Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:generic/curl.se/curl@7.13.2
Typegeneric
Namespacecurl.se
Namecurl
Version7.13.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version8.20.0
Latest_non_vulnerable_version8.20.0
Affected_by_vulnerabilities
0
url VCID-1a1k-d4ez-ybdu
vulnerability_id VCID-1a1k-d4ez-ybdu
summary When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52551
published_at 2026-06-04T12:55:00Z
1
value 0.00289
scoring_system epss
scoring_elements 0.52573
published_at 2026-06-08T12:55:00Z
2
value 0.00289
scoring_system epss
scoring_elements 0.52611
published_at 2026-06-05T12:55:00Z
3
value 0.00289
scoring_system epss
scoring_elements 0.52618
published_at 2026-06-06T12:55:00Z
4
value 0.00289
scoring_system epss
scoring_elements 0.526
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
2
reference_url https://curl.se/docs/CVE-2022-35252.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-35252.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1613943
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://hackerone.com/reports/1613943
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
reference_id 1018831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/21
reference_id 21
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/21
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
reference_id 2120718
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
10
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.gentoo.org/glsa/202212-01
11
reference_url https://support.apple.com/kb/HT213603
reference_id HT213603
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213603
12
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213604
13
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
14
reference_url https://security.netapp.com/advisory/ntap-20220930-0005/
reference_id ntap-20220930-0005
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.netapp.com/advisory/ntap-20220930-0005/
15
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
16
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
17
reference_url https://access.redhat.com/errata/RHSA-2023:2478
reference_id RHSA-2023:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2478
18
reference_url https://access.redhat.com/errata/RHSA-2023:2963
reference_id RHSA-2023:2963
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2963
19
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
20
reference_url https://usn.ubuntu.com/5587-1/
reference_id USN-5587-1
reference_type
scores
url https://usn.ubuntu.com/5587-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.85.0
purl pkg:generic/curl.se/curl@7.85.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-287k-bzqy-n7ag
4
vulnerability VCID-39qh-jayw-g3dh
5
vulnerability VCID-3p2z-61gq-muhs
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6en5-etsd-2bce
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-7wqd-99h2-e7hk
10
vulnerability VCID-85qb-zec7-subc
11
vulnerability VCID-a8z6-bswu-jue8
12
vulnerability VCID-azcz-b8f2-63be
13
vulnerability VCID-bcuq-n4vb-k7f3
14
vulnerability VCID-bx2m-n5ft-3be8
15
vulnerability VCID-cdzf-3ydt-8bdk
16
vulnerability VCID-cfry-nx5h-kudv
17
vulnerability VCID-f9nm-d5ax-qkcb
18
vulnerability VCID-fcb7-8163-muf4
19
vulnerability VCID-ffmg-djmk-57hn
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k3nv-gf9b-5ua2
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kq38-7s5x-nqaz
29
vulnerability VCID-mpuf-pp6z-q3d6
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-u1p8-s8vm-3yer
39
vulnerability VCID-v82t-s9e1-2fbw
40
vulnerability VCID-w472-84ep-fkdx
41
vulnerability VCID-w8ff-vxga-8qcz
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-y41p-tgpa-m7cs
45
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.85.0
aliases CVE-2022-35252
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1a1k-d4ez-ybdu
1
url VCID-1b5g-9trz-7ufb
vulnerability_id VCID-1b5g-9trz-7ufb
summary curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
reference_id
reference_type
scores
0
value 0.01009
scoring_system epss
scoring_elements 0.77467
published_at 2026-06-06T12:55:00Z
1
value 0.01009
scoring_system epss
scoring_elements 0.77458
published_at 2026-06-07T12:55:00Z
2
value 0.01009
scoring_system epss
scoring_elements 0.77447
published_at 2026-06-08T12:55:00Z
3
value 0.01009
scoring_system epss
scoring_elements 0.7743
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
2
reference_url https://curl.se/docs/CVE-2016-9586.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-9586.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.2
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:N/I:N/A:P
1
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1037515
reference_id 1037515
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securitytracker.com/id/1037515
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406712
reference_id 1406712
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406712
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
reference_id 848958
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
8
reference_url http://www.securityfocus.com/bid/95019
reference_id 95019
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securityfocus.com/bid/95019
9
reference_url https://curl.haxx.se/docs/adv_20161221A.html
reference_id adv_20161221A.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://curl.haxx.se/docs/adv_20161221A.html
10
reference_url https://security.archlinux.org/ASA-201612-22
reference_id ASA-201612-22
reference_type
scores
url https://security.archlinux.org/ASA-201612-22
11
reference_url https://security.archlinux.org/ASA-201701-10
reference_id ASA-201701-10
reference_type
scores
url https://security.archlinux.org/ASA-201701-10
12
reference_url https://security.archlinux.org/ASA-201701-11
reference_id ASA-201701-11
reference_type
scores
url https://security.archlinux.org/ASA-201701-11
13
reference_url https://security.archlinux.org/ASA-201701-7
reference_id ASA-201701-7
reference_type
scores
url https://security.archlinux.org/ASA-201701-7
14
reference_url https://security.archlinux.org/ASA-201701-8
reference_id ASA-201701-8
reference_type
scores
url https://security.archlinux.org/ASA-201701-8
15
reference_url https://security.archlinux.org/ASA-201701-9
reference_id ASA-201701-9
reference_type
scores
url https://security.archlinux.org/ASA-201701-9
16
reference_url https://security.archlinux.org/AVG-112
reference_id AVG-112
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-112
17
reference_url https://security.archlinux.org/AVG-113
reference_id AVG-113
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-113
18
reference_url https://security.archlinux.org/AVG-114
reference_id AVG-114
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-114
19
reference_url https://security.archlinux.org/AVG-115
reference_id AVG-115
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-115
20
reference_url https://security.archlinux.org/AVG-116
reference_id AVG-116
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-116
21
reference_url https://security.archlinux.org/AVG-117
reference_id AVG-117
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-117
22
reference_url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
reference_id curl-7_51_0-162-g3ab3c16
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
23
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://security.gentoo.org/glsa/201701-47
24
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
25
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
26
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
reference_id show_bug.cgi?id=CVE-2016-9586
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
28
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
29
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.52.0
purl pkg:generic/curl.se/curl@7.52.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-53st-1j3z-h7by
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jnq1-hk6d-b3a3
42
vulnerability VCID-k79t-tesa-jfck
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-uj78-2cgz-zbdb
63
vulnerability VCID-vpkr-9akj-hbf6
64
vulnerability VCID-w472-84ep-fkdx
65
vulnerability VCID-w63e-dku9-mqe9
66
