Skip to contentCurl vulnerabilities
Newest
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- curl, canonical ubuntu linux +1 moreA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...CVE-2018-16840Fix available4.3 Medium
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- curlcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...CVE-2017-2628Fix available9.8 Critical
- [unknown] curl, haxx libcurl +1 moreIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session...CVE-2017-7468Fix available4.8 Medium
- curlcurl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks...CVE-2017-2629Fix available4.3 Medium
- curlcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...CVE-2016-9594Fix available6.5 Medium
- curlcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...CVE-2016-9586Fix available5.9 Medium
- curlcurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...CVE-2016-8625Fix available5.3 Medium
- curlcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...CVE-2016-8624Fix available5.3 Medium
- curlA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...CVE-2016-8623Fix available3.3 Low
- curl, haxx libcurl +1 moreThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....CVE-2016-8622Fix available3.7 Low
- curlThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...CVE-2016-8621Fix available5.3 Medium
- curlThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...CVE-2016-8620Fix available6.5 Medium
- curlThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...CVE-2016-8619Fix available5.3 Medium
- curlThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...CVE-2016-8618Fix available5.3 Medium
- curlThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...CVE-2016-8617Fix available3.3 Low
- curlA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...CVE-2016-8616Fix available3.7 Low
- curlA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...CVE-2016-8615Fix available5.3 Medium
- curl, curl libcurl +1 morecurl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction...CVE-2012-0036Fix availableEPSS 16.1%7.5 High
- curlAbsolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header...CVE-2010-38425.8 Medium
- curl libcurlcontent_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly...CVE-2010-0734Fix available6.8 Medium
- curl libcurllib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly...CVE-2009-2417Fix available7.5 High
- curl, curl libcurl +1 moreThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION...CVE-2009-0037Public exploitFix available6.8 Medium
- curl, libcurl, wget +2 moreStack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2)...CVE-2005-3185Fix available7.5 High