Known vulnerabilities in cURL 7.47.1 - page 2

Software: cURL
Version: 7.47.1
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 76
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.47.1 cURL 7.47.1 is affected by 76 vulnerabilities: 7 high, 46 medium, 23 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115138 - Out-of-bounds read
CVE-2025-9086
CWE-125 Low
No
No
8.16.0 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU103646 - Integer overflow
CVE-2025-0725
CWE-190 High
No
No
8.12.0 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
8.11.1 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
8.10.0 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
8.9.1 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
8.5.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
8.4.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76235 - Improper Synchronization
CVE-2023-28320
CWE-662 Low
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 28 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538
CWE-200 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535
CWE-371 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73827 - Improper input validation
CVE-2023-27534
CWE-20 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 45 more
#VU73826 - Improper input validation
CVE-2023-27533
CWE-20 Low
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 42 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
7.87.0 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221
CWE-440 Medium
No
No
7.86.0 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
7.85.0 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
7.84.0 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more


Showing elements 21 - 40 out of 76