vulnerability VCID-w8ff-vxga-8qcz
67
vulnerability VCID-wmam-qmmg-6uay
68
vulnerability VCID-xgj8-zrta-kub9
69
vulnerability VCID-y41p-tgpa-m7cs
70
vulnerability VCID-y44u-23he-aya8
71
vulnerability VCID-yjtj-ydsg-u7ca
72
vulnerability VCID-zg98-v6dj-s7gv
73
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.52.0
aliases CVE-2016-9586
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1b5g-9trz-7ufb
2
url VCID-1dw3-33ju-jkbs
vulnerability_id VCID-1dw3-33ju-jkbs
summary When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0725.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0725.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-0725
reference_id
reference_type
scores
0
value 0.006
scoring_system epss
scoring_elements 0.69853
published_at 2026-06-08T12:55:00Z
1
value 0.006
scoring_system epss
scoring_elements 0.69865
published_at 2026-06-05T12:55:00Z
2
value 0.006
scoring_system epss
scoring_elements 0.69874
published_at 2026-06-06T12:55:00Z
3
value 0.006
scoring_system epss
scoring_elements 0.69864
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-0725
2
reference_url https://curl.se/docs/CVE-2025-0725.html
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://curl.se/docs/CVE-2025-0725.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2956023
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://hackerone.com/reports/2956023
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343899
reference_id 2343899
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343899
7
reference_url https://curl.se/docs/CVE-2025-0725.json
reference_id CVE-2025-0725.json
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://curl.se/docs/CVE-2025-0725.json
fixed_packages
0
url pkg:generic/curl.se/curl@8.12.0
purl pkg:generic/curl.se/curl@8.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ff-tazv-9ud3
1
vulnerability VCID-39qh-jayw-g3dh
2
vulnerability VCID-5un8-xymy-37bt
3
vulnerability VCID-7wqd-99h2-e7hk
4
vulnerability VCID-bcuq-n4vb-k7f3
5
vulnerability VCID-bp56-gy66-mqae
6
vulnerability VCID-ezve-gc2h-qyga
7
vulnerability VCID-f9nm-d5ax-qkcb
8
vulnerability VCID-fcb7-8163-muf4
9
vulnerability VCID-g7ux-4vz2-ckfg
10
vulnerability VCID-gux4-dncg-h7a6
11
vulnerability VCID-hhms-2hg6-nke9
12
vulnerability VCID-ns6z-wp2x-fkdq
13
vulnerability VCID-p155-gbtu-abg1
14
vulnerability VCID-secz-78pt-dben
15
vulnerability VCID-t45k-skv6-cfg2
16
vulnerability VCID-v82t-s9e1-2fbw
17
vulnerability VCID-w8ff-vxga-8qcz
18
vulnerability VCID-wgur-psum-pbck
19
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.12.0
aliases CVE-2025-0725
risk_score 2.9
exploitability 0.5
weighted_severity 5.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1dw3-33ju-jkbs
3
url VCID-39qh-jayw-g3dh
vulnerability_id VCID-39qh-jayw-g3dh
summary curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1965.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1965.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-1965
reference_id
reference_type
scores
0
value 0.00073
scoring_system epss
scoring_elements 0.2213
published_at 2026-06-08T12:55:00Z
1
value 0.00073
scoring_system epss
scoring_elements 0.22244
published_at 2026-06-05T12:55:00Z
2
value 0.00073
scoring_system epss
scoring_elements 0.22231
published_at 2026-06-06T12:55:00Z
3
value 0.00073
scoring_system epss
scoring_elements 0.22184
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-1965
2
reference_url https://curl.se/docs/CVE-2026-1965.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:31:56Z/
url https://curl.se/docs/CVE-2026-1965.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2446448
reference_id 2446448
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2446448
6
reference_url https://curl.se/docs/CVE-2026-1965.json
reference_id CVE-2026-1965.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:31:56Z/
url https://curl.se/docs/CVE-2026-1965.json
7
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
8
reference_url https://usn.ubuntu.com/8084-1/
reference_id USN-8084-1
reference_type
scores
url https://usn.ubuntu.com/8084-1/
9
reference_url https://usn.ubuntu.com/8099-1/
reference_id USN-8099-1
reference_type
scores
url https://usn.ubuntu.com/8099-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.19.0
purl pkg:generic/curl.se/curl@8.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5un8-xymy-37bt
1
vulnerability VCID-9vbs-w124-q3au
2
vulnerability VCID-bcuq-n4vb-k7f3
3
vulnerability VCID-f9nm-d5ax-qkcb
4
vulnerability VCID-g7ux-4vz2-ckfg
5
vulnerability VCID-secz-78pt-dben
6
vulnerability VCID-w8ff-vxga-8qcz
7
vulnerability VCID-wgur-psum-pbck
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0
aliases CVE-2026-1965
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-39qh-jayw-g3dh
4
url VCID-5xjw-u8ad-n3g5
vulnerability_id VCID-5xjw-u8ad-n3g5
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
reference_id
reference_type
scores
0
value 0.04182
scoring_system epss
scoring_elements 0.88914
published_at 2026-06-08T12:55:00Z
1
value 0.04182
scoring_system epss
scoring_elements 0.88915
published_at 2026-06-06T12:55:00Z
2
value 0.04293
scoring_system epss
scoring_elements 0.89048
published_at 2026-06-04T12:55:00Z
3
value 0.04293
scoring_system epss
scoring_elements 0.89065
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
2
reference_url https://curl.se/docs/CVE-2016-8615.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8615.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388370
reference_id 1388370
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388370
16
reference_url http://www.securityfocus.com/bid/94096
reference_id 94096
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securityfocus.com/bid/94096
17
reference_url https://curl.haxx.se/docs/adv_20161102A.html
reference_id adv_20161102A.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/docs/adv_20161102A.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8615.patch
reference_id CVE-2016-8615.patch
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/CVE-2016-8615.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
reference_id show_bug.cgi?id=CVE-2016-8615
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8615
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5xjw-u8ad-n3g5
5
url VCID-64mt-9155-tkbv
vulnerability_id VCID-64mt-9155-tkbv
summary The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3389
reference_id
reference_type
scores
0
value 0.03832
scoring_system epss
scoring_elements 0.88361
published_at 2026-06-04T12:55:00Z
1
value 0.03832
scoring_system epss
scoring_elements 0.88379
published_at 2026-06-05T12:55:00Z
2
value 0.03832
scoring_system epss
scoring_elements 0.88382
published_at 2026-06-06T12:55:00Z
3
value 0.03832
scoring_system epss
scoring_elements 0.88381
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3389
2
reference_url https://curl.se/docs/CVE-2011-3389.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2011-3389.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737506
reference_id 737506
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=737506
6
reference_url https://security.gentoo.org/glsa/201111-02
reference_id GLSA-201111-02
reference_type
scores
url https://security.gentoo.org/glsa/201111-02
7
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
8
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
9
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
10
reference_url https://access.redhat.com/errata/RHSA-2011:1380
reference_id RHSA-2011:1380
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1380
11
reference_url https://access.redhat.com/errata/RHSA-2011:1384
reference_id RHSA-2011:1384
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1384
12
reference_url https://access.redhat.com/errata/RHSA-2012:0006
reference_id RHSA-2012:0006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0006
13
reference_url https://access.redhat.com/errata/RHSA-2012:0034
reference_id RHSA-2012:0034
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0034
14
reference_url https://access.redhat.com/errata/RHSA-2012:0343
reference_id RHSA-2012:0343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0343
15
reference_url https://access.redhat.com/errata/RHSA-2012:0508
