation exists in… | 9.8 Critical | Mar 30, 2023 |
| CVE-2023-23915 | A cleartext transmission of sensitive information vulnerability exists in… | 6.5 Medium | Feb 23, 2023 |
| CVE-2023-23914 | A cleartext transmission of sensitive information vulnerability exists in… | 9.1 Critical | Feb 23, 2023 |
| CVE-2023-23916 | An allocation of resources without limits or throttling vulnerability exists in… | 6.5 Medium | Feb 23, 2023 |
| CVE-2022-43552 | A use after free vulnerability exists in curl <7.87.0 | 5.9 Medium | Feb 9, 2023 |
| CVE-2022-43551 | A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP | 7.5 High | Dec 23, 2022 |
| CVE-2022-35260 | curl can be told to parse a `.netrc` file for credentials | Not rated | Dec 5, 2022 |
| CVE-2022-32221 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data… | 9.8 Critical | Dec 5, 2022 |
| CVE-2022-35252 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when… | 3.7 Low | Sep 23, 2022 |
| CVE-2022-32208 | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly | 5.9 Medium | Jul 7, 2022 |
| CVE-2022-32207 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing… | 9.8 Critical | Jul 7, 2022 |
| CVE-2022-32206 | curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple… | 6.5 Medium | Jul 7, 2022 |
| CVE-2022-32205 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0… | 4.3 Medium | Jul 7, 2022 |
| CVE-2022-27778 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used… | Not rated | Jun 1, 2022 |
| CVE-2022-30115 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step… | Not rated | Jun 1, 2022 |
| CVE-2022-27776 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie… | Not rated | Jun 1, 2022 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79