2 matches found
OESA-2024-2473 curl security update
cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later th...
5.9CVSS7AI score0.01987EPSS
SaveExploits1References2
AZL-52449 CVE-2024-9681 affecting package tensorflow for versions less than 2.16.1-7
When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...
6.5CVSS6.7AI score0.01987EPSS
SaveExploits1References1
20