reference_id RHSA-2012:0508
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0508
16
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
17
reference_url https://usn.ubuntu.com/1263-1/
reference_id USN-1263-1
reference_type
scores
url https://usn.ubuntu.com/1263-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.24.0
purl pkg:generic/curl.se/curl@7.24.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-39qh-jayw-g3dh
7
vulnerability VCID-3s4s-6c3v-7kgn
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5svr-3vv9-mqea
11
vulnerability VCID-5ujs-47hf-g7gj
12
vulnerability VCID-5xjw-u8ad-n3g5
13
vulnerability VCID-6745-tyba-33fa
14
vulnerability VCID-6fv7-7u2t-gfgb
15
vulnerability VCID-6rk4-vb5u-bkg6
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7jrx-ykk8-h3gp
18
vulnerability VCID-7wqd-99h2-e7hk
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-8j6v-xbhy-7uc2
21
vulnerability VCID-a58z-fu87-9ybs
22
vulnerability VCID-a8z6-bswu-jue8
23
vulnerability VCID-am31-t2h3-zbgw
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bcuq-n4vb-k7f3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cmcn-f8ws-q3h2
31
vulnerability VCID-dndt-tapy-23d2
32
vulnerability VCID-e4qf-7gqs-qyg3
33
vulnerability VCID-f276-amhj-9yfx
34
vulnerability VCID-f922-jx9w-mbc5
35
vulnerability VCID-f9nm-d5ax-qkcb
36
vulnerability VCID-fhc8-r8gv-bugj
37
vulnerability VCID-g4n9-kg3s-pfcr
38
vulnerability VCID-g72q-eedp-aufb
39
vulnerability VCID-g7ux-4vz2-ckfg
40
vulnerability VCID-gueb-wzpx-ufb2
41
vulnerability VCID-h6xj-mys4-pucf
42
vulnerability VCID-hhu3-dp3m-gbgm
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-msd2-35g9-nyd2
45
vulnerability VCID-naac-snjw-qbad
46
vulnerability VCID-nkmd-xb13-mbg9
47
vulnerability VCID-p8vk-yf66-wbb7
48
vulnerability VCID-p97a-kjpp-f3d8
49
vulnerability VCID-p9v4-nweu-vydg
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8ja-keyk-fyfb
52
vulnerability VCID-q8tg-prj1-y7b8
53
vulnerability VCID-q9ht-ra39-kuef
54
vulnerability VCID-qe9z-wuze-tucq
55
vulnerability VCID-r2g9-c896-rkge
56
vulnerability VCID-rfdp-gsgs-eubq
57
vulnerability VCID-rt5e-saz2-j7c9
58
vulnerability VCID-s2gu-8jpq-mub9
59
vulnerability VCID-secz-78pt-dben
60
vulnerability VCID-sesh-938m-x3f8
61
vulnerability VCID-snsg-c2up-b7cn
62
vulnerability VCID-sutv-qt2x-2yc7
63
vulnerability VCID-swmn-7ns9-ekg1
64
vulnerability VCID-tcxd-z7f3-kkes
65
vulnerability VCID-td39-d3tf-vkhc
66
vulnerability VCID-tn33-re3r-yfhw
67
vulnerability VCID-tyqp-e8cp-dbbm
68
vulnerability VCID-ugrr-z2zv-6qgp
69
vulnerability VCID-uh5a-zcds-3bcc
70
vulnerability VCID-vfc1-yy11-bycp
71
vulnerability VCID-vpkr-9akj-hbf6
72
vulnerability VCID-w472-84ep-fkdx
73
vulnerability VCID-w8ff-vxga-8qcz
74
vulnerability VCID-xgj8-zrta-kub9
75
vulnerability VCID-xyze-msxs-1qem
76
vulnerability VCID-y44u-23he-aya8
77
vulnerability VCID-zg98-v6dj-s7gv
78
vulnerability VCID-zqyj-7rr3-fqew
79
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.24.0
aliases CVE-2011-3389
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-64mt-9155-tkbv
6
url VCID-6fv7-7u2t-gfgb
vulnerability_id VCID-6fv7-7u2t-gfgb
summary cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0754
reference_id
reference_type
scores
0
value 0.00351
scoring_system epss
scoring_elements 0.57772
published_at 2026-06-04T12:55:00Z
1
value 0.00351
scoring_system epss
scoring_elements 0.57825
published_at 2026-06-05T12:55:00Z
2
value 0.00351
scoring_system epss
scoring_elements 0.57833
published_at 2026-06-06T12:55:00Z
3
value 0.00351
scoring_system epss
scoring_elements 0.57822
published_at 2026-06-07T12:55:00Z
4
value 0.00351
scoring_system epss
scoring_elements 0.57808
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0754
1
reference_url https://curl.se/docs/CVE-2016-0754.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-0754.html
fixed_packages
0
url pkg:generic/curl.se/curl@7.47.0
purl pkg:generic/curl.se/curl@7.47.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-58p5-pfy3-xug1
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5un8-xymy-37bt
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6rk4-vb5u-bkg6
23
vulnerability VCID-738z-myg9-37hr
24
vulnerability VCID-7jrx-ykk8-h3gp
25
vulnerability VCID-7wqd-99h2-e7hk
26
vulnerability VCID-7yvu-s3p2-sfhc
27
vulnerability VCID-a58z-fu87-9ybs
28
vulnerability VCID-a8z6-bswu-jue8
29
vulnerability VCID-am31-t2h3-zbgw
30
vulnerability VCID-av4f-gxku-qbhp
31
vulnerability VCID-azcz-b8f2-63be
32
vulnerability VCID-bb6v-z8yg-6fe3
33
vulnerability VCID-bcuq-n4vb-k7f3
34
vulnerability VCID-bx2m-n5ft-3be8
35
vulnerability VCID-cdzf-3ydt-8bdk
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-f7n8-zzhz-fuc8
38
vulnerability VCID-f8vu-23bb-5ue7
39
vulnerability VCID-f9nm-d5ax-qkcb
40
vulnerability VCID-fhc8-r8gv-bugj
41
vulnerability VCID-g4n9-kg3s-pfcr
42
vulnerability VCID-g7ux-4vz2-ckfg
43
vulnerability VCID-gud1-yg9u-zyfp
44
vulnerability VCID-gueb-wzpx-ufb2
45
vulnerability VCID-h6xj-mys4-pucf
46
vulnerability VCID-hhms-2hg6-nke9
47
vulnerability VCID-j688-cyfg-p7gu
48
vulnerability VCID-jf17-h97b-6bak
49
vulnerability VCID-jnq1-hk6d-b3a3
50
vulnerability VCID-kkrm-dj79-4ucj
51
vulnerability VCID-kq38-7s5x-nqaz
52
vulnerability VCID-mh96-gkf1-9uek
53
vulnerability VCID-mq44-5pmp-2qhh
54
vulnerability VCID-msd2-35g9-nyd2
55
vulnerability VCID-naac-snjw-qbad
56
vulnerability VCID-p8vk-yf66-wbb7
57
vulnerability VCID-p97a-kjpp-f3d8
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-rfdp-gsgs-eubq
65
vulnerability VCID-rt5e-saz2-j7c9
66
vulnerability VCID-s2gu-8jpq-mub9
67
vulnerability VCID-secz-78pt-dben
68
vulnerability VCID-sesh-938m-x3f8
69
vulnerability VCID-snsg-c2up-b7cn
70
vulnerability VCID-sutv-qt2x-2yc7
71
vulnerability VCID-swmn-7ns9-ekg1
72
vulnerability VCID-tcxd-z7f3-kkes
73
vulnerability VCID-td39-d3tf-vkhc
74
vulnerability VCID-tn33-re3r-yfhw
75
vulnerability VCID-ugrr-z2zv-6qgp
76
vulnerability VCID-vfc1-yy11-bycp
77
vulnerability VCID-vpkr-9akj-hbf6
78
vulnerability VCID-w472-84ep-fkdx
79
vulnerability VCID-w8ff-vxga-8qcz
80
vulnerability VCID-wmam-qmmg-6uay
81
vulnerability VCID-xgj8-zrta-kub9
82
vulnerability VCID-xyze-msxs-1qem
83
vulnerability VCID-y41p-tgpa-m7cs
84
vulnerability VCID-y44u-23he-aya8
85
vulnerability VCID-yjtj-ydsg-u7ca
86
vulnerability VCID-z8ex-47nd-47cm
87
vulnerability VCID-zg98-v6dj-s7gv
88
vulnerability VCID-zqyj-7rr3-fqew
89
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.47.0
aliases CVE-2016-0754
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fv7-7u2t-gfgb
7
url VCID-6rk4-vb5u-bkg6
vulnerability_id VCID-6rk4-vb5u-bkg6
summary curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5420
reference_id
reference_type
scores
0
value 0.01071
scoring_system epss
scoring_elements 0.7808
published_at 2026-06-04T12:55:00Z
1
value 0.01071
scoring_system epss
scoring_elements 0.78094
published_at 2026-06-08T12:55:00Z
2
value 0.01071
scoring_system epss
scoring_elements 0.78114
published_at 2026-06-06T12:55:00Z
3
value 0.01071
scoring_system epss
scoring_elements 0.78105
published_at 2026-06-07T12:55:00Z
4
value 0.01071
scoring_system epss
scoring_elements 0.78108
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5420
2
reference_url https://curl.se/docs/CVE-2016-5420.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5420.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1362190
reference_id 1362190
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1362190
8
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
9
reference_url https://access.redhat.com/errata/RHSA-2016:2575
reference_id RHSA-2016:2575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2575
10
reference_url https://access.redhat.com/errata/RHSA-2016:2957
reference_id RHSA-2016:2957
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2957
11
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.50.1
purl pkg:generic/curl.se/curl@7.50.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3ws4-1sak-r3ck
12
vulnerability VCID-4hha-2z31-2bf8
13
vulnerability VCID-4zcd-rbx3-qye5
14
vulnerability VCID-51ac-1jc2-vfed
15
vulnerability VCID-58p5-pfy3-xug1
16
vulnerability VCID-5svr-3vv9-mqea
17
vulnerability VCID-5ujs-47hf-g7gj
18
vulnerability VCID-5un8-xymy-37bt
19
vulnerability VCID-5xjw-u8ad-n3g5
