207 matches found
CVE-2016-3739
The 1 mbedconnectstep1 function in lib/vtls/mbedtls.c and 2 polarsslconnectstep1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid...
cURL certificates spoofing
Имя хоста не проверяется при включенном CURLOPTSSLVERIFYPEER...
cURL/libcURL 'curl_easy_unescape()' Heap Memory Corruption
Binary data 6898.prm...
Debian Security Advisory DSA 2398-1 (curl)
The remote host is missing an update to curl announced via advisory DSA 2398-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PHP 5.2.4,5.2.5 curl/interface.c安全设置绕过漏洞
No description provided by source...
CentOS 3 / 4 : curl (CESA-2009:0341)
Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers,...