Software
Microsoft Windows 11freeing stack buffer in utf8asn1str
Microsoft Windows 10curl: HTTP headers eat all memory
ubuntu/curlcurl. Multiple issues were addressed by updating curl.
Splunk Universal ForwarderUse After Free, Double Free
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Universal ForwardercURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…
Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …
redhat/jbcs-httpd24-curlcurl. Multiple issues were addressed by updating curl.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject Fedoracurl. Multiple issues were addressed by updating to curl version 7.86.0.
Splunk Universal ForwarderA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `-…
Splunk Universal Forwarderlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been ch…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Universal Forwarderlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returne…
Splunk Universal ForwarderAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might a…
Oracle Communications Cloud Native Core Network Repository Functioncurl. Multiple issues were addressed by updating to curl version 7.79.1.
Oracle PeopleSoft Enterprise PeopleToolslibcurl-using applications can ask for a specific client certificate to be used in a transfer. This …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apple Mac OS Xcurl. This issue was addressed with improved checks.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fujitsu M10-1 Firmwarecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resour…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx Curlcurl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
Haxx LibcurlIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session ev…
Haxx Curlcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function t…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx CurlThe verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx CurlThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if …
Haxx CurlThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated …
Haxx CurlA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
openSUSE Leapcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at run…
redhat/curlcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection …
redhat/curlcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has…
Haxx CurlMultiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SS…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.