Поиск уязвимостей
Количество 14
Количество 14
CVE-2025-0167
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
CVE-2025-0167
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
CVE-2025-0167
netrc and default credential leak
CVE-2025-0167
When asked to use a `.netrc` file for credentials **and** to follow HT ...
GHSA-c42g-rmxf-64ch
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
BDU:2025-05209
Уязвимость программного средства для взаимодействия с серверами cURL, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2025:0372-1
Security update for curl
SUSE-SU-2025:0371-1
Security update for curl
SUSE-SU-2025:0370-1
Security update for curl
SUSE-SU-2025:0369-1
Security update for curl
ROS-20250424-25
Множественные уязвимости libcurl
ROS-20250424-05
Множественные уязвимости curl
ALT-PU-2025-2652
ALT-PU-2025-2652: package `curl` update to version 8.12.0-alt1
ALT-PU-2025-2425
ALT-PU-2025-2425: package `curl` update to version 8.12.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. | CVSS3: 3.4 | 1% Низкий | почти 2 года назад |
 | CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. | CVSS3: 3.4 | 1% Низкий | почти 2 года назад |
 | CVE-2025-0167 netrc and default credential leak | CVSS3: 3.4 | 1% Низкий | больше 1 года назад |
| CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HT ... | CVSS3: 3.4 | 1% Низкий | почти 2 года назад |
| GHSA-c42g-rmxf-64ch When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. | CVSS3: 3.4 | 1% Низкий | почти 2 года назад |
 | BDU:2025-05209 Уязвимость программного средства для взаимодействия с серверами cURL, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.4 | 1% Низкий | почти 2 года назад |
 | SUSE-SU-2025:0372-1 Security update for curl | почти 2 года назад | ||
| SUSE-SU-2025:0371-1 Security update for curl | почти 2 года назад | ||
| SUSE-SU-2025:0370-1 Security update for curl | почти 2 года назад | ||
| SUSE-SU-2025:0369-1 Security update for curl | почти 2 года назад | ||
 | ROS-20250424-25 Множественные уязвимости libcurl | CVSS3: 9.1 | больше 1 года назад | |
| ROS-20250424-05 Множественные уязвимости curl | CVSS3: 9.1 | больше 1 года назад | |
| ALT-PU-2025-2652 ALT-PU-2025-2652: package `curl` update to version 8.12.0-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-2425 ALT-PU-2025-2425: package `curl` update to version 8.12.0-alt1 | CVSS3: 9.8 | больше 1 года назад |
Уязвимостей на страницу