20
vulnerability VCID-6745-tyba-33fa
21
vulnerability VCID-738z-myg9-37hr
22
vulnerability VCID-7jrx-ykk8-h3gp
23
vulnerability VCID-7wqd-99h2-e7hk
24
vulnerability VCID-7yvu-s3p2-sfhc
25
vulnerability VCID-a58z-fu87-9ybs
26
vulnerability VCID-a8z6-bswu-jue8
27
vulnerability VCID-am31-t2h3-zbgw
28
vulnerability VCID-av4f-gxku-qbhp
29
vulnerability VCID-azcz-b8f2-63be
30
vulnerability VCID-bb6v-z8yg-6fe3
31
vulnerability VCID-bcuq-n4vb-k7f3
32
vulnerability VCID-bx2m-n5ft-3be8
33
vulnerability VCID-cdzf-3ydt-8bdk
34
vulnerability VCID-f7n8-zzhz-fuc8
35
vulnerability VCID-f8vu-23bb-5ue7
36
vulnerability VCID-f9nm-d5ax-qkcb
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-g4n9-kg3s-pfcr
39
vulnerability VCID-g7ux-4vz2-ckfg
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-hhms-2hg6-nke9
44
vulnerability VCID-j688-cyfg-p7gu
45
vulnerability VCID-jf17-h97b-6bak
46
vulnerability VCID-jnq1-hk6d-b3a3
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kq38-7s5x-nqaz
49
vulnerability VCID-mh96-gkf1-9uek
50
vulnerability VCID-msd2-35g9-nyd2
51
vulnerability VCID-naac-snjw-qbad
52
vulnerability VCID-p8vk-yf66-wbb7
53
vulnerability VCID-p97a-kjpp-f3d8
54
vulnerability VCID-q46r-7nct-s3bw
55
vulnerability VCID-q8ja-keyk-fyfb
56
vulnerability VCID-q8tg-prj1-y7b8
57
vulnerability VCID-qe9z-wuze-tucq
58
vulnerability VCID-qrnc-7ywu-37cz
59
vulnerability VCID-r2g9-c896-rkge
60
vulnerability VCID-raxd-4nxj-gkhp
61
vulnerability VCID-rt5e-saz2-j7c9
62
vulnerability VCID-s2gu-8jpq-mub9
63
vulnerability VCID-secz-78pt-dben
64
vulnerability VCID-sesh-938m-x3f8
65
vulnerability VCID-snsg-c2up-b7cn
66
vulnerability VCID-sutv-qt2x-2yc7
67
vulnerability VCID-swmn-7ns9-ekg1
68
vulnerability VCID-tcxd-z7f3-kkes
69
vulnerability VCID-td39-d3tf-vkhc
70
vulnerability VCID-tn33-re3r-yfhw
71
vulnerability VCID-ugrr-z2zv-6qgp
72
vulnerability VCID-vfc1-yy11-bycp
73
vulnerability VCID-vpkr-9akj-hbf6
74
vulnerability VCID-w472-84ep-fkdx
75
vulnerability VCID-w8ff-vxga-8qcz
76
vulnerability VCID-wmam-qmmg-6uay
77
vulnerability VCID-xgj8-zrta-kub9
78
vulnerability VCID-xyze-msxs-1qem
79
vulnerability VCID-y41p-tgpa-m7cs
80
vulnerability VCID-y44u-23he-aya8
81
vulnerability VCID-yjtj-ydsg-u7ca
82
vulnerability VCID-z8ex-47nd-47cm
83
vulnerability VCID-zg98-v6dj-s7gv
84
vulnerability VCID-zqyj-7rr3-fqew
85
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.1
aliases CVE-2016-5420
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6rk4-vb5u-bkg6
8
url VCID-738z-myg9-37hr
vulnerability_id VCID-738z-myg9-37hr
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54143
published_at 2026-06-07T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.5412
published_at 2026-06-08T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54153
published_at 2026-06-06T12:55:00Z
3
value 0.00314
scoring_system epss
scoring_elements 0.54901
published_at 2026-06-05T12:55:00Z
4
value 0.00314
scoring_system epss
scoring_elements 0.54842
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
2
reference_url https://curl.se/docs/CVE-2022-27774.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27774.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1543773
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://hackerone.com/reports/1543773
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
reference_id 1010254
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
reference_id 2077547
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5m9y-9y57-kqg6
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6en5-etsd-2bce
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-f9nm-d5ax-qkcb
20
vulnerability VCID-fcb7-8163-muf4
21
vulnerability VCID-g4n9-kg3s-pfcr
22
vulnerability VCID-g7ux-4vz2-ckfg
23
vulnerability VCID-gueb-wzpx-ufb2
24
vulnerability VCID-h4nw-va5b-23ef
25
vulnerability VCID-hb4z-s871-d7ck
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-jnq1-hk6d-b3a3
28
vulnerability VCID-k5vr-1fmp-sqbw
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-mqzd-mcw5-s3h6
31
vulnerability VCID-mray-vkqx-5ka7
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-r2g9-c896-rkge
37
vulnerability VCID-razg-yr7y-ukgd
38
vulnerability VCID-secz-78pt-dben
39
vulnerability VCID-sutv-qt2x-2yc7
40
vulnerability VCID-tzs5-qzhn-rqbk
41
vulnerability VCID-u1p8-s8vm-3yer
42
vulnerability VCID-v82t-s9e1-2fbw
43
vulnerability VCID-vpkr-9akj-hbf6
44
vulnerability VCID-w472-84ep-fkdx
45
vulnerability VCID-w8ff-vxga-8qcz
46
vulnerability VCID-wbwx-5vg3-uqcd
47
vulnerability VCID-wgur-psum-pbck
48
vulnerability VCID-wmam-qmmg-6uay
49
vulnerability VCID-xgj8-zrta-kub9
50
vulnerability VCID-y41p-tgpa-m7cs
51
vulnerability VCID-y44u-23he-aya8
52
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27774
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-738z-myg9-37hr
9
url VCID-8j6v-xbhy-7uc2
vulnerability_id VCID-8j6v-xbhy-7uc2
summary cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
reference_id
reference_type
scores
0
value 0.04659
scoring_system epss
scoring_elements 0.89499
published_at 2026-06-04T12:55:00Z
1
value 0.04659
scoring_system epss
scoring_elements 0.89517
published_at 2026-06-08T12:55:00Z
2
value 0.04659
scoring_system epss
scoring_elements 0.89515
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
2
reference_url https://curl.se/docs/CVE-2015-3143.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3143.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
reference_id 1213306
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.42.0
purl pkg:generic/curl.se/curl@7.42.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-5m1h-d3cm-dqfu
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5un8-xymy-37bt
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6fv7-7u2t-gfgb
23
vulnerability VCID-6rk4-vb5u-bkg6
24
vulnerability VCID-738z-myg9-37hr
25
vulnerability VCID-7jrx-ykk8-h3gp
26
vulnerability VCID-7wqd-99h2-e7hk
27
vulnerability VCID-7yvu-s3p2-sfhc
28
vulnerability VCID-9rvz-5w86-u7e5
29
vulnerability VCID-a58z-fu87-9ybs
30
vulnerability VCID-a8z6-bswu-jue8
31
vulnerability VCID-am31-t2h3-zbgw
32
vulnerability VCID-av4f-gxku-qbhp
33
vulnerability VCID-azcz-b8f2-63be
34
vulnerability VCID-bb6v-z8yg-6fe3
35
vulnerability VCID-bcuq-n4vb-k7f3
36
vulnerability VCID-bx2m-n5ft-3be8
37
vulnerability VCID-cdar-9qhw-hke7
38
vulnerability VCID-cdzf-3ydt-8bdk
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f276-amhj-9yfx
41
vulnerability VCID-f7n8-zzhz-fuc8
42
vulnerability VCID-f8vu-23bb-5ue7
43
vulnerability VCID-f9nm-d5ax-qkcb
44
vulnerability VCID-fhc8-r8gv-bugj
45
vulnerability VCID-g4n9-kg3s-pfcr
46
vulnerability VCID-g7ux-4vz2-ckfg
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhms-2hg6-nke9
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jf17-h97b-6bak
53
vulnerability VCID-kkrm-dj79-4ucj
54
vulnerability VCID-kq38-7s5x-nqaz
55
vulnerability VCID-mh96-gkf1-9uek
56
vulnerability VCID-mq44-5pmp-2qhh
57
vulnerability VCID-msd2-35g9-nyd2
58
vulnerability VCID-naac-snjw-qbad
59
vulnerability VCID-p8vk-yf66-wbb7
60
vulnerability VCID-p97a-kjpp-f3d8
61
vulnerability VCID-q46r-7nct-s3bw
62
vulnerability VCID-q8ja-keyk-fyfb
63
vulnerability VCID-q8tg-prj1-y7b8
64
vulnerability VCID-qe9z-wuze-tucq
65
vulnerability VCID-qrnc-7ywu-37cz
66
vulnerability VCID-r2g9-c896-rkge
67
vulnerability VCID-rfdp-gsgs-eubq
68
vulnerability VCID-rt5e-saz2-j7c9
69
vulnerability VCID-s2gu-8jpq-mub9
70
vulnerability VCID-secz-78pt-dben
71
vulnerability VCID-sesh-938m-x3f8
72
vulnerability VCID-snsg-c2up-b7cn
73
vulnerability VCID-sutv-qt2x-2yc7
74
vulnerability VCID-swmn-7ns9-ekg1
75
vulnerability VCID-tcxd-z7f3-kkes
76
vulnerability VCID-td39-d3tf-vkhc
77
vulnerability VCID-tn33-re3r-yfhw
78
vulnerability VCID-ugrr-z2zv-6qgp
79
vulnerability VCID-vfc1-yy11-bycp
80
vulnerability VCID-vpkr-9akj-hbf6
81
vulnerability VCID-w472-84ep-fkdx
82
vulnerability VCID-w8ff-vxga-8qcz
83
vulnerability VCID-xgj8-zrta-kub9
84
vulnerability VCID-xyze-msxs-1qem
85
vulnerability VCID-y41p-tgpa-m7cs
86
vulnerability VCID-y44u-23he-aya8
87
vulnerability VCID-yjtj-ydsg-u7ca
88
vulnerability VCID-z8ex-47nd-47cm
89
vulnerability VCID-zg98-v6dj-s7gv
90
vulnerability VCID-zqyj-7rr3-fqew
91
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.42.0
