Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 26

Количество 26

nvd логотип

CVE-2016-5419

около 10 лет назад

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2016-5419

около 10 лет назад

curl and libcurl before 7.50.1 do not prevent TLS session resumption w ...

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-qpjh-642g-hgh8

больше 4 лет назад

curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-j5mq-cppw-g9w7

больше 4 лет назад

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

CVSS3: 7.5
EPSS: Средний
altlinux логотип

ALT-PU-2017-1492

больше 9 лет назад

ALT-PU-2017-1492: package `curl` update to version 7.54.0-alt1.S1

CVSS3: 7.5
EPSS: Низкий
altlinux логотип

ALT-PU-2018-2456

около 8 лет назад

ALT-PU-2018-2456: package `curl` update to version 7.61.1-alt2

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

CVSS3: 7.5
15%
Средний
около 10 лет назад
debian логотип
CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption w ...

CVSS3: 7.5
15%
Средний
около 10 лет назад
github логотип
GHSA-qpjh-642g-hgh8

curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

CVSS3: 7.5
15%
Средний
больше 4 лет назад
github логотип
GHSA-j5mq-cppw-g9w7

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

CVSS3: 7.5
15%
Средний
больше 4 лет назад
altlinux логотип
ALT-PU-2017-1492

ALT-PU-2017-1492: package `curl` update to version 7.54.0-alt1.S1

CVSS3: 7.5
больше 9 лет назад
altlinux логотип
ALT-PU-2018-2456

ALT-PU-2018-2456: package `curl` update to version 7.61.1-alt2

CVSS3: 9.8
около 8 лет назад

Уязвимостей на страницу