Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies.EPSS 2.8%Jun 2, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…EPSS 3.3%Jun 2, 2022
- Low3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the command line option, known as in libcurl, is used to send variable=content pairs to TELNET serv…EPSS 4.5%Jun 11, 2021
- Critical9.8There's a flaw in lz4.EPSS 3.4%Jun 2, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.EPSS 3.1%Apr 1, 2021
- High7.5Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.EPSS 5.3%Dec 14, 2020
- High7.5curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).EPSS 3.9%Dec 14, 2020
57 records · page 3 of 3
PreviousNext