Lucene search
+L

10838 matches found

RedHat Linux
RedHat Linux
added 2021/03/30 9:49 a.m.54 views

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

9.8CVSS6.7AI score0.17939EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/30 12:00 a.m.48 views

DSA-4881-1 curl - security update

Bulletin has no description...

7.8CVSS6.7AI score0.0977EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
added 2021/03/24 12:00 a.m.27 views

EulerOS 2.0 SP5 : curl (EulerOS-SA-2021-1672)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.CVE-2020-8285...

7.5CVSS6.8AI score0.0977EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/03/24 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1672)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.0977EPSS
SaveExploits1References2
Photon
Photon
added 2021/03/18 12:00 a.m.58 views

Important Photon OS Security Update - PHSA-2021-0372

Updates of 'apache-tomcat' packages of Photon OS have been released...

7.5CVSS6.7AI score0.18114EPSS
SaveExploits17
Kitploit
Kitploit
added 2021/03/17 11:30 a.m.308 views

Lazy-RDP - Script For AutomRDPatic Scanning And Brute-Force

Script For AutomRDPatic Scanning And Brute-Force. Demo Video: Lazy-RDP over SSH: Script for automatic scanning of the address list for the presence of open 3389 ports, and then selecting the method and starting busting pair login / password. The script is tuned for Kali linux 2.0, Kali linux 2016...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/17 12:00 a.m.14 views

PT-2021-5820 · Curl +5 · Curl +5

Name of the Vulnerable Software and Affected Versions: curl versions 7.63.0 through 7.75.0 Description: The issue is related to the incorrect handling of TLS 1.3 session tickets, which can allow a malicious HTTPS proxy to perform a man-in-the-middle MITM attack. When using an HTTPS proxy and TLS...

10CVSS8AI score0.60122EPSS
SaveExploits20References138
Tenable Nessus
Tenable Nessus
added 2021/03/17 12:00 a.m.46 views

RHEL 7 : curl (RHSA-2021:0877)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0877 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...

9.8CVSS6.6AI score0.17939EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/16 3:14 p.m.41 views

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

9.8CVSS6.7AI score0.17939EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/15 5:09 p.m.43 views

Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286)

Summary There are a vulnerabilities in Curl that affect PowerSC. Vulnerability Details CVEID: CVE-2020-8284 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information, caused by improper validation of FTP PASV responses. By persuading a victim to connect a...

7.5CVSS0.5AI score0.0977EPSS
SaveExploits2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.6 views

The vulnerability of the “Copy as CURL” option in web browsers such as Firefox ESR, Firefox, and the Thunderbird email client allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Copy as CURL” option in web browsers such as Firefox ESR, Firefox, and the Thunderbird email client is related to the exposure of sensitive information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.00347EPSS
SaveExploits0References12Affected Software7
Exploit DB
Exploit DB
added 2021/03/15 12:00 a.m.261 views

MagpieRSS 0.72 - 'url' Command Injection

Exploit Title: MagpieRSS 0.72 - 'url' Command Injection and Server Side Request Forgery Date: 24 March 2021 Exploit Author: bl4ckh4ck5 Vendor Homepage: http://magpierss.sourceforge.net/ Software Link:...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1645)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.0977EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.44 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1596)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.0977EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:00 a.m.31 views

EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2021-1645)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

7.5CVSS6.8AI score0.0977EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.51 views

EulerOS Virtualization for ARM 64 3.0.2.0 : curl (EulerOS-SA-2021-1399)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard...

7.5CVSS6.7AI score0.0977EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.31 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Multiple Vulnerabilities (NS-SA-2021-0018)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has curl packages installed that are affected by multiple vulnerabilities: - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 - curl 7.20.0 through 7.70.0 is vulnerable to improper...

9.8CVSS6.8AI score0.17939EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.34 views

EulerOS Virtualization 3.0.6.6 : curl (EulerOS-SA-2021-1466)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

7.5CVSS6.7AI score0.0977EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.38 views

EulerOS Virtualization 3.0.2.6 : curl (EulerOS-SA-2021-1410)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

7.5CVSS6.8AI score0.0977EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.30 views

NewStart CGSL MAIN 6.02 : curl Vulnerability (NS-SA-2021-0067)

The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by a vulnerability: - curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...

7.8CVSS6.7AI score0.01251EPSS
SaveExploits1References2
Rows per page
Query Builder