daniel stenberg records
6 published records for vendor daniel stenberg.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
45Plan | CVE-2000-0973Proof of concept | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fodaniel stenberg · curl | Critical10.0 | — | 18.0% | Dec 19, 2000 |
42Plan | CVE-2002-1868Proof of concept | Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.daniel stenberg · dispair | Critical10.0 | — | 5.4% | Dec 31, 2002 |
32Monitor | CVE-2006-1061No exploit | Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tdaniel stenberg · curl | High7.5 | — | 5.2% | Mar 20, 2006 |
30Monitor | CVE-2007-3152No exploit | c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attacdaniel stenberg · c-ares | High7.5 | — | 1.4% | Jun 11, 2007 |
20Monitor | CVE-2007-3153No exploit | The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequencedaniel stenberg · c-ares | Medium5.0 | — | 1.1% | Jun 11, 2007 |
18Monitor | CVE-2005-4077No exploit | Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a dedaniel stenberg · curl · CWE-189 | Medium4.6 | — | 0.5% | Dec 7, 2005 |
- CVE-2000-097345Plan
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo
CriticalCVSS 10.0Proof of conceptEPSS 18%daniel stenberg · curlDec 19, 2000
- CVE-2002-186842Plan
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
CriticalCVSS 10.0Proof of conceptEPSS 5%daniel stenberg · dispairDec 31, 2002
- CVE-2006-106132Monitor
Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (t
HighCVSS 7.5No exploitEPSS 5%daniel stenberg · curlMar 20, 2006
- CVE-2007-315230Monitor
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attac
HighCVSS 7.5No exploitEPSS 1%daniel stenberg · c-aresJun 11, 2007
- CVE-2007-315320Monitor
The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence
MediumCVSS 5.0No exploitEPSS 1%daniel stenberg · c-aresJun 11, 2007
- CVE-2005-407718Monitor
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a de
MediumCVSS 4.6No exploitEPSS 0%daniel stenberg · curlDec 7, 2005