daniel stenberg kayıtları
daniel stenberg üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %33,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Saldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2000-0973Kavram kanıtı | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fodaniel stenberg · curl | Kritik10,0 | — | %18,1 | 19 Ara 2000 |
42Planlayın | CVE-2002-1868Kavram kanıtı | Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.daniel stenberg · dispair | Kritik10,0 | — | %5,4 | 31 Ara 2002 |
32İzleyin | CVE-2006-1061İstismar yok | Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tdaniel stenberg · curl | Yüksek7,5 | — | %5,3 | 20 Mar 2006 |
30İzleyin | CVE-2007-3152İstismar yok | c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attacdaniel stenberg · c-ares | Yüksek7,5 | — | %1,4 | 11 Haz 2007 |
20İzleyin | CVE-2007-3153İstismar yok | The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequencedaniel stenberg · c-ares | Orta5,0 | — | %1,2 | 11 Haz 2007 |
18İzleyin | CVE-2005-4077İstismar yok | Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a dedaniel stenberg · curl · CWE-189 | Orta4,6 | — | %0,5 | 7 Ara 2005 |
- CVE-2000-097345Planlayın
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo
KritikCVSS 10,0Kavram kanıtıEPSS %18daniel stenberg · curl19 Ara 2000
- CVE-2002-186842Planlayın
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
KritikCVSS 10,0Kavram kanıtıEPSS %5daniel stenberg · dispair31 Ara 2002
- CVE-2006-106132İzleyin
Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (t
YüksekCVSS 7,5İstismar yokEPSS %5daniel stenberg · curl20 Mar 2006
- CVE-2007-315230İzleyin
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attac
YüksekCVSS 7,5İstismar yokEPSS %1daniel stenberg · c-ares11 Haz 2007
- CVE-2007-315320İzleyin
The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence
OrtaCVSS 5,0İstismar yokEPSS %1daniel stenberg · c-ares11 Haz 2007
- CVE-2005-407718İzleyin
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a de
OrtaCVSS 4,6İstismar yokEPSS %1daniel stenberg · curl7 Ara 2005