curl-minimal vulnerabilities (TuxCare)
52 vulnerabilities.
curl-minimalTuxCaredomain-scoped PSL domain cookie8.2 Highcurl-minimalTuxCareOpenSSL pinning bypass7.5 Highcurl-minimalTuxCareHTTP/2 server push UAF9.1 Criticalcurl-minimalTuxCareincomplete mTLS config matching in conn reuse7.5 Highcurl-minimalTuxCareenv-set cross-proxy Digest auth state leak9.1 Criticalcurl-minimalTuxCarepassword leak with netrc and user in URL9.1 Criticalcurl-minimalTuxCaretrailing dot domain super cookie9.1 Criticalcurl-minimalTuxCarewrong reuse for different services6.5 Mediumcurl-minimalTuxCarewrong STARTTLS connection reuse8.1 Highcurl-minimalTuxCarecross-origin Digest auth state leak9.8 Criticalcurl-minimalTuxCarenetrc credential leak with reused proxy connection5.3 Mediumcurl-minimalTuxCarestale custom cookie host causes cookie leak7.5 Highcurl-minimalTuxCareproxy credentials leak over redirect-to proxy5.9 Mediumcurl-minimalTuxCarewrong reuse of SMB connection7.5 Highcurl-minimalTuxCarewrong reuse of HTTP Negotiate connection6.5 Mediumcurl-minimalTuxCareconnection reuse ignores TLS requirement5.9 Mediumcurl-minimalTuxCarecross-proxy Digest auth state leak5.3 Mediumcurl-minimalTuxCarewrong proxy connection reuse with credentials6.5 Mediumcurl-minimalTuxCaretoken leak with redirect and netrc5.3 Mediumcurl-minimalTuxCarebad reuse of HTTP Negotiate connection6.5 Mediumcurl-minimalTuxCarelibssh key passphrase bypass without agent set3.1 Lowcurl-minimalTuxCarelibssh global known_hosts override5.3 Mediumcurl-minimalTuxCarebearer token leak on cross-protocol redirect5.3 Mediumcurl-minimalTuxCareOut of bounds read for cookie path7.5 Highcurl-minimalTuxCarenetrc and default credential leak3.4 Lowcurl-minimalTuxCareHSTS subdomain overwrites parent cache entry6.5 Mediumcurl-minimalTuxCareASN.1 date parser overread6.5 Mediumcurl-minimalTuxCareHTTP/2 push headers memory-leak8.6 Highcurl-minimalTuxCareThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 Mediumcurl-minimalTuxCareThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 Lowcurl-minimalTuxCareAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 Lowcurl-minimalTuxCareAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 Mediumcurl-minimalTuxCareAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 Mediumcurl-minimalTuxCareAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 Mediumcurl-minimalTuxCareAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Mediumcurl-minimalTuxCareA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 Highcurl-minimalTuxCareA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 Highcurl-minimalTuxCareAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 Mediumcurl-minimalTuxCareA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 Mediumcurl-minimalTuxCareWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Criticalcurl-minimalTuxCareWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Lowcurl-minimalTuxCareWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Mediumcurl-minimalTuxCarecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Mediumcurl-minimalTuxCarelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 Highcurl-minimalTuxCarelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 Highcurl-minimalTuxCareThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 Highcurl-minimalTuxCareA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 Mediumcurl-minimalTuxCareAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 Mediumcurl-minimalTuxCareAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 Highcurl-minimalTuxCarecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 Medium- Show olderLoading…