CU
Product
curl
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 1Low 0
Watch
Add curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-16890 | 7.5 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read Affected: 7.64.0 |
| CVE-2019-3823 | 7.5 | Feb 6 | libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP Affected: 7.64.0 |
| CVE-2016-8623 | 7.5 | Aug 1 | A flaw was found in curl before version 7.51.0 Affected: 7.51.0 |
| CVE-2016-8615 | 7.5 | Aug 1 | A flaw was found in curl before version 7.51 Affected: 7.51.0 |
| CVE-2016-8625 | 7.5 | Aug 1 | curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer… Affected: 7.51.0 |
| CVE-2016-8621 | 7.5 | Jul 31 | The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short Affected: 7.51.0 |
| CVE-2016-8624 | 7.5 | Jul 31 | curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into… Affected: 7.51.0 |
| CVE-2016-8617 | 7.0 | Jul 31 | The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME` Affected: 7.51.0 |
Showing 8