Поиск уязвимостей
Количество 42
Количество 42
CVE-2022-27774
An insufficiently protected credentials vulnerability exists in curl 4 ...
GHSA-7xmh-mw7w-rr97
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
BDU:2022-03041
Уязвимость утилиты командной строки cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82. ...
CVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
CVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
CVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
CVE-2022-27776
HackerOne: CVE-2022-27776 Insufficiently protected credentials vulnerability might leak authentication or cookie header data
CVE-2022-27776
A insufficiently protected credentials vulnerability in fixed in curl ...
SUSE-SU-2023:2225-1
Security update for curl
RLSA-2022:8299
Low: curl security update
GHSA-fx56-rj7x-688m
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
ELSA-2022-8299
ELSA-2022-8299: curl security update (LOW)
BDU:2022-03038
Уязвимость реализации функции сопоставления конфигурации утилиты командной строки cURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
GHSA-hc85-wpv5-52wh
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
BDU:2022-03040
Уязвимость утилиты командной строки cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2022-27774 An insufficiently protected credentials vulnerability exists in curl 4 ... | CVSS3: 5.7 | 2% Низкий | больше 4 лет назад |
| GHSA-7xmh-mw7w-rr97 An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers. | CVSS3: 5.7 | 2% Низкий | больше 4 лет назад |
 | BDU:2022-03041 Уязвимость утилиты командной строки cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5 | 2% Низкий | больше 4 лет назад |
 | CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. | CVSS3: 7.5 | 3% Низкий | 9 месяцев назад |
| CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82. ... | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
| CVE-2022-27776 A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
| CVE-2022-27776 A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. | CVSS3: 4.3 | 4% Низкий | больше 4 лет назад |
| CVE-2022-27776 A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
| CVE-2022-27776 HackerOne: CVE-2022-27776 Insufficiently protected credentials vulnerability might leak authentication or cookie header data | 4% Низкий | больше 4 лет назад | |
| CVE-2022-27776 A insufficiently protected credentials vulnerability in fixed in curl ... | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
 | SUSE-SU-2023:2225-1 Security update for curl | больше 3 лет назад | ||
 | RLSA-2022:8299 Low: curl security update | 3% Низкий | почти 4 года назад | |
| GHSA-fx56-rj7x-688m An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
| ELSA-2022-8299 ELSA-2022-8299: curl security update (LOW) | 3% Низкий | почти 4 года назад | |
| BDU:2022-03038 Уязвимость реализации функции сопоставления конфигурации утилиты командной строки cURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 2.6 | 3% Низкий | больше 4 лет назад |
| GHSA-hc85-wpv5-52wh A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
| BDU:2022-03040 Уязвимость утилиты командной строки cURL, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу