Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text.Oct 14, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.EPSS 0.1%Oct 12, 2026
- Medium5.9IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…EPSS 0.2%Sep 18, 2026
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…EPSS 0.9%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.EPSS 0.9%Feb 23, 2023
- High7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.EPSS 16.5%Dec 23, 2022
- High7.5In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP.EPSS 1.8%Oct 29, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.EPSS 1.3%Jun 2, 2022
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…EPSS 4.5%Sep 29, 2021
- Medium5.3When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are…EPSS 1.9%Aug 5, 2021
10 records · page 1 of 1
PreviousNext