Lucene search
+L

10902 matches found

OSV
OSV
added 2026/09/06 6:17 p.m.3 views

AZL-99810 CVE-2026-80255 affecting package mysql 8.0.46-1

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/06 6:17 p.m.8 views

AZL-99764 CVE-2026-18924 affecting package curl 8.11.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS5.7AI score0.00897EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/09/06 5:48 p.m.56 views

CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

0.00684EPSS
SaveExploits1References3
CVE
CVE
added 2026/09/06 5:48 p.m.44 views

CVE-2026-80255

curl is affected by a secure cookie attribute bypass. A Set-Cookie: header that uses a tab (ASCII 9) instead of a space (ASCII 32) immediately before the Secure attribute causes curl to store the cookie without its Secure flag , allowing it to be wrongfully sent over plaintext HTTP on subsequent ...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/09/06 5:48 p.m.9 views

EUVD-2026-72151

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

5.8AI score0.00684EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2026/09/06 5:48 p.m.10 views

CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/09/06 5:48 p.m.8 views

CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

5.8AI score0.00684EPSS
SaveExploits1References3
OSV
OSV
added 2026/09/06 5:48 p.m.7 views

CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits1References6
OSV
OSV
added 2026/09/06 4:57 p.m.3 views

SUSE-SU-2026:23498-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

9.1CVSS6.6AI score0.00899EPSS
SaveExploits6References13
OSV
OSV
added 2026/09/06 4:56 p.m.4 views

OPENSUSE-SU-2026:21774-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

9.1CVSS6.6AI score0.00899EPSS
SaveExploits6References12
SUSE Linux
SUSE Linux
added 2026/09/03 1:32 p.m.11 views

Security update for curl

This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...

8.2CVSS6.6AI score0.00899EPSS
SaveExploits6References26
OSV
OSV
added 2026/09/03 1:32 p.m.5 views

SUSE-SU-2026:3958-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can...

9.1CVSS6.6AI score0.00899EPSS
SaveExploits6References14
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-80230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcu...

7.5CVSS5.8AI score0.00566EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.8 views

Curl 7.64.1 < 8.22.0 Negotiate Ambient User Connection Reuse

The version of curl installed on the remote host is 7.64.1 prior to 8.22.0. It is, therefore, affected by an information disclosure vulnerability: - A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is...

9.8CVSS5.8AI score0.01162EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-80229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...

7.5CVSS5.8AI score0.00899EPSS
SaveExploits1References3
NVD
NVD
added 2026/09/02 5:17 p.m.9 views

CVE-2026-52831

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...

8CVSS0.00319EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/02 4:40 p.m.36 views

CVE-2026-52831

CVE-2026-52831 affects Nuclio , a serverless framework for real-time events and data processing. In versions prior to 1.16.4 , the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, ). Two fields in the...

8CVSS7AI score0.00319EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/02 12:36 p.m.11 views

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.324 Vulnerability Details CVEID:CVE-2026-44892 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to version...

9.8CVSS6.9AI score0.01025EPSS
SaveExploits6Affected Software1
OSV
OSV
added 2026/09/02 8:00 a.m.11 views

CURL-CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.9AI score0.00684EPSS
SaveExploits1
curl security advisories
curl security advisories
added 2026/09/02 8:00 a.m.15 views

secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

7.5CVSS5.9AI score0.00684EPSS
SaveExploits1References1Affected Software2
Rows per page
Query Builder