ROS-20230417-05

A vulnerability in the curl program is related to a problem when processing multiple queries resulting in the ignoring HSTS support. Exploitation of the vulnerability could allow an attacker acting remotely, to cause HSTS functionality to fail by sequentially requesting multiple URLs...

GDidees CMS 3.9.1 Local File Disclosure / Directory Traversal

Exploit Title: GDidees CMS - 'imgdownload.php' Local File Disclosure Date : 03/27/2023 Exploit Author : Hadi Mene Vendor Homepage : https://www.gdidees.eu/ Software Link : https://www.gdidees.eu/cms-1-0.html Version : 3.9.1 and earlier Tested on : Debian 11 CVE : CVE-2023-27179 Summary: GDidees C...

curl Tilde Path Traversal

The vulnerability of the curl command-line utility is related to the incorrect replacement of the tilde symbol when it is used as a prefix in the first element of a path. This occurs in addition to its supposed use as the first element for specifying a path relative to the user’s home directory...

libcurl FTP Reuse Credential Exposure

The vulnerability of the libcurl library is related to the repeated use of FTP connections. Exploiting this vulnerability could allow a malicious actor, operating remotely, to use incorrect credentials during transmission, potentially leading to the exposure of protected information...

CVE-2023-27538 affecting package curl for versions less than 8.0.1-1

CVE-2023-27538 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27535 affecting package curl for versions less than 8.0.1-1

CVE-2023-27535 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27536 affecting package curl for versions less than 8.0.1-1

CVE-2023-27536 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27534 affecting package curl for versions less than 8.0.1-1

CVE-2023-27534 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27533 affecting package curl for versions less than 8.0.1-1

CVE-2023-27533 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CLSA-2023-1681491763 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

Security Bulletin: Vulnerability in cURL affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-1000254)

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following in cURL. Vulnerability Details Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following in cURL. Vulnerability...

Security Bulletin: Vulnerability in cURL affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-1000100)

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerability in cURL. Vulnerability Details Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilit...

Security Bulletin: Vulnerabilities in curl affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2016-9586, CVE-2017-7407)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in curl. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in curl. Vulnerability Details CVEID: CVE-2016-9586 Description:...

Security Bulletin: Vulnerabilities in cURL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the following vulnerabilities in cURL. Vulnerability Details Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru and QLogic Virtual Fabric...

Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)

Summary Multiple vulnerabilities affect IBM's Advance Management Module AMM. Vulnerability Details Abstract Multiple vulnerabilities affect IBM's Advance Management Module AMM. Content Vulnerability Details: CVE-ID: CVE-2014-2653 Description: OpenSSH could allow a remote attacker to bypass securi...

Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in cURL. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in cURL. Vulnerability Details CVEID: CVE-2017-1000100 Description: cURL...

Security Bulletin: Vulnerabilities in cURL affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilities in cURL. Vulnerability Details Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following...

Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in cURL. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in cURL. Vulnerability Details CVEID: CVE-2017-1000254 Description:...

Security Bulletin: Vulnerabilities in curl affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems

Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following vulnerabilities in curl. Vulnerability Details Summary IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter Systems has addressed the following...

ROS-20230414-04

The curl program vulnerability is related to a memory usage error after release when processing rejected requests from HTTP proxy using SMB or TELNET protocols. Exploitation of the vulnerability could allow an attacker acting remotely to cause a post-release memory usage error and cause the...