Known vulnerabilities in cURL - page 8

Software: cURL
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 162
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cURL cURL is affected by 162 known vulnerabilities: 16 high, 87 medium, 58 low Critical High Medium Low

Vulnerabilities (162)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32181 - Improper Certificate Validation
CVE-2016-9952
CWE-295 High
No
No
7.52.0 12.03.2018 SB2018031220
SB2016123023
#VU32182 - Out-of-bounds read
CVE-2016-9953
CWE-125 High
No
No
7.52.0 12.03.2018 SB2018031221
SB2016123024
#VU7885 - Out-of-bounds read
CVE-2017-1000101
CWE-125 Low
No
No
- 15.08.2017 SB2017081008
SB2017082308
SB2017100701
and 7 more
#VU7884 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-1000100
CWE-601 Low
No
No
- 15.08.2017 SB2017081008
SB2017082308
SB2017100604
and 15 more
#VU7882 - Out-of-bounds read
CVE-2017-1000099
CWE-125 Low
No
No
- 15.08.2017 SB2017081008
SB2017082308
SB2017100604
and 10 more
#VU33154 - Memory corruption
CVE-2017-7407
CWE-119 Low
No
No
7.54.0 03.04.2017 SB2017040311
SB2017042519
SB2017062234
and 4 more
#VU5890 - Improper Certificate Validation
CVE-2017-2629
CWE-295 Medium
No
No
- 22.02.2017 SB2017022201
SB2017032802
SB2017030301
and 1 more
#VU32242 - Improper Authentication
CVE-2016-7141
CWE-287 Medium
No
No
7.50.2 04.10.2016 SB2016100416
SB2016090803
SB2018071926
#VU378 - Improper Authorization
CVE-2016-5420
CWE-285 Medium
No
No
7.50.1 08.09.2016 SB2016081014
SB2016080406
SB2016081710
and 6 more
#VU32262 - Use After Free
CVE-2016-5421
CWE-416 High
No
No
7.50.1 10.08.2016 SB2016081015
SB2016080407
SB2016081710
and 4 more
#VU32263 - Cryptographic Issues
CVE-2016-5419
CWE-310 Medium
No
No
7.50.1 10.08.2016 SB2016081016
SB2016080405
SB2017042907
and 6 more
#VU33070 - Improper input validation
CVE-2016-3739
CWE-20 Medium
No
No
7.49.0 20.05.2016 SB2016052006
SB2016062203
SB2016052101
#VU33077 - Improper Authentication
CVE-2016-0755
CWE-287 Medium
No
No
7.47.0 29.01.2016 SB2016012905
SB2016020804
SB2016020908
and 5 more
#VU41096 - Cryptographic Issues
CVE-2014-3620
CWE-310 Medium
No
No
- 18.11.2014 SB2014111803
SB2014091806
SB2014091108
and 2 more
#VU41097 - Cryptographic Issues
CVE-2014-3613
CWE-310 Medium
No
No
- 18.11.2014 SB2014111803
SB2014091806
SB2014091108
and 2 more
#VU32552 - Improper Authentication
CVE-2014-0138
CWE-287 Medium
No
No
7.36.0 15.04.2014 SB2014041501
SB2014041723
SB2014041108
and 2 more
#VU32553 - Cryptographic Issues
CVE-2014-0139
CWE-310 Medium
No
No
7.36.0 15.04.2014 SB2014041502
SB2014041724
SB2014062201
#VU32585 - Improper Authentication
CVE-2014-0015
CWE-287 Medium
No
No
7.35.0 02.02.2014 SB2014020201
SB2014020407
SB2016020908
and 3 more
#VU32616 - Cryptographic Issues
CVE-2013-4545
CWE-310 Medium
No
No
7.33.0 23.11.2013 SB2013112304
SB2013112507
#VU33107 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1944
CWE-200 Medium
No
No
7.30.0 30.04.2013 SB2013043001
SB2013041201
SB2013071203


Showing elements 141 - 160 out of 162