Lucene search
K

5 matches found

OSV
OSV
added 2023/10/18 4:15 a.m.4 views

AZL-31502 CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

3.7CVSS6.8AI score0.06208EPSS
Exploits0References1
NVD
NVD
added 2023/10/18 4:15 a.m.21 views

CVE-2023-38546

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

3.7CVSS7.1AI score0.06208EPSS
Exploits0References15
OSV
OSV
added 2023/10/11 6:0 a.m.1 views

UBUNTU-CVE-2023-38546

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

3.7CVSS6.6AI score0.06208EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.2 views

SUSE CVE-2022-27779

libcurl wrongly allows cookies to be set for Top Level Domains TLDs if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without Public Suffix Listawareness. If PSL support not provided, a more rudimentary check...

6.5CVSS8.6AI score0.02414EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2022/06/01 12:0 a.m.50 views

CVE-2022-27779

libcurl wrongly allows cookies to be set for Top Level Domains TLDs if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without Public Suffix Listawareness. If PSL support not provided, a more rudimentary check...

5.3CVSS6.5AI score0.02414EPSS
Exploits1
Rows per page
Query Builder