Поиск уязвимостей
Количество 27
Количество 27
CVE-2015-3145
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7 ...
CVE-2015-3148
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
CVE-2015-3148
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
CVE-2015-3148
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
CVE-2015-3148
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenti ...
GHSA-c7m9-x5vw-4grr
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
GHSA-28hh-42pj-vp7w
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2015-3145 The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7 ... | CVSS2: 7.5 | 30% Средний | больше 11 лет назад |
 | CVE-2015-3148 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. | CVSS2: 5 | 14% Средний | больше 11 лет назад |
 | CVE-2015-3148 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. | CVSS2: 4 | 14% Средний | больше 11 лет назад |
 | CVE-2015-3148 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. | CVSS2: 5 | 14% Средний | больше 11 лет назад |
| CVE-2015-3148 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenti ... | CVSS2: 5 | 14% Средний | больше 11 лет назад |
| GHSA-c7m9-x5vw-4grr The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character. | 30% Средний | больше 4 лет назад | |
| GHSA-28hh-42pj-vp7w cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. | 14% Средний | больше 4 лет назад |
Уязвимостей на страницу