10718 matches found
CVE-2023-32001
A flaw was found in the curl package. This race condition modifies the behavior of symbolic link files in affected components which might be followed instead of overwritten when the condition is met, leading to undesired and potentially destructive behavior...
SUSE-SU-2023:2880-1 Security update for curl
This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition bsc1213237...
Ubuntu 22.04 LTS : curl regression (USN-6237-2)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6237-2 advisory. USN-6237-1 fixed vulnerabilities in curl. The update caused a certificate wildcard handling regression on Ubuntu 22.04 LTS. This update fixes the problem. We...
Important Photon OS Security Update - PHSA-2023-5.0-0054
Updates of 'gdk-pixbuf', 'perl', 'curl' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2023-4.0-0432
Updates of 'curl' packages of Photon OS have been released...
Online Piggery Management System v1.0 - unauthenticated file upload Vulnerability
!/bin/bash Exploit Title: Online Piggery Management System v1.0 - unauthenticated file upload vulnerability Exploit Author: 1337kid Software Link: https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version.html Version: 1.0 Tested on: Ubuntu CVE : CVE-2023-37629 chmo...
Important Photon OS Security Update - PHSA-2023-5.0-91-0054
Updates of 'gdk-pixbuf', 'curl', 'perl' packages of Photon OS have been released...
Ubuntu 20.04 LTS / 22.04 LTS / 22.10 / 23.04 : curl vulnerabilities (USN-6237-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 22.10 / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6237-1 advisory. - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
curl: POST following PUT confusion
A vulnerability was found in curl. The issue occurs when doing HTTPS transfers, where curl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set if it previously used the same handle to issue a PUT request which us...
curl: HTTP multi-header compression denial of service
A flaw was found in the Curl package. A malicious server can insert an unlimited number of compression steps. This decompression chain could result in out-of-memory errors...
RHEL 9 : curl (RHSA-2023:4139)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4139 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...
EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-2350)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when listed as 'Subjec...
curl: CVE-2023-38039: HTTP header allocation DOS
A vulnerability was discovered in curl that allowed an attacker to cause a denial-of-service DOS condition on a user's system. By setting up a malicious HTTP server and continuously sending new headers, the attacker could exhaust system resources, leading to system instability or crash. The issue...
PT-2023-5211 · Curl +6 · Curl +6
Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.4.0 Description: The issue is related to the handling of HTTP headers by the curl utility. When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl header...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2350)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2376)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0049
Updates of 'redis', 'kubernetes', 'calico', 'curl', 'podman', 'flannel' packages of Photon OS have been released...