Filter
AND
AND
Versions
7.32.0
15
7.31.0
14
7.22.0
13
7.28.0
13
7.28.1
13
7.29.0
13
7.33.0
13
7.21.6
12
7.23.0
12
7.27.0
12
7.30.0
12
7.34.0
12
7.18.0
11
7.18.2
11
7.19.3
11
7.20.0
11
7.21.2
11
7.21.4
11
7.21.5
11
7.21.7
11
7.23.1
11
7.24.0
11
7.25.0
11
7.26.0
11
7.35.0
11
7.17.1
10
7.18.1
10
7.19.0
10
7.19.1
10
7.19.2
10
7.19.4
10
7.19.5
10
7.19.6
10
7.19.7
10
7.20.1
10
7.21.0
10
7.21.1
10
7.21.3
10
7.15.0
9
7.15.1
9
7.15.2
9
7.15.3
9
7.15.4
9
7.15.5
9
7.16.0
9
7.16.1
9
7.16.2
9
7.16.3
9
7.16.4
9
7.17.0
9
7.36.0
9
7.10.6
8
7.13.0
8
7.14.0
8
7.14.1
8
7.37.0
8
7.37.1
8
7.10.7
7
7.10.8
7
7.11.0
7
7.11.1
7
7.11.2
7
7.12.0
7
7.12.1
7
7.12.2
7
7.12.3
7
7.13.1
7
7.13.2
7
7.38.0
6
7.39
5
7.40.0
5
7.41.0
5
7.42.0
4
7.10.4
3
7.42.1
3
7.10
2
7.10.1
2
7.10.2
2
7.10.3
2
7.10.5
2
7.54.1
2
7.7
2
7.7.1
2
7.7.2
2
7.7.3
2
7.8
2
7.8.1
2
7.88.1
2
7.9
2
7.9.1
2
7.9.2
2
7.9.3
2
7.9.4
2
7.9.5
2
7.9.6
2
7.9.7
2
7.9.8
2
6.0
1
6.1
1
6.1-beta
1
6.2
1
6.3
1
6.3.1
1
6.4
1
6.5
1
6.5.1
1
6.5.2
1
7.1
1
7.1.1
1
7.2
1
7.2.1
1
7.3
1
7.4
1
7.4.1
1
7.4.2
1
7.43.0
1
7.44.0
1
7.45.0
1
7.46.0
1
7.47.0
1
7.47.1
1
7.48.0
1
7.49.0
1
7.49.1
1
7.5
1
7.5.1
1
7.5.2
1
7.50.0
1
7.50.1
1
7.50.2
1
7.50.3
1
7.51.0
1
7.52.0
1
7.52.1
1
7.53.0
1
7.53.1
1
7.54.0
1
7.6
1
7.6.1
1
7.63.0
1
7.75.0
1
7.84.0
1
8.1.2
1
8.8.0
1
IBM Cognos AnalyticsASN.1 date parser overread
6.5
EPSS
0.06%
First published (updated )
Fedoraproject FedoraA flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could p…
4.3
First published (updated )
Haxx Libcurlmacidn punycode buffer overread
4.3
EPSS
0.04%
First published (updated )
Google Nest Mini FirmwareThe libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest producti…
5.9
First published (updated )
Canonical Ubuntu LinuxThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in c…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx CurlcURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN…
4.3
First published (updated )
Haxx LibcurlThe darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx CurlcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which a…
First published (updated )
Haxx CurlcURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cooki…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx CurlThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) PO…
6.4
First published (updated )
Haxx CurlcURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS…
5.8
First published (updated )
Haxx LibcurlcURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Haxx LibcurlcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remot…
First published (updated )
Haxx LibcurlcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, w…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Universal ForwardercURL libcurl could allow a local attacker to bypass security restrictions, caused by a SSH connectio…
5.5
First published (updated )
Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a FTP too eage…
5.9
First published (updated )
Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a GSS delegati…
5.9
First published (updated )
Haxx Libcurlcurl: fopen race condition: CVE-2023-32001
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.