aliases CVE-2015-3143
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8j6v-xbhy-7uc2
10
url VCID-a58z-fu87-9ybs
vulnerability_id VCID-a58z-fu87-9ybs
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
reference_id
reference_type
scores
0
value 0.00126
scoring_system epss
scoring_elements 0.31304
published_at 2026-06-08T12:55:00Z
1
value 0.00126
scoring_system epss
scoring_elements 0.31336
published_at 2026-06-07T12:55:00Z
2
value 0.00126
scoring_system epss
scoring_elements 0.31374
published_at 2026-06-06T12:55:00Z
3
value 0.00137
scoring_system epss
scoring_elements 0.33296
published_at 2026-06-04T12:55:00Z
4
value 0.00137
scoring_system epss
scoring_elements 0.33397
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
2
reference_url https://curl.se/docs/CVE-2021-22898.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://curl.se/docs/CVE-2021-22898.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1176461
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://hackerone.com/reports/1176461
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
reference_id 1964887
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
21
reference_url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_id 39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
22
reference_url http://www.openwall.com/lists/oss-security/2021/07/21/4
reference_id 4
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url http://www.openwall.com/lists/oss-security/2021/07/21/4
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
reference_id 989228
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
24
reference_url https://security.archlinux.org/ASA-202106-4
reference_id ASA-202106-4
reference_type
scores
url https://security.archlinux.org/ASA-202106-4
25
reference_url https://security.archlinux.org/ASA-202106-5
reference_id ASA-202106-5
reference_type
scores
url https://security.archlinux.org/ASA-202106-5
26
reference_url https://security.archlinux.org/ASA-202106-6
reference_id ASA-202106-6
reference_type
scores
url https://security.archlinux.org/ASA-202106-6
27
reference_url https://security.archlinux.org/ASA-202106-7
reference_id ASA-202106-7
reference_type
scores
url https://security.archlinux.org/ASA-202106-7
28
reference_url https://security.archlinux.org/ASA-202106-8
reference_id ASA-202106-8
reference_type
scores
url https://security.archlinux.org/ASA-202106-8
29
reference_url https://security.archlinux.org/ASA-202106-9
reference_id ASA-202106-9
reference_type
scores
url https://security.archlinux.org/ASA-202106-9
30
reference_url https://security.archlinux.org/AVG-1995
reference_id AVG-1995
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1995
31
reference_url https://security.archlinux.org/AVG-1996
reference_id AVG-1996
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1996
32
reference_url https://security.archlinux.org/AVG-1997
reference_id AVG-1997
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1997
33
reference_url https://security.archlinux.org/AVG-1998
reference_id AVG-1998
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1998
34
reference_url https://security.archlinux.org/AVG-1999
reference_id AVG-1999
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1999
35
reference_url https://security.archlinux.org/AVG-2000
reference_id AVG-2000
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2000
36
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://www.debian.org/security/2022/dsa-5197
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
38
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
url https://security.gentoo.org/glsa/202105-36
39
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
40
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
41
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
reference_id POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
42
reference_url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_id rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
43
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
44
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
45
reference_url https://usn.ubuntu.com/5021-2/
reference_id USN-5021-2
reference_type
scores
url https://usn.ubuntu.com/5021-2/
46
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.77.0
purl pkg:generic/curl.se/curl@7.77.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-287k-bzqy-n7ag
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3p2z-61gq-muhs
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-6ggz-pa5t-77c4
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-7yvu-s3p2-sfhc
15
vulnerability VCID-7z3h-9pk3-rqct
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bcuq-n4vb-k7f3
20
vulnerability VCID-bx2m-n5ft-3be8
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gueb-wzpx-ufb2
29
vulnerability VCID-h4nw-va5b-23ef
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-k5vr-1fmp-sqbw
34
vulnerability VCID-kkrm-dj79-4ucj
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-ns58-vmsz-5ued
37
vulnerability VCID-nwvb-d466-4uaa
38
vulnerability VCID-p155-gbtu-abg1
39
vulnerability VCID-p97a-kjpp-f3d8
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-razg-yr7y-ukgd
43
vulnerability VCID-secz-78pt-dben
44
vulnerability VCID-sutv-qt2x-2yc7
45
vulnerability VCID-td39-d3tf-vkhc
46
vulnerability VCID-tzs5-qzhn-rqbk
47
vulnerability VCID-u1p8-s8vm-3yer
48
vulnerability VCID-urgp-rqyc-sqer
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wgur-psum-pbck
55
vulnerability VCID-wmam-qmmg-6uay
56
vulnerability VCID-xgj8-zrta-kub9
57
vulnerability VCID-y41p-tgpa-m7cs
58
vulnerability VCID-y44u-23he-aya8
59
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.77.0
aliases CVE-2021-22898
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a58z-fu87-9ybs
11
url VCID-a8z6-bswu-jue8
vulnerability_id VCID-a8z6-bswu-jue8
summary A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28320.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28320.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28320
reference_id
reference_type
scores
0
value 0.00641
scoring_system epss
scoring_elements 0.71005
published_at 2026-06-08T12:55:00Z
1
value 0.00641
scoring_system epss
scoring_elements 0.7103
published_at 2026-06-05T12:55:00Z
2
value 0.00641
scoring_system epss
scoring_elements 0.71037
published_at 2026-06-06T12:55:00Z
3
value 0.00641
scoring_system epss
scoring_elements 0.7102
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28320
2
reference_url https://curl.se/docs/CVE-2023-28320.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28320.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1929597
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://hackerone.com/reports/1929597
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196783
reference_id 2196783
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196783
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://security.gentoo.org/glsa/202310-12
12
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213843
13
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213844
14
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213845
15
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28320
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a8z6-bswu-jue8
12
url VCID-am31-t2h3-zbgw
vulnerability_id VCID-am31-t2h3-zbgw
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22925
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46239
published_at 2026-06-08T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.46266
published_at 2026-06-07T12:55:00Z
2
value 0.00233
scoring_system epss
scoring_elements 0.46286
published_at 2026-06-06T12:55:00Z
3
value 0.00233
scoring_system epss
scoring_elements 0.46284
published_at 2026-06-05T12:55:00Z
4
value 0.00233
scoring_system epss
scoring_elements 0.46217
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22925
2
reference_url https://curl.se/docs/CVE-2021-22925.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22925.html
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://hackerone.com/reports/1223882
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://hackerone.com/reports/1223882
