165 results · Feed
-
Unscored —CVE-2015-3148 EPSS 14%
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …
-
Unscored —
CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attacker…
-
Unscored —
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary si…
-
Unscored —
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attack…
-
Unscored —
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option,…