Количество 17
Количество 17
GHSA-h288-5fq8-5pfw
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE-2024-11053
netrc and redirect credential leak
CVE-2024-11053
When asked to both use a `.netrc` file for credentials and to follow H ...
SUSE-SU-2024:4359-1
Security update for curl
SUSE-SU-2024:4288-1
Security update for curl
SUSE-SU-2024:4284-2
Security update for curl
SUSE-SU-2024:4284-1
Security update for curl
BDU:2024-11106
Уязвимость обработчика netrc-файлов утилиты командной строки cURL, позволяющая нарушителю получить доступ к учётным данным
ROS-20250424-25
Множественные уязвимости libcurl
ROS-20250424-05
Множественные уязвимости curl
RLSA-2025:1673
Important: mysql:8.0 security update
RLSA-2025:1671
Important: mysql security update
ELSA-2025-1673
ELSA-2025-1673: mysql:8.0 security update (IMPORTANT)
ELSA-2025-1671
ELSA-2025-1671: mysql security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-h288-5fq8-5pfw When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 3.4 | 1% Низкий | больше 1 года назад |
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 5.9 | 1% Низкий | больше 1 года назад |
 | CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. | CVSS3: 3.4 | 1% Низкий | больше 1 года назад |
 | CVE-2024-11053 netrc and redirect credential leak | CVSS3: 3.4 | 1% Низкий | больше 1 года назад |
| CVE-2024-11053 When asked to both use a `.netrc` file for credentials and to follow H ... | CVSS3: 3.4 | 1% Низкий | больше 1 года назад |
 | SUSE-SU-2024:4359-1 Security update for curl | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:4288-1 Security update for curl | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:4284-2 Security update for curl | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:4284-1 Security update for curl | 1% Низкий | больше 1 года назад | |
 | BDU:2024-11106 Уязвимость обработчика netrc-файлов утилиты командной строки cURL, позволяющая нарушителю получить доступ к учётным данным | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
 | ROS-20250424-25 Множественные уязвимости libcurl | CVSS3: 9.1 | больше 1 года назад | |
| ROS-20250424-05 Множественные уязвимости curl | CVSS3: 9.1 | больше 1 года назад | |
 | RLSA-2025:1673 Important: mysql:8.0 security update | больше 1 года назад | ||
| RLSA-2025:1671 Important: mysql security update | больше 1 года назад | ||
| ELSA-2025-1673 ELSA-2025-1673: mysql:8.0 security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2025-1671 ELSA-2025-1671: mysql security update (IMPORTANT) | больше 1 года назад |
Уязвимостей на страницу