Known vulnerabilities in curl - page 4

Software: curl
Software CPE: cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 137
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 137 known vulnerabilities: 18 high, 64 medium, 55 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
7.79.1-5.fc35, 7.82.0-6.fc36 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207
CWE-276 Low
No
No
7.79.1-5.fc35, 7.82.0-6.fc36 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
7.79.1-5.fc35, 7.82.0-6.fc36 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205
CWE-400 Medium
No
No
7.79.1-5.fc35, 7.82.0-6.fc36 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63011 - Cleartext Transmission of Sensitive Information
CVE-2022-30115
CWE-319 Low
No
No
7.82.0-5.fc36 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 11 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782
CWE-303 Medium
No
No
7.76.1-16.fc34, 7.79.1-4.fc35, 7.82.0-5.fc36 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63007 - Improper input validation
CVE-2022-27780
CWE-20 Low
No
No
7.82.0-5.fc36 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 14 more
#VU63005 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27779
CWE-200 Low
No
No
7.82.0-5.fc36 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 9 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776
CWE-200 Low
No
No
7.76.1-15.fc34, 7.76.1-16.fc34, 7.79.1-3.fc35, 7.79.1-4.fc35, 7.82.0-4.fc36 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775
CWE-399 Low
No
No
7.76.1-15.fc34, 7.76.1-16.fc34, 7.79.1-3.fc35, 7.79.1-4.fc35, 7.82.0-4.fc36 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774
CWE-200 Medium
No
No
7.76.1-15.fc34, 7.76.1-16.fc34, 7.79.1-3.fc35, 7.79.1-4.fc35, 7.82.0-4.fc36 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576
CWE-287 Medium
No
No
7.76.1-15.fc34, 7.76.1-16.fc34, 7.79.1-3.fc35, 7.79.1-4.fc35, 7.82.0-4.fc36 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947
CWE-345 Medium
No
No
7.71.1-11.fc33, 7.76.1-12.fc34, 7.79.0-4.fc35, 7.79.1-1.fc35 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946
CWE-319 Medium
No
No
7.71.1-11.fc33, 7.76.1-12.fc34, 7.79.0-4.fc35, 7.79.1-1.fc35 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945
CWE-415 Low
No
No
7.71.1-11.fc33, 7.76.1-12.fc34, 7.79.0-4.fc35, 7.79.1-1.fc35 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
7.71.1-10.fc33, 7.76.1-7.fc34 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922
CWE-611 Medium
No
No
7.71.1-10.fc33, 7.76.1-7.fc34 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
7.71.1-10.fc33, 7.76.1-7.fc34 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923
CWE-522 Medium
No
No
7.71.1-10.fc33, 7.76.1-7.fc34 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
7.71.1-10.fc33, 7.76.1-3.fc34, 7.76.1-7.fc34 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more


Showing elements 61 - 80 out of 137