Skip to contentHaxx vulnerabilities
Newest
- curlQUIC certificate check skip with wolfSSLCVE-2025-4947Fix available6.5 Medium
- curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 moregzip integer overflowCVE-2025-0725Fix available7.3 High
- curl, netapp bootstrap os, h300s firmware +23 more +25 moreeventfd double closeCVE-2025-0665Fix available7.0 High
- curl, netapp bootstrap os, element software +32 more +34 morenetrc and default credential leakCVE-2025-0167Fix available3.4 Low
- curl, netapp bootstrap os, h300s firmware +29 more +31 morenetrc and redirect credential leakCVE-2024-11053Fix available3.4 Low
- curlHSTS subdomain overwrites parent cache entryCVE-2024-9681Fix available6.5 Medium
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLSCVE-2024-8096Fix available6.5 Medium
- haxx libcurl, google nest speakers, nest mini firmware +2 moreThe libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest...CVE-2024-329285.9 Medium
- curl, haxx libcurl, siemens ruggedcom rst2428p +19 more +21 moreASN.1 date parser overreadCVE-2024-7264Fix availableEPSS 20.2%6.5 Medium
- curl, curl libcurl +1 moremacidn punycode buffer overreadCVE-2024-6874Fix available4.3 Medium
- curl, haxx libcurl +1 morefreeing stack buffer in utf8asn1strCVE-2024-6197Fix available7.5 High
- curl, curl libcurl, apple macos +10 more +12 moreTLS certificate check bypass with mbedTLSCVE-2024-2466Fix available6.5 Medium
- curl, apple macos, netapp active iq unified manager +14 more +16 moreQUIC certificate check bypass with wolfSSLCVE-2024-2379Fix available6.3 Medium
- curl, apple macos, fedoraproject fedora +16 more +18 moreHTTP/2 push headers memory-leakCVE-2024-2398Fix availableEPSS 36.1%8.6 High
- curl, apple macos, fedoraproject fedora +12 more +14 moreUsage of disabled protocolCVE-2024-2004Fix available3.5 Low
- curlOCSP verification bypass with TLS session reuseCVE-2024-0853Fix available5.3 Medium
- curl, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreWhen saving HSTS data to an excessively long file name, curl could end up
removing all contents,...CVE-2023-46219Fix available5.3 Medium
- curl, fedoraproject fedora, siemens ruggedcom rox mx5000 +14 more +16 moreThis flaw allows a malicious HTTP server to set "super cookies" in curl that
are then passed back...CVE-2023-46218Fix available6.5 Medium
- curl, haxx libcurl, siemens ruggedcom ape1808 +3 more +5 moreThis flaw allows an attacker to insert cookies at will into a running program
using libcurl, if...CVE-2023-38546Fix available3.7 Low
- curl, fedoraproject fedora, haxx libcurl +15 more +17 moreThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is...CVE-2023-38545Public exploitFix availableEPSS 78.3%9.8 Critical
- curl, fedoraproject fedora, microsoft windows 10 1809 +7 more +9 moreWhen curl retrieves an HTTP response, it stores the incoming headers so that
they can be accessed...CVE-2023-38039Public exploitFix availableEPSS 56.2%7.5 High
- haxx curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreInteger overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry...CVE-2020-19909Fix availableDisputed3.3 Low
- haxx curl, apple macos, netapp clustered data ontap +5 more +7 moreA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...CVE-2023-28320Fix available5.9 Medium
- haxx curl, apple macos, fedoraproject fedora +6 more +8 moreAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...CVE-2023-28322Fix available3.7 Low
- haxx curl, apple macos, debian linux +7 more +9 moreAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...CVE-2023-28321Fix available5.9 Medium
- haxx curl, apple macos, netapp clustered data ontap +5 more +7 moreA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...CVE-2023-28319Fix available7.5 High
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...CVE-2023-27537Fix available5.9 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...CVE-2023-27534Fix available8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23915Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23914Fix available9.1 Critical
- haxx curl, apple macos, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...CVE-2022-43552Fix available5.9 Medium
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +4 more +6 moreIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...CVE-2022-42916Fix available7.5 High
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...CVE-2022-35252Fix available3.7 Low
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...CVE-2022-27782Fix available7.5 High
- Show moreLoading…