10646 matches found
The vulnerability of the curl_write_cb() function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).
The vulnerability of the curlwritecb function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a Denial-of-Service attack...
curl: bypass of this Fixed #2437131 [ Inadequate Protocol Restriction Enforcement in curl ]
Summary: A flaw has been identified in the curl command-line tool related to its protocol selection mechanism. Specifically, the protocol restrictions set by the --proto option can be bypassed, allowing unintended protocols to be used despite explicit restrictions. This flaw can result in plainte...
SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2024:4359-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4359-1 advisory. - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certa...
openSUSE Security Advisory (SUSE-SU-2024:4359-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:4359-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2024-0391)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
curl: OS Command Injection (subprocess Module Usage)
Summary The Bandit tool flagged the usage of the subprocessmodule in the file curl.pyunder the B404:blacklist rule. This rule highlights potential security risks associated with using the subprocess module without proper sanitization of inputs, which can lead to command injection vulnerabilities...
MGASA-2024-0391 Updated curl packages fix security vulnerability
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
Updated curl packages fix security vulnerability
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
Security update for curl
This update for curl fixes the following issues: CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...
SUSE-SU-2024:4359-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : curl vulnerability (USN-7162-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7162-1 advisory. Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain...
Ubuntu: Security Advisory (USN-7162-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7162-1 curl vulnerability
Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations...
USN-7162-1: curl vulnerability
Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations...
The vulnerability of the cURL command-line utility’s netrc-file handlers allows a hacker to gain access to user credentials.
The vulnerability of the cURL command-line utility’s netrc-file handlers is related to insufficient protection of operational data. Exploiting this vulnerability can allow a remote attacker to gain access to credentials, provided that the HTTP redirection leads to another resource...
SUSE SLES12 Security Update : curl (SUSE-SU-2024:4284-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4284-1 advisory. - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances bsc1234068 Tenable has...
MAL-2024-11821 Malicious code in pipedream-curl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in pipedream-curl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...