Vulnérabilités de n/a https://github.com/curl/curl
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2023-28322 | An information disclosure vulnerability exists in… | 5.3 Moyenne | 26 mai 2023 |
| CVE-2023-28321 | An improper certificate validation vulnerability exists in… | 5.9 Moyenne | 26 mai 2023 |
| CVE-2023-28320 | A denial of service vulnerability exists in… | 5.9 Moyenne | 26 mai 2023 |
| CVE-2023-28319 | A use after free vulnerability exists in… | 7.5 Élevée | 26 mai 2023 |
| CVE-2023-27538 | An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH… | 7.7 Élevée | 30 mars 2023 |
| CVE-2023-27537 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles" | Non notée | 30 mars 2023 |
| CVE-2023-27536 | An authentication bypass vulnerability exists… | 5.9 Moyenne | 30 mars 2023 |
| CVE-2023-27535 | An authentication bypass vulnerability exists in… | 5.9 Moyenne | 30 mars 2023 |
| CVE-2023-27534 | A path traversal vulnerability exists in… | 8.8 Élevée | 30 mars 2023 |
| CVE-2023-27533 | A vulnerability in input validation exists in… | 9.8 Critique | 30 mars 2023 |
| CVE-2023-23915 | A cleartext transmission of sensitive information vulnerability exists in… | 6.5 Moyenne | 23 févr. 2023 |
| CVE-2023-23914 | A cleartext transmission of sensitive information vulnerability exists in… | 9.1 Critique | 23 févr. 2023 |
| CVE-2023-23916 | An allocation of resources without limits or throttling vulnerability exists in… | 6.5 Moyenne | 23 févr. 2023 |
| CVE-2022-43552 | A use after free vulnerability exists in curl <7.87.0 | 5.9 Moyenne | 9 févr. 2023 |
| CVE-2022-43551 | A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP | 7.5 Élevée | 23 déc. 2022 |
| CVE-2022-35260 | curl can be told to parse a `.netrc` file for credentials | Non notée | 5 déc. 2022 |
| CVE-2022-32221 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data… | 9.8 Critique | 5 déc. 2022 |
| CVE-2022-35252 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when… | 3.7 Faible | 23 sept. 2022 |
| CVE-2022-32208 | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly | 5.9 Moyenne | 7 juil. 2022 |
| CVE-2022-32207 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing… | 9.8 Critique | 7 juil. 2022 |
| CVE-2022-32206 | curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple… | 6.5 Moyenne | 7 juil. 2022 |
| CVE-2022-32205 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0… | 4.3 Moyenne | 7 juil. 2022 |
| CVE-2022-27778 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used… | Non notée | 1 juin 2022 |
| CVE-2022-30115 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step… | Non notée | 1 juin 2022 |
| CVE-2022-27776 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie… | Non notée | 1 juin 2022 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79