Known vulnerabilities in cURL 7.24.0 - page 2

Software: cURL
Version: 7.24.0
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 62
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.24.0 cURL 7.24.0 is affected by 62 vulnerabilities: 8 high, 36 medium, 18 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538
CWE-200 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
7.87.0 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221
CWE-440 Medium
No
No
7.86.0 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
7.85.0 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
7.84.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782
CWE-303 Medium
No
No
7.83.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776
CWE-200 Low
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774
CWE-200 Medium
No
No
7.83.0 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU61306 - Improper input validation
CVE-2022-22623
CWE-20 Medium
No
No
7.79.1 14.03.2022 SB2022031431
SB2022031433
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947
CWE-345 Medium
No
No
7.79.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946
CWE-319 Medium
No
No
7.79.0 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
7.77.0 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
7.76.0 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177
CWE-644 Low
No
No
7.71.0 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU24338 - Improper input validation
CVE-2019-15601
CWE-20 Medium
No
No
7.68.0 16.01.2020 SB2020011605
SB2020041716
SB2020041901
and 3 more


Showing elements 21 - 40 out of 62