10838 matches found
curl: Leak of authentication credentials in URL via automatic Referer
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected...
Moderate: Red Hat Security Advisory: rh-dotnet31-curl security update
An update for rh-dotnet31-curl is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-1370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data, allowing attackers to access confidential information.
The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-1396)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
The plugin does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection curl 'http://example.com/?restroute=/olistener/new' --data '"id":" SELECT SLEEP3"' -H 'content-type: application/json'...
Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update
The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as the userscanregister and defaultrole,...
CVE-2021-22898 affecting package curl for versions less than 7.76.0-5
CVE-2021-22898 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22922 affecting package curl for versions less than 7.76.0-5
CVE-2021-22922 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22947 affecting package curl for versions less than 7.82.0-1
CVE-2021-22947 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22897 affecting package curl for versions less than 7.76.0-5
CVE-2021-22897 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22924 affecting package curl for versions less than 7.76.0-5
CVE-2021-22924 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22923 affecting package curl for versions less than 7.76.0-5
CVE-2021-22923 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22946 affecting package curl for versions less than 7.82.0-1
CVE-2021-22946 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22926 affecting package curl for versions less than 7.82.0-1
CVE-2021-22926 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22901 affecting package curl for versions less than 7.76.0-5
CVE-2021-22901 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:0103-1 Rating: important References: Cross-References: CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798 CVE-2022-0799...
