Поиск уязвимостей
Количество 13
Количество 13
ALT-PU-2014-2123
ALT-PU-2014-2123: package `curl` update to version 7.38.0-alt1
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Sa ...
CVE-2014-3613
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
CVE-2014-3613
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
CVE-2014-3613
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
CVE-2014-3613
cURL and libcurl before 7.38.0 does not properly handle IP addresses i ...
GHSA-jcjc-gx52-c9q4
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
GHSA-gcmw-6qh5-324w
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
ELSA-2015-2159
ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE)
ELSA-2015-1254
ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-2123 ALT-PU-2014-2123: package `curl` update to version 7.38.0-alt1 | CVSS2: 5 | около 12 лет назад | |
 | CVE-2014-3620 cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain. | CVSS2: 5 | 4% Низкий | почти 12 лет назад |
 | CVE-2014-3620 cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain. | CVSS2: 4.3 | 4% Низкий | около 12 лет назад |
 | CVE-2014-3620 cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain. | CVSS2: 5 | 4% Низкий | почти 12 лет назад |
| CVE-2014-3620 cURL and libcurl before 7.38.0 allow remote attackers to bypass the Sa ... | CVSS2: 5 | 4% Низкий | почти 12 лет назад |
| CVE-2014-3613 cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1. | CVSS2: 5 | 7% Низкий | почти 12 лет назад |
| CVE-2014-3613 cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1. | CVSS2: 4.3 | 7% Низкий | около 12 лет назад |
| CVE-2014-3613 cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1. | CVSS2: 5 | 7% Низкий | почти 12 лет назад |
| CVE-2014-3613 cURL and libcurl before 7.38.0 does not properly handle IP addresses i ... | CVSS2: 5 | 7% Низкий | почти 12 лет назад |
| GHSA-jcjc-gx52-c9q4 cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain. | 4% Низкий | больше 4 лет назад | |
| GHSA-gcmw-6qh5-324w cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1. | 7% Низкий | больше 4 лет назад | |
| ELSA-2015-2159 ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE) | почти 11 лет назад | ||
| ELSA-2015-1254 ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE) | больше 11 лет назад |
Уязвимостей на страницу