agentprime: https-github-com-curl-curlEvery new CVE for https-github-com-curl-curl.https://agentprime.io/CVE-2023-28322: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-28322/https://agentprime.io/advisories/CVE-2023-28322/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 May 2023 00:00:00 GMTCVECVE-2023-28321: Improper certificate validation in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-28321/https://agentprime.io/advisories/CVE-2023-28321/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 May 2023 00:00:00 GMTCVECVE-2023-28320: Uncontrolled resource consumption in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-28320/https://agentprime.io/advisories/CVE-2023-28320/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 May 2023 00:00:00 GMTCVECVE-2023-28319: Use after free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-28319/https://agentprime.io/advisories/CVE-2023-28319/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 May 2023 00:00:00 GMTCVECVE-2023-27538: An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr…https://agentprime.io/advisories/CVE-2023-27538/https://agentprime.io/advisories/CVE-2023-27538/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVECVE-2023-27537: Double free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-27537/https://agentprime.io/advisories/CVE-2023-27537/Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVECVE-2023-27536: An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che…https://agentprime.io/advisories/CVE-2023-27536/https://agentprime.io/advisories/CVE-2023-27536/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVECVE-2023-27535: An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.https://agentprime.io/advisories/CVE-2023-27535/https://agentprime.io/advisories/CVE-2023-27535/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVECVE-2023-27534: Path traversal in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-27534/https://agentprime.io/advisories/CVE-2023-27534/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVECVE-2023-27533: A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…https://agentprime.io/advisories/CVE-2023-27533/https://agentprime.io/advisories/CVE-2023-27533/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Mar 2023 00:00:00 GMTCVEcriticalCVE-2023-23916: Resource allocation without limits in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-23916/https://agentprime.io/advisories/CVE-2023-23916/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Feb 2023 00:00:00 GMTCVECVE-2023-23915: Cleartext transmission of sensitive information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-23915/https://agentprime.io/advisories/CVE-2023-23915/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Feb 2023 00:00:00 GMTCVECVE-2023-23914: Cleartext transmission of sensitive information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2023-23914/https://agentprime.io/advisories/CVE-2023-23914/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Feb 2023 00:00:00 GMTCVEcriticalCVE-2022-43552: Use after free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-43552/https://agentprime.io/advisories/CVE-2022-43552/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Feb 2023 00:00:00 GMTCVECVE-2022-43551: Cleartext transmission of sensitive information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-43551/https://agentprime.io/advisories/CVE-2022-43551/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Dec 2022 00:00:00 GMTCVEcriticalCVE-2022-35260: Out-of-bounds read in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-35260/https://agentprime.io/advisories/CVE-2022-35260/Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVECVE-2022-32221: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-32221/https://agentprime.io/advisories/CVE-2022-32221/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVEcriticalCVE-2022-35252: Improper input validation in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-35252/https://agentprime.io/advisories/CVE-2022-35252/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Sep 2022 00:00:00 GMTCVECVE-2022-32208: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.https://agentprime.io/advisories/CVE-2022-32208/https://agentprime.io/advisories/CVE-2022-32208/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jul 2022 00:00:00 GMTCVECVE-2022-32207: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In…https://agentprime.io/advisories/CVE-2022-32207/https://agentprime.io/advisories/CVE-2022-32207/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jul 2022 00:00:00 GMTCVEcriticalCVE-2022-32206: Resource allocation without limits in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-32206/https://agentprime.io/advisories/CVE-2022-32206/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jul 2022 00:00:00 GMTCVECVE-2022-32205: Resource allocation without limits in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-32205/https://agentprime.io/advisories/CVE-2022-32205/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Jul 2022 00:00:00 GMTCVECVE-2022-27778: A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.https://agentprime.io/advisories/CVE-2022-27778/https://agentprime.io/advisories/CVE-2022-27778/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 19:03:32 GMTCVECVE-2022-30115: Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.https://agentprime.io/advisories/CVE-2022-30115/https://agentprime.io/advisories/CVE-2022-30115/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27782: libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection