Количество 13
Количество 13
BDU:2026-09770
Уязвимость программного средства для взаимодействия с серверами cURL, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260624-73-0035
Уязвимость curl
CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
CVE-2026-4873
connection reuse ignores TLS requirement
CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly re ...
GHSA-5fgw-rv54-prjx
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
openSUSE-SU-2026:20973-1
Security update for curl
SUSE-SU-2026:2703-1
Security update for curl
SUSE-SU-2026:1940-1
Security update for curl
SUSE-SU-2026:1717-1
Security update for curl
SUSE-SU-2026:2925-1
Security update for curl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-09770 Уязвимость программного средства для взаимодействия с серверами cURL, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | ROS-20260624-73-0035 Уязвимость curl | CVSS3: 5.9 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-4873 connection reuse ignores TLS requirement | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
| CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly re ... | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
| GHSA-5fgw-rv54-prjx A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20973-1 Security update for curl | около 2 месяцев назад | ||
| SUSE-SU-2026:2703-1 Security update for curl | около 1 месяца назад | ||
| SUSE-SU-2026:1940-1 Security update for curl | 3 месяца назад | ||
| SUSE-SU-2026:1717-1 Security update for curl | 3 месяца назад | ||
| SUSE-SU-2026:2925-1 Security update for curl | 19 дней назад |
Уязвимостей на страницу