Known vulnerabilities in cURL 7.37.0 - page 3

Software: cURL
Version: 7.37.0
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.37.0 cURL 7.37.0 is affected by 75 vulnerabilities: 8 high, 45 medium, 22 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55147 - Improper Certificate Validation
CVE-2021-22926
CWE-295 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072814
and 11 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923
CWE-522 Medium
No
No
7.78.0 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
7.77.0 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
7.76.0 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU45794 - Expired pointer dereference
CVE-2020-8231
CWE-825 Low
No
No
7.72.0 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177
CWE-644 Low
No
No
7.71.0 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU24338 - Improper input validation
CVE-2019-15601
CWE-20 Medium
No
No
7.68.0 16.01.2020 SB2020011605
SB2020041716
SB2020041901
and 3 more
#VU21059 - Heap-based Buffer Overflow
CVE-2019-5482
CWE-122 Medium
No
No
7.66.0 11.09.2019 SB2019091142
SB2019091143
SB2019091201
and 28 more
#VU18582 - Heap-based Buffer Overflow
CVE-2019-5436
CWE-122 High
No
No
7.65.0 23.05.2019 SB2019052304
SB2019052305
SB2019052306
and 21 more
#VU33010 - Security Features
CVE-2016-8615
CWE-254 Medium
No
No
7.51.0 01.08.2018 SB2018080121
SB2016111006
SB2016110309
and 13 more
#VU33011 - Credentials Management
CVE-2016-8616
CWE-255 Medium
No
No
7.51.0 01.08.2018 SB2018080122
SB2016111006
SB2016110309
and 13 more
#VU33013 - Use After Free
CVE-2016-8623
CWE-416 Medium
No
No
7.51.0 01.08.2018 SB2018080124
SB2016111006
SB2016110309
and 13 more
#VU33014 - Improper input validation
CVE-2016-8625
CWE-20 Medium
No
No
7.51.0 01.08.2018 SB2018080125
SB2016110317
SB2016110324
and 6 more
#VU33018 - Double Free
CVE-2016-8619
CWE-415 High
No
No
7.51.0 01.08.2018 SB2018080126
SB2016111006
SB2016110309
and 14 more
#VU33019 - Out-of-bounds read
CVE-2016-8620
CWE-125 High
No
No
7.51.0 01.08.2018 SB2018080127
SB2016111006
SB2016110309
and 8 more
#VU33012 - Out-of-bounds write
CVE-2016-8617
CWE-787 Low
No
No
7.51.0 01.08.2018 SB2018080123
SB2016111006
SB2016110309
and 14 more


Showing elements 41 - 60 out of 75