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1970902
reference_id 1970902
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1970902
6
reference_url http://seclists.org/fulldisclosure/2021/Sep/39
reference_id 39
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url http://seclists.org/fulldisclosure/2021/Sep/39
7
reference_url http://seclists.org/fulldisclosure/2021/Sep/40
reference_id 40
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url http://seclists.org/fulldisclosure/2021/Sep/40
8
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
9
reference_url https://security.archlinux.org/ASA-202107-60
reference_id ASA-202107-60
reference_type
scores
url https://security.archlinux.org/ASA-202107-60
10
reference_url https://security.archlinux.org/ASA-202107-61
reference_id ASA-202107-61
reference_type
scores
url https://security.archlinux.org/ASA-202107-61
11
reference_url https://security.archlinux.org/ASA-202107-62
reference_id ASA-202107-62
reference_type
scores
url https://security.archlinux.org/ASA-202107-62
12
reference_url https://security.archlinux.org/ASA-202107-63
reference_id ASA-202107-63
reference_type
scores
url https://security.archlinux.org/ASA-202107-63
13
reference_url https://security.archlinux.org/ASA-202107-64
reference_id ASA-202107-64
reference_type
scores
url https://security.archlinux.org/ASA-202107-64
14
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
15
reference_url https://security.archlinux.org/AVG-2195
reference_id AVG-2195
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2195
16
reference_url https://security.archlinux.org/AVG-2196
reference_id AVG-2196
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2196
17
reference_url https://security.archlinux.org/AVG-2197
reference_id AVG-2197
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2197
18
reference_url https://security.archlinux.org/AVG-2198
reference_id AVG-2198
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2198
19
reference_url https://security.archlinux.org/AVG-2199
reference_id AVG-2199
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2199
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
21
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://security.gentoo.org/glsa/202212-01
22
reference_url https://support.apple.com/kb/HT212804
reference_id HT212804
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://support.apple.com/kb/HT212804
23
reference_url https://support.apple.com/kb/HT212805
reference_id HT212805
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://support.apple.com/kb/HT212805
24
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
25
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
26
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
reference_id ssa-484086.pdf
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
27
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
28
reference_url https://usn.ubuntu.com/5021-2/
reference_id USN-5021-2
reference_type
scores
url https://usn.ubuntu.com/5021-2/
29
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22925
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-am31-t2h3-zbgw
13
url VCID-av4f-gxku-qbhp
vulnerability_id VCID-av4f-gxku-qbhp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8624
reference_id
reference_type
scores
0
value 0.01327
scoring_system epss
scoring_elements 0.8028
published_at 2026-06-08T12:55:00Z
1
value 0.01327
scoring_system epss
scoring_elements 0.8029
published_at 2026-06-06T12:55:00Z
2
value 0.01327
scoring_system epss
scoring_elements 0.80286
published_at 2026-06-07T12:55:00Z
3
value 0.01363
scoring_system epss
scoring_elements 0.80514
published_at 2026-06-04T12:55:00Z
4
value 0.01363
scoring_system epss
scoring_elements 0.8054
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8624
2
reference_url https://curl.se/docs/CVE-2016-8624.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8624.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388390
reference_id 1388390
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388390
16
reference_url http://www.securityfocus.com/bid/94103
reference_id 94103
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url http://www.securityfocus.com/bid/94103
17
reference_url https://curl.haxx.se/docs/adv_20161102J.html
reference_id adv_20161102J.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://curl.haxx.se/docs/adv_20161102J.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://security.gentoo.org/glsa/201701-47
31
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
32
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
reference_id rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624
reference_id show_bug.cgi?id=CVE-2016-8624
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8624
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-av4f-gxku-qbhp
14
url VCID-azcz-b8f2-63be
vulnerability_id VCID-azcz-b8f2-63be
summary A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
reference_id
reference_type
scores
0
value 0.00179
scoring_system epss
scoring_elements 0.39211
published_at 2026-06-08T12:55:00Z
1
value 0.00179
scoring_system epss
scoring_elements 0.39261
published_at 2026-06-05T12:55:00Z
2
value 0.00179
scoring_system epss
scoring_elements 0.39266
published_at 2026-06-06T12:55:00Z
3
value 0.00179
scoring_system epss
scoring_elements 0.39239
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
2
reference_url https://curl.se/docs/CVE-2023-27533.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27533.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1891474
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://hackerone.com/reports/1891474
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
reference_id 2179062
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
8
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.gentoo.org/glsa/202310-12
9
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
10
reference_url https://security.netapp.com/advisory/ntap-20230420-0011/
reference_id ntap-20230420-0011
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.netapp.com/advisory/ntap-20230420-0011/
11
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
12
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
13
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
14
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
15
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27533
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-azcz-b8f2-63be
15
url VCID-bcuq-n4vb-k7f3
vulnerability_id VCID-bcuq-n4vb-k7f3
summary curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-7168.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-7168.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-7168
reference_id
reference_type
scores
0
value 0.00079
scoring_system epss
scoring_elements 0.23476
published_at 2026-06-05T12:55:00Z
1
value 0.00079
scoring_system epss
scoring_elements 0.23462
published_at 2026-06-06T12:55:00Z
2
value 0.00104
scoring_system epss
scoring_elements 0.27779
published_at 2026-06-08T12:55:00Z
3
value 0.00104
scoring_system epss
scoring_elements 0.27828
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-7168
2
reference_url https://curl.se/docs/CVE-2026-7168.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2026-7168.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7168
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7168
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3697719
reference_id
reference_type
scores
url https://hackerone.com/reports/3697719
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2476979
reference_id 2476979
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2476979
7
reference_url https://access.redhat.com/errata/RHSA-2026:19106
reference_id RHSA-2026:19106
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19106
8
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-7168
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bcuq-n4vb-k7f3
16
url VCID-bx2m-n5ft-3be8
vulnerability_id VCID-bx2m-n5ft-3be8
summary 
Improper Authentication
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.11124
published_at 2026-06-08T12:55:00Z
1
value 0.00036
scoring_system epss
scoring_elements 0.11244
published_at 2026-06-05T12:55:00Z
