15 matches found
CVE-2023-23916
An allocation of resources without limits or throttling vulnerability exists in curl
CVE-2023-23914
A cleartext transmission of sensitive information vulnerability exists in curl
CVE-2023-23915
A cleartext transmission of sensitive information vulnerability exists in curl
CVE-2023-36054
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_da...
CVE-2023-28322
An information disclosure vulnerability exists in curl
CVE-2023-28321
An improper certificate validation vulnerability exists in curl
CVE-2023-2953
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
CVE-2023-28319
A use after free vulnerability exists in curl
CVE-2023-27533
A vulnerability in input validation exists in curl
CVE-2023-27538
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent ...
CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
CVE-2023-28320
A denial of service vulnerability exists in curl
CVE-2023-27537
A double free vulnerability exists in libcurl
CVE-2023-27314
ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8,9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allowa remote unauthenticated attacker to cause a crash of the HTTP service.
CVE-2023-3107
A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.