Known vulnerabilities in cURL - page 3

Software: cURL
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 162
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cURL cURL is affected by 162 known vulnerabilities: 16 high, 87 medium, 58 low Critical High Medium Low

Vulnerabilities (162)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-5399
CWE-835 Low
No
No
8.14.1 04.06.2025 SB2025060430
SB2025060503
SB2025061212
and 10 more
#VU109885 - Improper Certificate Validation
CVE-2025-5025
CWE-295 Medium
No
No
8.14.0 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU109884 - Improper Certificate Validation
CVE-2025-4947
CWE-295 Low
No
No
8.14.0 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167
CWE-200 Low
No
No
8.12.0 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU103647 - Resource Management Errors
CVE-2025-0665
CWE-399 Low
No
No
8.12.0 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more
#VU103646 - Integer overflow
CVE-2025-0725
CWE-190 High
No
No
8.12.0 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
8.11.1 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU99865 - Comparison using wrong factors
CVE-2024-9681
CWE-1025 Low
No
No
8.11.0 06.11.2024 SB2024110621
SB2024110655
SB2024110656
and 30 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
8.10.0 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
8.9.1 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU94716 - Out-of-bounds read
CVE-2024-6874
CWE-125 Medium
No
No
8.9.0 24.07.2024 SB2024072431
SB2024081362
SB2024091242
and 6 more
#VU94715 - Double Free
CVE-2024-6197
CWE-415 Medium
No
No
8.9.0 24.07.2024 SB2024072431
SB2024080568
SB20240806402
and 11 more
#VU87852 - Improper Validation of Certificate with Host Mismatch
CVE-2024-2466
CWE-297 Medium
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 14 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87848 - Improper Certificate Validation
CVE-2024-2379
CWE-295 Low
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 12 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853
CWE-299 Low
No
No
8.6.0 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
8.5.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219
CWE-311 Medium
No
No
8.5.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
8.4.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more


Showing elements 41 - 60 out of 162