Поиск уязвимостей
Количество 20
Количество 20
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
netrc and redirect credential leak
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow H ...
SUSE-SU-2024:4359-1
Security update for curl
SUSE-SU-2024:4288-1
Security update for curl
SUSE-SU-2024:4284-2
Security update for curl
SUSE-SU-2024:4284-1
Security update for curl
GHSA-h288-5fq8-5pfw
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
BDU:2024-11106
Уязвимость обработчика netrc-файлов утилиты командной строки cURL, позволяющая нарушителю получить доступ к учётным данным
ROS-20260310-80-0003
Уязвимость curl
ALT-PU-2024-17523
ALT-PU-2024-17523: package `curl` update to version 8.11.1-alt1
ALT-PU-2024-16919
ALT-PU-2024-16919: package `curl` update to version 8.11.1-alt1
ROS-20250424-25
Множественные уязвимости libcurl
ROS-20250424-05
Множественные уязвимости curl
RLSA-2025:1673
Important: mysql:8.0 security update
RLSA-2025:1671
Important: mysql security update
ELSA-2025-1673
ELSA-2025-1673: mysql:8.0 security update (IMPORTANT)
ELSA-2025-1671
ELSA-2025-1671: mysql security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 3.4 | 2% Низкий | почти 2 года назад |
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 5.9 | 2% Низкий | почти 2 года назад |
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 3.4 | 2% Низкий | почти 2 года назад |
 | CVE-2024-11053 netrc and redirect credential leak | CVSS3: 3.4 | 2% Низкий | почти 2 года назад |
| CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow H ... | CVSS3: 3.4 | 2% Низкий | почти 2 года назад |
 | SUSE-SU-2024:4359-1 Security update for curl | 2% Низкий | почти 2 года назад | |
| SUSE-SU-2024:4288-1 Security update for curl | 2% Низкий | почти 2 года назад | |
| SUSE-SU-2024:4284-2 Security update for curl | 2% Низкий | почти 2 года назад | |
| SUSE-SU-2024:4284-1 Security update for curl | 2% Низкий | почти 2 года назад | |
| GHSA-h288-5fq8-5pfw When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 9.1 | 2% Низкий | почти 2 года назад |
 | BDU:2024-11106 Уязвимость обработчика netrc-файлов утилиты командной строки cURL, позволяющая нарушителю получить доступ к учётным данным | CVSS3: 9.1 | 2% Низкий | около 2 лет назад |
 | ROS-20260310-80-0003 Уязвимость curl | CVSS3: 9.1 | 2% Низкий | 8 месяцев назад |
| ALT-PU-2024-17523 ALT-PU-2024-17523: package `curl` update to version 8.11.1-alt1 | CVSS3: 9.1 | 2% Низкий | почти 2 года назад |
| ALT-PU-2024-16919 ALT-PU-2024-16919: package `curl` update to version 8.11.1-alt1 | CVSS3: 9.1 | 2% Низкий | почти 2 года назад |
| ROS-20250424-25 Множественные уязвимости libcurl | CVSS3: 9.1 | больше 1 года назад | |
| ROS-20250424-05 Множественные уязвимости curl | CVSS3: 9.1 | больше 1 года назад | |
 | RLSA-2025:1673 Important: mysql:8.0 security update | больше 1 года назад | ||
| RLSA-2025:1671 Important: mysql security update | больше 1 года назад | ||
| ELSA-2025-1673 ELSA-2025-1673: mysql:8.0 security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2025-1671 ELSA-2025-1671: mysql security update (IMPORTANT) | больше 1 года назад |
Уязвимостей на страницу