CVE-2023-32001

...

CVE-2023-32001

CVE-2023-32001 is corroborated by connected records as affecting curl in multiple packages. Specifically, CVE-2023-32001 targets curl versions below 8.2.1-1 (e.g., CBLMARINER entries for curl

[SECURITY] [DSA 5460-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2023 https://www.debian.org/security/faq -...

Curl Arbitrary File Write 7.x >= 7.84.0 / 8.x <= 8.1.2 (CVE-2023-32001)

The version of Curl installed on the remote host is between 7.84.0 and 8.1.2. It is therefore affected by an arbitrary file write vulnerability. Curl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called stat followed by fopen in a way that made it vulnerable t...

Internet Bug Bounty: [curl] CVE-2023-32001: fopen race condition

CVE-2023-32001 is a vulnerability in the curl library that allowed for a race condition between the stat and fopen functions. This race condition could be exploited to trick users into overwriting protected files or to steal sensitive data, such as cookies. The vulnerability was fixed in a recent...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2023:2891-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2891-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Slackware: Security Advisory (SSA:2023-200-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2880-1 Security update for curl

This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition bsc1213237...

CVE-2023-32001

Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Vulnerability (SSA:2023-200-01)

The version of curl installed on the remote host is prior to 8.2.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-200-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2022-32001

creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:47+00:00| seen| https://t.me/cibsecurity/43711...

CVE-2022-32001

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...

CVE-2022-32001

Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/viewproduct.php?id=...

CVE-2022-32001

CVE-2022-32001 affects Badminton Center Management System v1.0. Connected sources confirm an SQL injection vulnerability in bcms/admin/products/view_product.php?id= (unsanitized input) leading to potential unauthorized database access. The issue is documented across multiple feeds (NVD entry and ...

CVE-2021-32001 K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...