2
value 0.00036
scoring_system epss
scoring_elements 0.11237
published_at 2026-06-06T12:55:00Z
3
value 0.00036
scoring_system epss
scoring_elements 0.11204
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
2
reference_url https://curl.se/docs/CVE-2023-27535.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27535.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1892780
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://hackerone.com/reports/1892780
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
reference_id 2179073
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
reference_id CVE-2023-27535
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
12
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
13
reference_url https://access.redhat.com/errata/RHSA-2023:2650
reference_id RHSA-2023:2650
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2650
14
reference_url https://access.redhat.com/errata/RHSA-2023:3106
reference_id RHSA-2023:3106
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3106
15
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
16
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
17
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27535
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bx2m-n5ft-3be8
17
url VCID-cdar-9qhw-hke7
vulnerability_id VCID-cdar-9qhw-hke7
summary The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0755
reference_id
reference_type
scores
0
value 0.00346
scoring_system epss
scoring_elements 0.57476
published_at 2026-06-04T12:55:00Z
1
value 0.00346
scoring_system epss
scoring_elements 0.57529
published_at 2026-06-05T12:55:00Z
2
value 0.00346
scoring_system epss
scoring_elements 0.57538
published_at 2026-06-06T12:55:00Z
3
value 0.00346
scoring_system epss
scoring_elements 0.57527
published_at 2026-06-07T12:55:00Z
4
value 0.00346
scoring_system epss
scoring_elements 0.57515
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0755
2
reference_url https://curl.se/docs/CVE-2016-0755.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-0755.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1302263
reference_id 1302263
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1302263
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
6
reference_url https://usn.ubuntu.com/2882-1/
reference_id USN-2882-1
reference_type
scores
url https://usn.ubuntu.com/2882-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.47.0
purl pkg:generic/curl.se/curl@7.47.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-58p5-pfy3-xug1
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5un8-xymy-37bt
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6rk4-vb5u-bkg6
23
vulnerability VCID-738z-myg9-37hr
24
vulnerability VCID-7jrx-ykk8-h3gp
25
vulnerability VCID-7wqd-99h2-e7hk
26
vulnerability VCID-7yvu-s3p2-sfhc
27
vulnerability VCID-a58z-fu87-9ybs
28
vulnerability VCID-a8z6-bswu-jue8
29
vulnerability VCID-am31-t2h3-zbgw
30
vulnerability VCID-av4f-gxku-qbhp
31
vulnerability VCID-azcz-b8f2-63be
32
vulnerability VCID-bb6v-z8yg-6fe3
33
vulnerability VCID-bcuq-n4vb-k7f3
34
vulnerability VCID-bx2m-n5ft-3be8
35
vulnerability VCID-cdzf-3ydt-8bdk
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-f7n8-zzhz-fuc8
38
vulnerability VCID-f8vu-23bb-5ue7
39
vulnerability VCID-f9nm-d5ax-qkcb
40
vulnerability VCID-fhc8-r8gv-bugj
41
vulnerability VCID-g4n9-kg3s-pfcr
42
vulnerability VCID-g7ux-4vz2-ckfg
43
vulnerability VCID-gud1-yg9u-zyfp
44
vulnerability VCID-gueb-wzpx-ufb2
45
vulnerability VCID-h6xj-mys4-pucf
46
vulnerability VCID-hhms-2hg6-nke9
47
vulnerability VCID-j688-cyfg-p7gu
48
vulnerability VCID-jf17-h97b-6bak
49
vulnerability VCID-jnq1-hk6d-b3a3
50
vulnerability VCID-kkrm-dj79-4ucj
51
vulnerability VCID-kq38-7s5x-nqaz
52
vulnerability VCID-mh96-gkf1-9uek
53
vulnerability VCID-mq44-5pmp-2qhh
54
vulnerability VCID-msd2-35g9-nyd2
55
vulnerability VCID-naac-snjw-qbad
56
vulnerability VCID-p8vk-yf66-wbb7
57
vulnerability VCID-p97a-kjpp-f3d8
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-rfdp-gsgs-eubq
65
vulnerability VCID-rt5e-saz2-j7c9
66
vulnerability VCID-s2gu-8jpq-mub9
67
vulnerability VCID-secz-78pt-dben
68
vulnerability VCID-sesh-938m-x3f8
69
vulnerability VCID-snsg-c2up-b7cn
70
vulnerability VCID-sutv-qt2x-2yc7
71
vulnerability VCID-swmn-7ns9-ekg1
72
vulnerability VCID-tcxd-z7f3-kkes
73
vulnerability VCID-td39-d3tf-vkhc
74
vulnerability VCID-tn33-re3r-yfhw
75
vulnerability VCID-ugrr-z2zv-6qgp
76
vulnerability VCID-vfc1-yy11-bycp
77
vulnerability VCID-vpkr-9akj-hbf6
78
vulnerability VCID-w472-84ep-fkdx
79
vulnerability VCID-w8ff-vxga-8qcz
80
vulnerability VCID-wmam-qmmg-6uay
81
vulnerability VCID-xgj8-zrta-kub9
82
vulnerability VCID-xyze-msxs-1qem
83
vulnerability VCID-y41p-tgpa-m7cs
84
vulnerability VCID-y44u-23he-aya8
85
vulnerability VCID-yjtj-ydsg-u7ca
86
vulnerability VCID-z8ex-47nd-47cm
87
vulnerability VCID-zg98-v6dj-s7gv
88
vulnerability VCID-zqyj-7rr3-fqew
89
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.47.0
aliases CVE-2016-0755
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdar-9qhw-hke7
18
url VCID-cdzf-3ydt-8bdk
vulnerability_id VCID-cdzf-3ydt-8bdk
summary When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
reference_id
reference_type
scores
0
value 0.01853
scoring_system epss
scoring_elements 0.83366
published_at 2026-06-04T12:55:00Z
1
value 0.01853
scoring_system epss
scoring_elements 0.8338
published_at 2026-06-08T12:55:00Z
2
value 0.01853
scoring_system epss
scoring_elements 0.8339
published_at 2026-06-05T12:55:00Z
3
value 0.01853
scoring_system epss
scoring_elements 0.83391
published_at 2026-06-06T12:55:00Z
4
value 0.01853
scoring_system epss
scoring_elements 0.83388
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
2
reference_url https://curl.se/docs/CVE-2022-32221.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32221.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/1704017
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://hackerone.com/reports/1704017
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/19
reference_id 19
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/19
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
reference_id 2135411
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
10
reference_url http://www.openwall.com/lists/oss-security/2023/05/17/4
reference_id 4
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://www.openwall.com/lists/oss-security/2023/05/17/4
11
reference_url https://www.debian.org/security/2023/dsa-5330
reference_id dsa-5330
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://www.debian.org/security/2023/dsa-5330
12
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.gentoo.org/glsa/202212-01
13
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213604
14
reference_url https://support.apple.com/kb/HT213605
reference_id HT213605
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213605
15
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
16
reference_url https://security.netapp.com/advisory/ntap-20230110-0006/
reference_id ntap-20230110-0006
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230110-0006/
17
reference_url https://security.netapp.com/advisory/ntap-20230208-0002/
reference_id ntap-20230208-0002
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230208-0002/
18
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
19
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
20
reference_url https://access.redhat.com/errata/RHSA-2023:0333
reference_id RHSA-2023:0333
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0333
21
reference_url https://access.redhat.com/errata/RHSA-2023:4139
reference_id RHSA-2023:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4139
22
reference_url https://usn.ubuntu.com/5702-1/
reference_id USN-5702-1
reference_type
scores
url https://usn.ubuntu.com/5702-1/
23
reference_url https://usn.ubuntu.com/5702-2/
reference_id USN-5702-2
reference_type
scores
url https://usn.ubuntu.com/5702-2/
24
reference_url https://usn.ubuntu.com/5823-1/
reference_id USN-5823-1
reference_type
scores
url https://usn.ubuntu.com/5823-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.86.0
purl pkg:generic/curl.se/curl@7.86.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-287k-bzqy-n7ag
