Known vulnerabilities in cURL - page 8

Software: cURL
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 172
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cURL cURL is affected by 172 known vulnerabilities: 16 high, 91 medium, 64 low Critical High Medium Low

Vulnerabilities (172)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29292 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8169
CWE-200 Medium
No
No
7.71.0 25.06.2020 SB2020062513
SB2020062514
SB2020063017
and 14 more
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177
CWE-644 Low
No
No
7.71.0 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU24338 - Improper input validation
CVE-2019-15601
CWE-20 Medium
No
No
7.68.0 16.01.2020 SB2020011605
SB2020041716
SB2020041901
and 3 more
#VU21058 - Double Free
CVE-2019-5481
CWE-415 Low
No
No
7.66.0 11.09.2019 SB2019091142
SB2019091143
SB2019091201
and 12 more
#VU31227 - Credentials Management
CVE-2003-1605
CWE-255 Medium
No
No
7.10.7 23.08.2018 SB2018082325
#VU33010 - Security Features
CVE-2016-8615
CWE-254 Medium
No
No
7.51.0 01.08.2018 SB2018080121
SB2016111006
SB2016110309
and 13 more
#VU33011 - Credentials Management
CVE-2016-8616
CWE-255 Medium
No
No
7.51.0 01.08.2018 SB2018080122
SB2016111006
SB2016110309
and 13 more
#VU33012 - Out-of-bounds write
CVE-2016-8617
CWE-787 Low
No
No
7.51.0 01.08.2018 SB2018080123
SB2016111006
SB2016110309
and 14 more
#VU31318 - Improper Initialization
CVE-2016-9594
CWE-665 High
No
No
7.52.1 23.04.2018 SB2018042318
SB2016122315
SB2017010307
and 5 more
#VU32181 - Improper Certificate Validation
CVE-2016-9952
CWE-295 High
No
No
7.52.0 12.03.2018 SB2018031220
SB2016123023
#VU32182 - Out-of-bounds read
CVE-2016-9953
CWE-125 High
No
No
7.52.0 12.03.2018 SB2018031221
SB2016123024
#VU32242 - Improper Authentication
CVE-2016-7141
CWE-287 Medium
No
No
7.50.2 04.10.2016 SB2016100416
SB2016090803
SB2018071926
#VU32262 - Use After Free
CVE-2016-5421
CWE-416 High
No
No
7.50.1 10.08.2016 SB2016081015
SB2016080407
SB2016081710
and 4 more
#VU32263 - Cryptographic Issues
CVE-2016-5419
CWE-310 Medium
No
No
7.50.1 10.08.2016 SB2016081016
SB2016080405
SB2017042907
and 6 more
#VU32552 - Improper Authentication
CVE-2014-0138
CWE-287 Medium
No
No
7.36.0 15.04.2014 SB2014041501
SB2014041723
SB2014041108
and 2 more
#VU32553 - Cryptographic Issues
CVE-2014-0139
CWE-310 Medium
No
No
7.36.0 15.04.2014 SB2014041502
SB2014041724
SB2014062201
#VU32585 - Improper Authentication
CVE-2014-0015
CWE-287 Medium
No
No
7.35.0 02.02.2014 SB2014020201
SB2014020407
SB2016020908
and 3 more
#VU32616 - Cryptographic Issues
CVE-2013-4545
CWE-310 Medium
No
No
7.33.0 23.11.2013 SB2013112304
SB2013112507
#VU32824 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0036
CWE-89 Medium
No
No
7.24.0 13.04.2012 SB2012041301
SB2012020208
#VU32858 - Credentials Management
CVE-2011-2192
CWE-255 Medium
No
No
7.21.7 08.07.2011 SB2011070802
SB2011062309
SB2017080120


Showing elements 141 - 160 out of 172