Known vulnerabilities in cURL - page 4

Software: cURL
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 172
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cURL cURL is affected by 172 known vulnerabilities: 16 high, 91 medium, 64 low Critical High Medium Low

Vulnerabilities (172)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94716 - Out-of-bounds read
CVE-2024-6874
CWE-125 Medium
No
No
8.9.0 24.07.2024 SB2024072431
SB2024081362
SB2024091242
and 6 more
#VU94715 - Double Free
CVE-2024-6197
CWE-415 Medium
No
No
8.9.0 24.07.2024 SB2024072431
SB2024080568
SB20240806402
and 11 more
#VU87852 - Improper Validation of Certificate with Host Mismatch
CVE-2024-2466
CWE-297 Medium
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 14 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87848 - Improper Certificate Validation
CVE-2024-2379
CWE-295 Low
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 12 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
8.7.0 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853
CWE-299 Low
No
No
8.6.0 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
8.5.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219
CWE-311 Medium
No
No
8.5.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
8.4.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
8.4.0 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80732 - Resource exhaustion
CVE-2023-38039
CWE-400 Medium
No
No
8.3.0 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
8.2.0 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76235 - Improper Synchronization
CVE-2023-28320
CWE-662 Low
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 28 more
#VU76233 - Use After Free
CVE-2023-28319
CWE-416 Low
No
No
8.1.0 17.05.2023 SB2023051752
SB2023051761
SB2023051762
and 27 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538
CWE-200 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU73830 - Double Free
CVE-2023-27537
CWE-415 High
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032044
SB2023060527
and 15 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
8.0.0 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more


Showing elements 61 - 80 out of 172