MINI-4947-9PC6-P85W

Bulletin has no description...

Exploit for Type Confusion in Google Chrome

CVE-2024-4947 — V8 Maglev Type Confusion → Full RCE d8 PoC...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: envoy-gateway, controller-gen, crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, chaos-mesh, plugin-barman-cloud, aws-flb-cloudwatch-fips, cue-fips, kubectx,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, redka, ctop, buildah, cilium-cli, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, vale, timescaledb-parallel-copy, kapp, github-mcp-server, dask-gateway, crossplane, dfc,...

Photon OS 5.0: Curl PHSA-2025-5.0-91-0660

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0660. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-4947

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:36+00:00| seen| Telegram/jyatwHTsuiD0gHBEYEMrZjBra-amFrxPGWmF0zTmxDIL8I 2026-04-01 05:16:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifwqza4sr27...

CVE-2022-4947

creationtimestamp| type| source ---|---|--- 2026-03-06 16:02:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfoq6q5ca24...

SUSE: Security Advisory (SUSE-SU-2025:03198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for curl

This update for curl fixes the following issues: Update to version 8.14.1 jscPED-13055, jscPED-13056. Security issues fixed: CVE-2025-0665: eventfd double close can cause libcurl to act unreliably bsc1236589. CVE-2025-4947: QUIC certificate check is skipped with wolfSSL allows for MITM attacks...

SUSE-SU-2025:20675-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-5399: libcurl can possibly get trapped in an endless busy-loop when processing specially crafted packets bsc1243933. - CVE-2025-5025: No QUIC certificate pinning with wolfSSL bsc1243706. - CVE-2025-4947: QUIC certificate check skip with...

Azure Linux 3.0 Security Update: cmake (CVE-2025-4947)

The version of cmake installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4947 advisory. - libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specifi...

CBL Mariner 2.0 Security Update: cmake / mysql (CVE-2025-4947)

The version of cmake / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4947 advisory. - libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host...

CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7

CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7. A patched version of the package is available...

curl-8.14.0-1.1 on GA media (moderate)

curl-8.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15176-1 Rating: moderate Cross-References: CVE-2025-4947 CVE-2025-5025 CVSS scores: CVE-2025-4947 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-4947 SUSE : 8.3...

CVE-2025-4947

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...

Curl 8.8.0 < 8.14.0 Improper Certificate Validation (CVE-2025-4947)

The version of Curl installed on the remote host is is missing security update. It is, therefore, affected by a improper certificate validation vulnerability. - libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the...

Slackware: Security Advisory (SSA:2025-148-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-4947 QUIC certificate check skip with wolfSSL

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...

CVE-2025-4947 QUIC certificate check skip with wolfSSL

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...

CVE-2025-4947

The libcurl library (and the curl package) is vulnerable to a security issue where it accidentally skips certificate verification for QUIC connections when the host is specified as an IP address in the URL. This flaw prevents the detection of impostor attacks or man-in-the-middle (MITM) attacks. ...