Vulnérabilités de n/a https://github.com/curl/curl
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2022-27782 | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should… | 7.5 Élevée | 1 juin 2022 |
| CVE-2022-27775 | An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address… | 7.5 Élevée | 1 juin 2022 |
| CVE-2022-27781 | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's… | 7.5 Élevée | 1 juin 2022 |
| CVE-2022-27774 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that… | 5.7 Moyenne | 1 juin 2022 |
| CVE-2022-27780 | The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL,… | 5.3 Moyenne | 1 juin 2022 |
| CVE-2022-27779 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing… | Non notée | 1 juin 2022 |
| CVE-2022-22576 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse… | 8.1 Élevée | 26 mai 2022 |
| CVE-2021-22947 | When curl >= 7.20.0… | 5.9 Moyenne | 29 sept. 2021 |
| CVE-2021-22946 | A user can tell curl >= 7.20.0… | 7.5 Élevée | 29 sept. 2021 |
| CVE-2021-22945 | When sending data to an MQTT server,… | 9.1 Critique | 23 sept. 2021 |
| CVE-2021-22924 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them… | 3.7 Faible | 5 août 2021 |
| CVE-2021-22926 | libcurl-using applications can ask for a specific client certificate to be used in a transfer | 7.5 Élevée | 5 août 2021 |
| CVE-2021-22925 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl | 5.3 Moyenne | 5 août 2021 |
| CVE-2021-22923 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the… | Non notée | 5 août 2021 |
| CVE-2021-22922 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash… | 6.5 Moyenne | 5 août 2021 |
| CVE-2021-22897 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for… | 5.3 Moyenne | 11 juin 2021 |
| CVE-2021-22901 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when… | Non notée | 11 juin 2021 |
| CVE-2021-22898 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as… | 3.1 Faible | 11 juin 2021 |
| CVE-2021-22890 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection… | 4.3 Moyenne | 1 avr. 2021 |
| CVE-2021-22876 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized… | 5.3 Moyenne | 1 avr. 2021 |
| CVE-2020-8177 | curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead… | 7.8 Élevée | 14 déc. 2020 |
| CVE-2020-8169 | curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial… | Non notée | 14 déc. 2020 |
| CVE-2020-8286 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient… | Non notée | 14 déc. 2020 |
| CVE-2020-8231 | Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data | Non notée | 14 déc. 2020 |
| CVE-2020-8285 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP… | 7.5 Élevée | 14 déc. 2020 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79