Поиск уязвимостей
Количество 21
Количество 21
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network.
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful u ...
GHSA-3cmq-42w4-c529
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
BDU:2021-05649
Уязвимость реализации команды «--ssl-reqd» программного средства для взаимодействия с серверами cURL, позволяющая нарушителю проводить атаки типа "человек посередине"
openSUSE-SU-2021:3298-1
Security update for curl
openSUSE-SU-2021:1384-1
Security update for curl
SUSE-SU-2021:3351-1
Security update for curl
SUSE-SU-2021:3332-1
Security update for curl
SUSE-SU-2021:3298-1
Security update for curl
SUSE-SU-2021:3297-1
Security update for curl
SUSE-SU-2021:14807-1
Security update for curl
RLSA-2021:4059
Moderate: curl security update
ELSA-2021-4059
ELSA-2021-4059: curl security update (MODERATE)
ALT-PU-2021-2804
ALT-PU-2021-2804: package `curl` update to version 7.79.0-alt1
ALT-PU-2021-2856
ALT-PU-2021-2856: package `curl` update to version 7.79.0-alt2
ALT-PU-2021-3241
ALT-PU-2021-3241: package `MySQL` update to version 8.0.27-alt1
ALT-PU-2022-1100
ALT-PU-2022-1100: package `MySQL` update to version 8.0.28-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network. | CVSS3: 7.5 | 5% Низкий | около 5 лет назад |
 | CVE-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network. | CVSS3: 7.5 | 5% Низкий | около 5 лет назад |
 | CVE-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network. | CVSS3: 7.5 | 5% Низкий | около 5 лет назад |
 | CVE-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network. | CVSS3: 7.5 | 5% Низкий | около 5 лет назад |
| CVE-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful u ... | CVSS3: 7.5 | 5% Низкий | около 5 лет назад |
| GHSA-3cmq-42w4-c529 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | BDU:2021-05649 Уязвимость реализации команды «--ssl-reqd» программного средства для взаимодействия с серверами cURL, позволяющая нарушителю проводить атаки типа "человек посередине" | CVSS3: 8.2 | 5% Низкий | около 5 лет назад |
 | openSUSE-SU-2021:3298-1 Security update for curl | около 5 лет назад | ||
| openSUSE-SU-2021:1384-1 Security update for curl | около 5 лет назад | ||
| SUSE-SU-2021:3351-1 Security update for curl | около 5 лет назад | ||
| SUSE-SU-2021:3332-1 Security update for curl | около 5 лет назад | ||
| SUSE-SU-2021:3298-1 Security update for curl | около 5 лет назад | ||
| SUSE-SU-2021:3297-1 Security update for curl | около 5 лет назад | ||
| SUSE-SU-2021:14807-1 Security update for curl | около 5 лет назад | ||
 | RLSA-2021:4059 Moderate: curl security update | около 5 лет назад | ||
| ELSA-2021-4059 ELSA-2021-4059: curl security update (MODERATE) | около 5 лет назад | ||
| ALT-PU-2021-2804 ALT-PU-2021-2804: package `curl` update to version 7.79.0-alt1 | CVSS3: 9.1 | около 5 лет назад | |
| ALT-PU-2021-2856 ALT-PU-2021-2856: package `curl` update to version 7.79.0-alt2 | CVSS3: 9.1 | около 5 лет назад | |
| ALT-PU-2021-3241 ALT-PU-2021-3241: package `MySQL` update to version 8.0.27-alt1 | CVSS3: 9.8 | около 5 лет назад | |
| ALT-PU-2022-1100 ALT-PU-2022-1100: package `MySQL` update to version 8.0.28-alt1 | CVSS3: 9.8 | почти 5 лет назад |
Уязвимостей на страницу