Количество 48
Количество 48
SUSE-SU-2020:2444-1
Security update for curl
SUSE-SU-2020:14481-1
Security update for curl
GHSA-xp52-49j5-h754
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
BDU:2021-03503
Уязвимость программного средства для взаимодействия с серверами CURL, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным
ALT-PU-2020-2618
ALT-PU-2020-2618: package `curl` update to version 7.72.0-alt1
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port and this way potentially make curl extract information about services that are otherwise private and not disclosed for example doing port scanning and service banner extractions.
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 ...
GHSA-69rc-qfx4-h683
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
BDU:2021-03504
Уязвимость программного средства для взаимодействия с серверами CURL, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
ROS-20260529-73-0016
Уязвимость curl
CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for cert ...
CVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2020:2444-1 Security update for curl | 5% Низкий | около 6 лет назад | |
| SUSE-SU-2020:14481-1 Security update for curl | 5% Низкий | около 6 лет назад | |
| GHSA-xp52-49j5-h754 Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | BDU:2021-03503 Уязвимость программного средства для взаимодействия с серверами CURL, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.3 | 5% Низкий | около 6 лет назад |
 | ALT-PU-2020-2618 ALT-PU-2020-2618: package `curl` update to version 7.72.0-alt1 | CVSS3: 7.5 | 5% Низкий | около 6 лет назад |
 | CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. | CVSS3: 3.7 | 4% Низкий | почти 6 лет назад |
 | CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. | CVSS3: 3.1 | 4% Низкий | почти 6 лет назад |
| CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. | CVSS3: 3.7 | 4% Низкий | почти 6 лет назад |
 | CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port and this way potentially make curl extract information about services that are otherwise private and not disclosed for example doing port scanning and service banner extractions. | CVSS3: 3.7 | 4% Низкий | почти 6 лет назад |
| CVE-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 ... | CVSS3: 3.7 | 4% Низкий | почти 6 лет назад |
| GHSA-69rc-qfx4-h683 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. | CVSS3: 3.7 | 4% Низкий | больше 4 лет назад |
| BDU:2021-03504 Уязвимость программного средства для взаимодействия с серверами CURL, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 3.7 | 4% Низкий | почти 6 лет назад |
 | ROS-20260529-73-0016 Уязвимость curl | CVSS3: 3.7 | 4% Низкий | 5 месяцев назад |
| CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | CVSS3: 7.4 | 5% Низкий | почти 6 лет назад |
| CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for cert ... | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. | CVSS3: 7.5 | 10% Низкий | почти 6 лет назад |
| CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. | CVSS3: 6.5 | 10% Низкий | почти 6 лет назад |
Уязвимостей на страницу