curl vulnerabilities (openEuler)
80 vulnerabilities.
-
curlopenEuler domain-scoped PSL domain cookie 8.2 High -
curlopenEuler OpenSSL pinning bypass 7.5 High -
curlopenEuler Negotiate ambient user conn reuse 9.8 Critical -
curlopenEuler HTTP/2 server push UAF 9.1 Critical -
curlopenEuler OpenLDAP SASL authentication bypass 7.4 High -
curlopenEuler native CA store conn reuse 7.5 High -
curlopenEuler SSH improper host validation 7.4 High -
curlopenEuler incomplete mTLS config matching in conn reuse 7.5 High -
curlopenEuler env-set cross-proxy Digest auth state leak 9.1 Critical -
curlopenEuler password leak with netrc and user in URL 9.1 Critical -
curlopenEuler trailing dot domain super cookie 9.1 Critical -
curlopenEuler wrong STARTTLS connection reuse 8.1 High -
curlopenEuler proto-default skips SSH verification 7.5 High -
curlopenEuler cross-origin Digest auth state leak 9.8 Critical -
curlopenEuler HTTP/2 stream-dependency tree UAF 9.8 Critical -
curlopenEuler netrc credential leak with reused proxy connection 5.3 Medium -
curlopenEuler stale custom cookie host causes cookie leak 7.5 High -
curlopenEuler proxy credentials leak over redirect-to proxy 5.9 Medium -
curlopenEuler wrong reuse of SMB connection 7.5 High -
curlopenEuler wrong reuse of HTTP Negotiate connection 6.5 Medium -
curlopenEuler connection reuse ignores TLS requirement 5.9 Medium -
curlopenEuler cross-proxy Digest auth state leak 5.3 Medium -
curlopenEuler wrong proxy connection reuse with credentials 6.5 Medium -
curlopenEuler token leak with redirect and netrc 5.3 Medium -
curlopenEuler bad reuse of HTTP Negotiate connection 6.5 Medium -
curlopenEuler libssh key passphrase bypass without agent set 3.1 Low -
curlopenEuler libssh global known_hosts override 5.3 Medium -
curlopenEuler OpenSSL partial chain store policy bypass 5.3 Medium -
curlopenEuler bearer token leak on cross-protocol redirect 5.3 Medium -
curlopenEuler Out of bounds read for cookie path 7.5 High -
curlopenEuler netrc and redirect credential leak 3.4 Low -
curlopenEuler HSTS subdomain overwrites parent cache entry 6.5 Medium -
curlopenEuler HTTP/2 push headers memory-leak 8.6 High -
curlopenEuler When saving HSTS data to an excessively long file name, curl could end up removing all contents,... 5.3 Medium -
curlopenEuler This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
curlopenEuler This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
curlopenEuler This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
curlopenEuler libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called... 0.0 None -
curlopenEuler An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
curlopenEuler An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... 5.9 Medium -
curlopenEuler An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... 5.5 Medium -
curlopenEuler An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... 5.9 Medium -
curlopenEuler An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... 5.9 Medium -
curlopenEuler A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
curlopenEuler A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
curlopenEuler An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... 6.5 Medium -
curlopenEuler A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 6.5 Medium -
curlopenEuler A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 9.1 Critical -
curlopenEuler A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium -
curlopenEuler A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep... 7.5 High - Show olderLoading…