İçeriğe atla
Noroxi

haxx kayıtları

haxx üreticisine ait 209 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %0,5
Pre-auth RCE
5
Düzeltme kaydı olan
%96,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

209 kayıt
  • CVE-2023-38545
    63Bu hafta

    This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    haxx · libcurl18 Eki 2023

  • CVE-2021-22901
    51Planlayın

    curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session t

    YüksekCVSS 8,1İstismar yokEPSS %63

    haxx · curl11 Haz 2021

  • CVE-2023-38039
    47Planlayın

    When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API.

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    haxx · curl15 Eyl 2023

  • CVE-2019-5436
    46Planlayın

    A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

    YüksekCVSS 7,8İstismar yokEPSS %49

    haxx · libcurl28 May 2019

  • CVE-2024-2398
    45Planlayın

    HTTP/2 push headers memory-leak

    YüksekCVSS 8,6İstismar yokEPSS %36

    haxx · curl27 Mar 2024

  • CVE-2019-5482
    44Planlayın

    Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

    KritikCVSS 9,8İstismar yokEPSS %17

    haxx · curl16 Eyl 2019

  • CVE-2019-3822
    43Planlayın

    libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow.

    KritikCVSS 9,8İstismar yokEPSS %12

    haxx · libcurl6 Şub 2019

  • CVE-2022-32207
    43Planlayın

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren

    KritikCVSS 9,8İstismar yokEPSS %12

    haxx · curl7 Tem 2022

  • CVE-2016-7167
    43Planlayın

    Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl

    KritikCVSS 9,8İstismar yokEPSS %11

    fedoraproject · fedora7 Eki 2016

  • CVE-2018-1000120
    42Planlayın

    A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of se

    KritikCVSS 9,8İstismar yokEPSS %11

    debian · debian linux14 Mar 2018

  • CVE-2017-8817
    42Planlayın

    The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and app

    KritikCVSS 9,8İstismar yokEPSS %11

    haxx · curl29 Kas 2017

  • CVE-2018-14618
    42Planlayın

    curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code.

    KritikCVSS 9,8İstismar yokEPSS %11

    haxx · libcurl5 Eyl 2018

  • CVE-2018-1000007
    42Planlayın

    libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties.

    KritikCVSS 9,8İstismar yokEPSS %9

    haxx · curl24 Oca 2018

  • CVE-2017-8816
    42Planlayın

    The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer

    KritikCVSS 9,8İstismar yokEPSS %8

    haxx · curl29 Kas 2017

  • CVE-2019-5481
    41Planlayın

    Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

    KritikCVSS 9,8İstismar yokEPSS %7

    haxx · curl16 Eyl 2019

  • CVE-2018-0500
    41Planlayın

    Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by

    KritikCVSS 9,8İstismar yokEPSS %6

    haxx · curl11 Tem 2018

  • CVE-2018-16839
    41Planlayın

    Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.

    KritikCVSS 9,8İstismar yokEPSS %5

    haxx · curl31 Eki 2018

  • CVE-2022-32221
    41Planlayın

    When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when th

    KritikCVSS 9,8İstismar yokEPSS %5

    haxx · curl5 Ara 2022

  • CVE-2011-3389
    40Planlayın

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op

    OrtaCVSS 4,3SilahlaştırılmışEPSS %73

    google · chrome6 Eyl 2011

  • CVE-2016-8619
    40Planlayın

    The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

    KritikCVSS 9,8İstismar yokEPSS %4

    haxx · curl1 Ağu 2018

  • CVE-2016-8622
    40Planlayın

    The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`.

    KritikCVSS 9,8İstismar yokEPSS %4

    haxx · libcurl31 Tem 2018

  • CVE-2016-8620
    40Planlayın

    The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled in

    KritikCVSS 9,8İstismar yokEPSS %4

    haxx · curl1 Ağu 2018

  • CVE-2018-1000300
    40Planlayın

    curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and

    KritikCVSS 9,8İstismar yokEPSS %4

    haxx · curl24 May 2018

  • CVE-2016-8618
    40Planlayın

    The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` mu

    KritikCVSS 9,8İstismar yokEPSS %4

    haxx · curl31 Tem 2018

  • CVE-2017-2628
    40Planlayın

    curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did

    KritikCVSS 9,8İstismar yokEPSS %3

    haxx · curl12 Mar 2018