curl

222 results · Feed

• Unscored —
  CVE-2014-3620

  cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary si…

  curl curl Debian Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-3613

  cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attack…

  curl curl Debian Ubuntu
  Nov 18, 2014
• Unscored —
  CVE-2014-3707

  The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option,…

  curl curl Debian Ubuntu
  Nov 15, 2014
• Unscored —
  CVE-2014-0138

  The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) …

  curl curl Debian Alpine
  Apr 15, 2014
• Unscored —
  CVE-2014-0139

  cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildc…

  curl curl Debian Alpine
  Apr 15, 2014
• Unscored —
  CVE-2014-0015

  cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, …

  curl Debian
  Feb 2, 2014
• Unscored —
  CVE-2013-6422

  The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYP…

  curl Debian
  Dec 23, 2013
• Unscored —
  CVE-2013-4545

  cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verific…

  curl Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-2174

  Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 al…

  curl Debian
  Jul 31, 2013
• Unscored —
  CVE-2013-1944

  The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sendi…

  curl Debian
  Apr 29, 2013
• Unscored —
  CVE-2013-0249 Public exploit EPSS 22%

  Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl …

  curl Debian
  Mar 8, 2013
• Unscored —
  CVE-2012-0036 EPSS 16%

  curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a …

  curl Debian
  Apr 13, 2012
• Unscored —
  CVE-2011-3389 Public exploit EPSS 73%

  The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

  asterisk curl bouncycastle nss Debian
  Sep 6, 2011
• Unscored —
  CVE-2011-2192

  The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other produ…

  curl Debian
  Jul 7, 2011
• Unscored —
  CVE-2010-0734

  content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of cal…

  curl Debian
  Mar 19, 2010
• Unscored —
  CVE-2009-2417

  lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in…

  curl Debian
  Aug 14, 2009
• Unscored —
  CVE-2009-0037 Public exploit

  The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…

  curl Debian
  Mar 5, 2009
• Unscored —
  CVE-2007-3564

  libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activat…

  curl Debian
  Jul 18, 2007
• Unscored —
  CVE-2006-1061

  Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary comma…

  curl Debian
  Mar 21, 2006
• Unscored —
  CVE-2005-4077

  Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer ov…

  curl Debian
  Dec 8, 2005
• Unscored —
  CVE-2005-3185

  Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libc…

  curl wget Debian
  Oct 13, 2005
• Unscored —
  CVE-2005-0490

  Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious w…

  curl Debian
  Feb 21, 2005