p…https://agentprime.io/advisories/CVE-2022-27782/https://agentprime.io/advisories/CVE-2022-27782/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27781: Uncontrolled resource consumption in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-27781/https://agentprime.io/advisories/CVE-2022-27781/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27780: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.F…https://agentprime.io/advisories/CVE-2022-27780/https://agentprime.io/advisories/CVE-2022-27780/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27779: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-27779/https://agentprime.io/advisories/CVE-2022-27779/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27776: Insufficiently protected credentials in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-27776/https://agentprime.io/advisories/CVE-2022-27776/Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27775: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-27775/https://agentprime.io/advisories/CVE-2022-27775/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-27774: Insufficiently protected credentials in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-27774/https://agentprime.io/advisories/CVE-2022-27774/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jun 2022 00:00:00 GMTCVECVE-2022-22576: Improper authentication in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2022-22576/https://agentprime.io/advisories/CVE-2022-22576/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 May 2022 00:00:00 GMTCVECVE-2021-22947: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…https://agentprime.io/advisories/CVE-2021-22947/https://agentprime.io/advisories/CVE-2021-22947/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Sep 2021 00:00:00 GMTCVECVE-2021-22946: Cleartext transmission of sensitive information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22946/https://agentprime.io/advisories/CVE-2021-22946/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Sep 2021 00:00:00 GMTCVECVE-2021-22945: Double free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22945/https://agentprime.io/advisories/CVE-2021-22945/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Sep 2021 00:00:00 GMTCVEcriticalCVE-2021-22924: Improper input validation in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22924/https://agentprime.io/advisories/CVE-2021-22924/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 20:16:56 GMTCVECVE-2021-22926: libcurl-using applications can ask for a specific client certificate to be used in a transfer.https://agentprime.io/advisories/CVE-2021-22926/https://agentprime.io/advisories/CVE-2021-22926/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 00:00:00 GMTCVEcriticalCVE-2021-22925: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22925/https://agentprime.io/advisories/CVE-2021-22925/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 00:00:00 GMTCVECVE-2021-22923: Cleartext transmission of sensitive information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22923/https://agentprime.io/advisories/CVE-2021-22923/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 00:00:00 GMTCVECVE-2021-22922: When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to…https://agentprime.io/advisories/CVE-2021-22922/https://agentprime.io/advisories/CVE-2021-22922/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Aug 2021 00:00:00 GMTCVECVE-2021-22901: Use after free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22901/https://agentprime.io/advisories/CVE-2021-22901/Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jun 2021 15:49:38 GMTCVECVE-2021-22897: curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library.https://agentprime.io/advisories/CVE-2021-22897/https://agentprime.io/advisories/CVE-2021-22897/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jun 2021 15:49:38 GMTCVECVE-2021-22898: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22898/https://agentprime.io/advisories/CVE-2021-22898/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jun 2021 15:49:37 GMTCVECVE-2021-22890: curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.https://agentprime.io/advisories/CVE-2021-22890/https://agentprime.io/advisories/CVE-2021-22890/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Apr 2021 17:46:17 GMTCVECVE-2021-22876: Exposure of personal information in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2021-22876/https://agentprime.io/advisories/CVE-2021-22876/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Apr 2021 17:45:18 GMTCVECVE-2020-8177: curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.https://agentprime.io/advisories/CVE-2020-8177/https://agentprime.io/advisories/CVE-2020-8177/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Dec 2020 19:42:16 GMTCVECVE-2020-8169: Information disclosure in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2020-8169/https://agentprime.io/advisories/CVE-2020-8169/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Dec 2020 19:41:54 GMTCVECVE-2020-8286: Improper certificate validation in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2020-8286/https://agentprime.io/advisories/CVE-2020-8286/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Dec 2020 19:39:28 GMTCVECVE-2020-8231: Use after free in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2020-8231/https://agentprime.io/advisories/CVE-2020-8231/Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Dec 2020 19:39:19 GMTCVECVE-2020-8285: Uncontrolled recursion in https://github.com/curl/curlhttps://agentprime.io/advisories/CVE-2020-8285/https://agentprime.io/advisories/CVE-2020-8285/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Dec 2020 19:39:04 GMTCVE