10683 matches found
SUSE SLES15 Security Update : curl (SUSE-SU-2026:2926-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2926-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong...
The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software for interacting with servers via cURL, related to errors in the certificate validation process, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software for interacting with servers via cURL, related to incorrect session duration, allows attackers to gain unauthorized access to protected information.
The vulnerability of the software for interacting with servers via cURL is related to an incorrect session duration. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the libcurl library in software tools for interacting with servers via cURL allows a hacker to perform an SSRF attack.
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...
ROOT-OS-DEBIAN-11-CVE-2026-12064 CVE-2026-12064 in rootio-curl - Patched by Root
Root has patched CVE-2026-12064 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...
EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-2644)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent...
Malicious code in eslint-angular-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a6248527167bc121cdf2c1a874adbc9d433dbe4be2aed160e8abb3eb2ca63b package.json declares a preinstall lifecycle script that runs curl against the hardcoded bare IP http://109.71.252.153:8080/ at npm install time,...
GHSA-4CHG-4752-W88R NukeViet: Pre-authentication SSRF via X-Forwarded-Host
Summary An unauthenticated attacker can coerce the server into issuing HTTP requests to an attacker-chosen host by spoofing the X Forwarded-Host and X-Forwarded-Proto request headers. The forwarded host is used, without validation, to build the URL that serverinfoupdate fetches with cURL, resulti...
Security update for curl
This update for curl fixes the following issues CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409...
PYSEC-2026-3431 yt-dlp: File Downloader cookie leak with curl
Summary If curl is used an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's. This is the equivalent to GHSA-v8mc-9377-rwjj for the curl downloader. The vulnerable behavior is...
CakePHP 5.3.7 Released
CakePHP 5.3.7 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.3.5. This is a maintenance release for the 5.3 branch that fixes community reported issues and three security issues. Advisories will be published for the issues over the next week as...
CVE-2026-8932 affecting package curl for versions less than 8.11.1-10
CVE-2026-8932 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-9079 affecting package curl for versions less than 8.11.1-10
CVE-2026-9079 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...