10904 matches found
EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2022-1396)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgra...
EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-1370)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgra...
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
The plugin fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability. 1. Create a new page with the plugin's shortcode shortcode can be copied from...
RHEL 7 : rh-dotnet31-curl (RHSA-2022:1354)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1354 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols
A flaw was found in curl. This flaw lies in the --ssl-reqd option or related settings in libcurl. Users specify this flag to upgrade to TLS when communicating with either IMAP, POP3 or a FTP server. An attacker controlling such servers could return a crafted response which could lead to curl clie...
curl: Leak of authentication credentials in URL via automatic Referer
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected...
curl: Server responses received before STARTTLS processed after TLS handshake
A flaw was found in curl. The flaw lies in how curl handles cached or pipelined responses that it receives from either a IMAP, POP3, SMTP or FTP server before the TLS upgrade using STARTTLS. In such a scenario curl even after upgrading to TLS would trust these cached responses treating them as...
Moderate: Red Hat Security Advisory: rh-dotnet31-curl security update
An update for rh-dotnet31-curl is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-1370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data, allowing attackers to access confidential information.
The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-1396)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
The plugin does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection curl 'http://example.com/?restroute=/olistener/new' --data '"id":" SELECT SLEEP3"' -H 'content-type: application/json'...
Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update
The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as the userscanregister and defaultrole,...
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22947 affecting package curl for versions less than 7.82.0-1
CVE-2021-22947 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22898 affecting package curl for versions less than 7.76.0-5
CVE-2021-22898 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22922 affecting package curl for versions less than 7.76.0-5
CVE-2021-22922 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...