Known vulnerabilities in curl - page 4

Vendor: SUSE
Software: curl
Software CPE: cpe:2.3:o:suse:curl:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 90
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 90 known vulnerabilities: 2 high, 51 medium, 36 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76233 - Use After Free
CVE-2023-28319		 CWE-416 Low
No
No
 8.0.1-11.65.2, 8.0.1-150400.5.23.1 17.05.2023 SB2023051752
SB2023051761
SB2023051762
and 27 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915		 CWE-319 Medium
No
No
 7.79.1-150400.5.15.1 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 7.79.1-150400.5.15.1 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 7.79.1-150400.5.12.1 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916		 CWE-319 Medium
No
No
 7.79.1-150400.5.9.1 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221		 CWE-440 Medium
No
No
 7.37.0-37.85.1, 7.60.0-4.43.1, 7.60.0-11.49.1, 7.60.0-150000.38.1, 7.66.0-150200.4.42.1, 7.79.1-150400.5.9.1 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252		 CWE-20 Medium
No
No
 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 7.37.0-37.79.1, 7.60.0-4.38.1, 7.60.0-150000.33.1, 7.66.0-150200.4.36.1, 7.79.1-150400.5.3.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207		 CWE-276 Low
No
No
 7.79.1-150400.5.3.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 7.60.0-4.38.1, 7.60.0-150000.33.1, 7.66.0-150200.4.36.1, 7.79.1-150400.5.3.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205		 CWE-400 Medium
No
No
 7.79.1-150400.5.3.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781		 CWE-835 Medium
No
No
 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776		 CWE-200 Low
No
No
 7.60.0-11.37.1, 7.66.0-150200.4.30.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775		 CWE-399 Low
No
No
 7.66.0-150200.4.30.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774		 CWE-200 Medium
No
No
 8.0.1-11.65.2 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576		 CWE-287 Medium
No
No
 7.60.0-11.37.1, 7.66.0-150200.4.30.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 7.60.0-4.30.1, 7.60.0-11.28.1, 7.60.0-25.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 7.60.0-4.30.1, 7.60.0-11.28.1, 7.60.0-25.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922		 CWE-611 Medium
No
No
 7.60.0-3.47.1, 7.60.0-4.25.1, 7.60.0-11.23.1, 7.66.0-4.22.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more


Showing elements 61 - 80 out of 90