Lucene search
+L

10852 matches found

BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.8 views

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the curl package up to version 7.15.0 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

7.5CVSS5.4AI score0.05188EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.17 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the curl package up to version 7.34.0-r1 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS6.4AI score0.21643EPSS
SaveExploits9References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/04/28 12:00 a.m.59 views

Fedora 20 : php-5.5.24-1.fc20 (2015-6399)

16 Apr 2015, PHP 5.5.24 Apache2handler : - Fixed bug 69218 potential remote code execution with apache 2.4 apache2handler. Gerrit Venema Core : - Fixed bug 66609 php crashes with get and ++ operator in some cases. Dmitry, Laruence - Fixed bug 67626 User exceptions not properly handled in streams...

7.5CVSS7.8AI score0.38434EPSS
SaveExploits4References13
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.12 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality and integrity of protected information

Multiple vulnerabilities exist in the curl package up to version 7.36.0 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

6.4CVSS6.7AI score0.0508EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.14 views

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the curl package up to version 7.19.4 in the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS6.6AI score0.0905EPSS
SaveExploits3References3Affected Software1
CNVD
CNVD
added 2015/04/27 12:00 a.m.6 views

cURL and libcurl Denial of Service Vulnerabilities (CNVD-2015-02754)

CURL is a set of file transfer tools that utilize URL syntax to work at the command line.Libcurl is a free, open source client-side URL transfer library. A security vulnerability exists in the 'fixhostname' function in cURL and libcurl versions 7.37.0 through 7.41.0, which stems from the program'...

9CVSS7AI score0.10951EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/27 12:00 a.m.7 views

cURL and libcurl Denial of Service Vulnerabilities (CNVD-2015-02753)

CURL is a set of file transfer tools that utilize URL syntax to work at the command line.Libcurl is a free, open source client-side URL transfer library. A security vulnerability exists in the 'sanitizecookiepath' function in Haxx cURL and libcurl versions 7.31.0 through 7.41.0, which stems from...

7.5CVSS7AI score0.37411EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/27 12:00 a.m.5 views

cURL and libcurl Unauthorized Operation Vulnerability

CURL is a set of file transfer tools that utilize URL syntax to work at the command line.Libcurl is a free, open source client-side URL transfer library. A security vulnerability exists in cURL and libcurl versions 7.10.6 through 7.41.0 that stems from the program failing to properly reuse NTLM...

5CVSS7AI score0.12774EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/27 12:00 a.m.36 views

Fedora 22 : curl-7.40.0-3.fc22 (2015-6695)

require credentials to match for NTLM re-use CVE-2015-3143 - fix invalid write with a zero-length host name in URL CVE-2015-3144 - fix invalid write in cookie path sanitization code CVE-2015-3145 - close Negotiate connections when done CVE-2015-3148 Note that Tenable Network Security has...

9CVSS7.5AI score0.37411EPSS
SaveExploits0References9
CNVD
CNVD
added 2015/04/27 12:00 a.m.8 views

Unspecified Vulnerability in cURL and libcurl

CURL is a set of file transfer tools that utilize URL syntax to work at the command line.Libcurl is a free, open source client-side URL transfer library. A security vulnerability exists in cURL and libcurl versions 7.10.6 through 7.41.0 that stems from the program failing to properly reuse an...

5CVSS7AI score0.1415EPSS
SaveExploits0References1
Fedora
Fedora
added 2015/04/26 12:43 p.m.41 views

[SECURITY] Fedora 22 Update: curl-7.40.0-3.fc22

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9CVSS0.37411EPSS
SaveExploits0
OSV
OSV
added 2015/04/24 2:59 p.m.4 views

DEBIAN-CVE-2015-3148

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request...

5CVSS6.9AI score0.1415EPSS
SaveExploits0References1
OSV
OSV
added 2015/04/24 2:59 p.m.13 views

CVE-2015-3148

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request...

5CVSS9.2AI score0.1415EPSS
SaveExploits0References24
NVD
NVD
added 2015/04/24 2:59 p.m.27 views

CVE-2015-3148

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request...

5CVSS9.2AI score0.1415EPSS
SaveExploits0References23
NVD
NVD
added 2015/04/24 2:59 p.m.27 views

CVE-2015-3145

The sanitizecookiepath function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly have other unspecified impact via a cookie path containing only a double-quote...

7.5CVSS9.5AI score0.37411EPSS
SaveExploits0References20
OSV
OSV
added 2015/04/24 2:59 p.m.15 views

CVE-2015-3145

The sanitizecookiepath function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly have other unspecified impact via a cookie path containing only a double-quote...

7.5CVSS6.9AI score0.37411EPSS
SaveExploits0References20
OSV
OSV
added 2015/04/24 2:59 p.m.8 views

DEBIAN-CVE-2015-3145

The sanitizecookiepath function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly have other unspecified impact via a cookie path containing only a double-quote...

7.5CVSS7.4AI score0.37411EPSS
SaveExploits0References1
OSV
OSV
added 2015/04/24 2:59 p.m.6 views

DEBIAN-CVE-2015-3144

The fixhostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds read or write and crash or possibly have other unspecified impact via a zero-length host name, as demonstrated by...

9CVSS7.3AI score0.10951EPSS
SaveExploits0References1
OSV
OSV
added 2015/04/24 2:59 p.m.12 views

CVE-2015-3144

The fixhostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds read or write and crash or possibly have other unspecified impact via a zero-length host name, as demonstrated by...

9CVSS6.9AI score0.10951EPSS
SaveExploits0References17
NVD
NVD
added 2015/04/24 2:59 p.m.26 views

CVE-2015-3144

The fixhostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service out-of-bounds read or write and crash or possibly have other unspecified impact via a zero-length host name, as demonstrated by...

9CVSS6.9AI score0.10951EPSS
SaveExploits0References17
Rows per page
Query Builder