Known vulnerabilities in curl - page 5

Vendor: SUSE
Software: curl
Software CPE: cpe:2.3:o:suse:curl:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 90
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 90 known vulnerabilities: 2 high, 51 medium, 36 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
7.60.0-3.47.1, 7.60.0-4.25.1, 7.60.0-11.23.1, 7.66.0-4.22.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
7.60.0-3.47.1, 7.60.0-4.25.1, 7.60.0-11.23.1, 7.66.0-4.22.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923
CWE-522 Medium
No
No
7.60.0-3.47.1, 7.60.0-4.25.1, 7.60.0-11.23.1, 7.66.0-4.22.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
7.37.0-70.66.1, 7.60.0-3.42.1, 7.60.0-4.20.1, 7.60.0-11.18.1, 7.66.0-4.17.1 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890
CWE-300 Medium
No
No
7.66.0-4.14.1 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
7.60.0-3.42.1, 7.60.0-4.20.1, 7.60.0-11.15.1, 7.66.0-4.14.1 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286
CWE-299 Medium
No
No
7.60.0-4.20.1 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
7.60.0-4.20.1 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
7.60.0-4.20.1 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU45794 - Expired pointer dereference
CVE-2020-8231
CWE-825 Low
No
No
7.60.0-4.20.1 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more


Showing elements 81 - 100 out of 90