Known vulnerabilities in cURL - page 7

Software: cURL
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 172
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cURL cURL is affected by 172 known vulnerabilities: 16 high, 91 medium, 64 low Critical High Medium Low

Vulnerabilities (172)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890
CWE-300 Medium
No
No
7.76.0 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
7.76.0 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286
CWE-299 Medium
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
7.74.0 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU45794 - Expired pointer dereference
CVE-2020-8231
CWE-825 Low
No
No
7.72.0 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more
#VU33013 - Use After Free
CVE-2016-8623
CWE-416 Medium
No
No
7.51.0 01.08.2018 SB2018080124
SB2016111006
SB2016110309
and 13 more
#VU33014 - Improper input validation
CVE-2016-8625
CWE-20 Medium
No
No
7.51.0 01.08.2018 SB2018080125
SB2016110317
SB2016110324
and 6 more
#VU33018 - Double Free
CVE-2016-8619
CWE-415 High
No
No
7.51.0 01.08.2018 SB2018080126
SB2016111006
SB2016110309
and 14 more
#VU33019 - Out-of-bounds read
CVE-2016-8620
CWE-125 High
No
No
7.51.0 01.08.2018 SB2018080127
SB2016111006
SB2016110309
and 8 more
#VU33020 - Out-of-bounds read
CVE-2016-8621
CWE-125 Medium
No
No
7.51.0 01.08.2018 SB2018080128
SB2016111006
SB2016110309
and 14 more
#VU33017 - Double Free
CVE-2016-8618
CWE-415 High
No
No
7.51.0 31.07.2018 SB2018073119
SB2016111006
SB2016110309
and 11 more
#VU33155 - Improper Certificate Validation
CVE-2017-7468
CWE-295 Medium
No
No
7.52.1 16.07.2018 SB2018071620
SB2017042520
SB2017042907
and 2 more
#VU33022 - Memory corruption
CVE-2016-9586
CWE-119 High
No
No
7.52.0 23.04.2018 SB2018042319
SB2016123022
SB2017010307
and 10 more
#VU33154 - Memory corruption
CVE-2017-7407
CWE-119 Low
No
No
7.54.0 03.04.2017 SB2017040311
SB2017042519
SB2017062234
and 4 more
#VU33070 - Improper input validation
CVE-2016-3739
CWE-20 Medium
No
No
7.49.0 20.05.2016 SB2016052006
SB2016062203
SB2016052101
#VU33077 - Improper Authentication
CVE-2016-0755
CWE-287 Medium
No
No
7.47.0 29.01.2016 SB2016012905
SB2016020804
SB2016020908
and 5 more
#VU41096 - Cryptographic Issues
CVE-2014-3620
CWE-310 Medium
No
No
- 18.11.2014 SB2014111803
SB2014091806
SB2014091108
and 2 more
#VU41097 - Cryptographic Issues
CVE-2014-3613
CWE-310 Medium
No
No
- 18.11.2014 SB2014111803
SB2014091806
SB2014091108
and 2 more
#VU33107 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1944
CWE-200 Medium
No
No
7.30.0 30.04.2013 SB2013043001
SB2013041201
SB2013071203


Showing elements 121 - 140 out of 172