Known vulnerabilities in curl-minimal - page 2

Vendor: OpenAnolis
Software: curl-minimal
Software CPE: cpe:2.3:o:openanolis:curl-minimal:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 40
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl-minimal curl-minimal is affected by 40 known vulnerabilities: 2 high, 20 medium, 18 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121030 - Improper Authentication
CVE-2025-15224		 CWE-287 Low
No
No
 8.4.0-13 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 14 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017		 CWE-567 Low
No
No
 8.4.0-13 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 15 more
#VU118098 - Key Exchange without Entity Authentication
CVE-2025-10966		 CWE-322 Low
No
No
 8.4.0-13 05.11.2025 SB2025110509
SB2026012829
SB2026020656
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 7.61.1-35.0.2, 8.4.0-12 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167		 CWE-200 Low
No
No
 8.4.0-8 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU103647 - Resource Management Errors
CVE-2025-0665		 CWE-399 Low
No
No
 8.4.0-7 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 8.4.0-11 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 8.4.0-8 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096		 CWE-295 Low
No
No
 8.4.0-10 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 7.61.1-35.0.2 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87846 - Improper input validation
CVE-2024-2004		 CWE-20 Low
No
No
 8.4.0-6 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 7.61.1-34.0.2, 8.4.0-6 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219		 CWE-311 Medium
No
No
 8.4.0-6 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 8.4.0-1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 7.61.1-34.0.1, 7.61.1-34.0.2, 8.4.0-1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80732 - Resource exhaustion
CVE-2023-38039		 CWE-400 Medium
No
No
 8.4.0-1 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 7.61.1-34.0.2 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 7.61.1-31.0.3 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 7.61.1-31.0.3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 7.61.1-30.0.2 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more


Showing elements 21 - 40 out of 40