4
vulnerability VCID-39qh-jayw-g3dh
5
vulnerability VCID-3p2z-61gq-muhs
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6en5-etsd-2bce
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-7wqd-99h2-e7hk
10
vulnerability VCID-85qb-zec7-subc
11
vulnerability VCID-a8z6-bswu-jue8
12
vulnerability VCID-azcz-b8f2-63be
13
vulnerability VCID-bcuq-n4vb-k7f3
14
vulnerability VCID-bx2m-n5ft-3be8
15
vulnerability VCID-cfry-nx5h-kudv
16
vulnerability VCID-f9nm-d5ax-qkcb
17
vulnerability VCID-fcb7-8163-muf4
18
vulnerability VCID-ffmg-djmk-57hn
19
vulnerability VCID-g4n9-kg3s-pfcr
20
vulnerability VCID-g7ux-4vz2-ckfg
21
vulnerability VCID-gueb-wzpx-ufb2
22
vulnerability VCID-hhms-2hg6-nke9
23
vulnerability VCID-jnq1-hk6d-b3a3
24
vulnerability VCID-k3nv-gf9b-5ua2
25
vulnerability VCID-kq38-7s5x-nqaz
26
vulnerability VCID-ns58-vmsz-5ued
27
vulnerability VCID-nwvb-d466-4uaa
28
vulnerability VCID-p155-gbtu-abg1
29
vulnerability VCID-p97a-kjpp-f3d8
30
vulnerability VCID-r2g9-c896-rkge
31
vulnerability VCID-razg-yr7y-ukgd
32
vulnerability VCID-secz-78pt-dben
33
vulnerability VCID-sutv-qt2x-2yc7
34
vulnerability VCID-u1p8-s8vm-3yer
35
vulnerability VCID-v82t-s9e1-2fbw
36
vulnerability VCID-w472-84ep-fkdx
37
vulnerability VCID-w8ff-vxga-8qcz
38
vulnerability VCID-wgur-psum-pbck
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-y41p-tgpa-m7cs
41
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.86.0
aliases CVE-2022-32221
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdzf-3ydt-8bdk
19
url VCID-dndt-tapy-23d2
vulnerability_id VCID-dndt-tapy-23d2
summary curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
reference_id
reference_type
scores
0
value 0.01912
scoring_system epss
scoring_elements 0.83644
published_at 2026-06-08T12:55:00Z
1
value 0.01912
scoring_system epss
scoring_elements 0.83631
published_at 2026-06-04T12:55:00Z
2
value 0.01912
scoring_system epss
scoring_elements 0.83655
published_at 2026-06-06T12:55:00Z
3
value 0.01912
scoring_system epss
scoring_elements 0.83652
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
2
reference_url https://curl.se/docs/CVE-2016-5419.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5419.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1362183
reference_id 1362183
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1362183
8
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
9
reference_url https://access.redhat.com/errata/RHSA-2016:2575
reference_id RHSA-2016:2575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2575
10
reference_url https://access.redhat.com/errata/RHSA-2016:2957
reference_id RHSA-2016:2957
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2957
11
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.50.1
purl pkg:generic/curl.se/curl@7.50.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3ws4-1sak-r3ck
12
vulnerability VCID-4hha-2z31-2bf8
13
vulnerability VCID-4zcd-rbx3-qye5
14
vulnerability VCID-51ac-1jc2-vfed
15
vulnerability VCID-58p5-pfy3-xug1
16
vulnerability VCID-5svr-3vv9-mqea
17
vulnerability VCID-5ujs-47hf-g7gj
18
vulnerability VCID-5un8-xymy-37bt
19
vulnerability VCID-5xjw-u8ad-n3g5
20
vulnerability VCID-6745-tyba-33fa
21
vulnerability VCID-738z-myg9-37hr
22
vulnerability VCID-7jrx-ykk8-h3gp
23
vulnerability VCID-7wqd-99h2-e7hk
24
vulnerability VCID-7yvu-s3p2-sfhc
25
vulnerability VCID-a58z-fu87-9ybs
26
vulnerability VCID-a8z6-bswu-jue8
27
vulnerability VCID-am31-t2h3-zbgw
28
vulnerability VCID-av4f-gxku-qbhp
29
vulnerability VCID-azcz-b8f2-63be
30
vulnerability VCID-bb6v-z8yg-6fe3
31
vulnerability VCID-bcuq-n4vb-k7f3
32
vulnerability VCID-bx2m-n5ft-3be8
33
vulnerability VCID-cdzf-3ydt-8bdk
34
vulnerability VCID-f7n8-zzhz-fuc8
35
vulnerability VCID-f8vu-23bb-5ue7
36
vulnerability VCID-f9nm-d5ax-qkcb
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-g4n9-kg3s-pfcr
39
vulnerability VCID-g7ux-4vz2-ckfg
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-hhms-2hg6-nke9
44
vulnerability VCID-j688-cyfg-p7gu
45
vulnerability VCID-jf17-h97b-6bak
46
vulnerability VCID-jnq1-hk6d-b3a3
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kq38-7s5x-nqaz
49
vulnerability VCID-mh96-gkf1-9uek
50
vulnerability VCID-msd2-35g9-nyd2
51
vulnerability VCID-naac-snjw-qbad
52
vulnerability VCID-p8vk-yf66-wbb7
53
vulnerability VCID-p97a-kjpp-f3d8
54
vulnerability VCID-q46r-7nct-s3bw
55
vulnerability VCID-q8ja-keyk-fyfb
56
vulnerability VCID-q8tg-prj1-y7b8
57
vulnerability VCID-qe9z-wuze-tucq
58
vulnerability VCID-qrnc-7ywu-37cz
59
vulnerability VCID-r2g9-c896-rkge
60
vulnerability VCID-raxd-4nxj-gkhp
61
vulnerability VCID-rt5e-saz2-j7c9
62
vulnerability VCID-s2gu-8jpq-mub9
63
vulnerability VCID-secz-78pt-dben
64
vulnerability VCID-sesh-938m-x3f8
65
vulnerability VCID-snsg-c2up-b7cn
66
vulnerability VCID-sutv-qt2x-2yc7
67
vulnerability VCID-swmn-7ns9-ekg1
68
vulnerability VCID-tcxd-z7f3-kkes
69
vulnerability VCID-td39-d3tf-vkhc
70
vulnerability VCID-tn33-re3r-yfhw
71
vulnerability VCID-ugrr-z2zv-6qgp
72
vulnerability VCID-vfc1-yy11-bycp
73
vulnerability VCID-vpkr-9akj-hbf6
74
vulnerability VCID-w472-84ep-fkdx
75
vulnerability VCID-w8ff-vxga-8qcz
76
vulnerability VCID-wmam-qmmg-6uay
77
vulnerability VCID-xgj8-zrta-kub9
78
vulnerability VCID-xyze-msxs-1qem
79
vulnerability VCID-y41p-tgpa-m7cs
80
vulnerability VCID-y44u-23he-aya8
81
vulnerability VCID-yjtj-ydsg-u7ca
82
vulnerability VCID-z8ex-47nd-47cm
83
vulnerability VCID-zg98-v6dj-s7gv
84
vulnerability VCID-zqyj-7rr3-fqew
85
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.1
aliases CVE-2016-5419
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dndt-tapy-23d2
20
url VCID-e4qf-7gqs-qyg3
vulnerability_id VCID-e4qf-7gqs-qyg3
summary cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
reference_id
reference_type
scores
0
value 0.01266
scoring_system epss
scoring_elements 0.79799
published_at 2026-06-04T12:55:00Z
1
value 0.01266
scoring_system epss
scoring_elements 0.79825
published_at 2026-06-07T12:55:00Z
2
value 0.01266
scoring_system epss
scoring_elements 0.7983
published_at 2026-06-06T12:55:00Z
3
value 0.01266
scoring_system epss
scoring_elements 0.79815
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
2
reference_url https://curl.se/docs/CVE-2014-0015.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0015.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
reference_id 1053903
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
6
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
7
reference_url https://usn.ubuntu.com/2097-1/
reference_id USN-2097-1
reference_type
scores
url https://usn.ubuntu.com/2097-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.35.0
purl pkg:generic/curl.se/curl@7.35.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-2u6v-6vm9-z3by
11
vulnerability VCID-39qh-jayw-g3dh
12
vulnerability VCID-3s4s-6c3v-7kgn
13
vulnerability VCID-3xcn-bur1-tkdt
14
vulnerability VCID-4hha-2z31-2bf8
15
vulnerability VCID-4zcd-rbx3-qye5
16
vulnerability VCID-51ac-1jc2-vfed
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5xjw-u8ad-n3g5
20
vulnerability VCID-6745-tyba-33fa
21
vulnerability VCID-6fv7-7u2t-gfgb
22
vulnerability VCID-6rk4-vb5u-bkg6
23
vulnerability VCID-738z-myg9-37hr
24
vulnerability VCID-7jrx-ykk8-h3gp
25
vulnerability VCID-7wqd-99h2-e7hk
26
vulnerability VCID-7yvu-s3p2-sfhc
27
vulnerability VCID-8j6v-xbhy-7uc2
28
vulnerability VCID-a58z-fu87-9ybs
29
vulnerability VCID-a8z6-bswu-jue8
30
vulnerability VCID-am31-t2h3-zbgw
31
vulnerability VCID-av4f-gxku-qbhp
32
vulnerability VCID-azcz-b8f2-63be
33
vulnerability VCID-bb6v-z8yg-6fe3
34
vulnerability VCID-bcuq-n4vb-k7f3
35
vulnerability VCID-bx2m-n5ft-3be8
36
vulnerability VCID-cdar-9qhw-hke7
37
vulnerability VCID-cdzf-3ydt-8bdk
38
vulnerability VCID-cxy6-vzz9-w3ff
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f276-amhj-9yfx
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-f9nm-d5ax-qkcb
43
vulnerability VCID-fhc8-r8gv-bugj
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g7ux-4vz2-ckfg
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhms-2hg6-nke9
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jf17-h97b-6bak
53
vulnerability VCID-kkrm-dj79-4ucj
54
vulnerability VCID-kq38-7s5x-nqaz
55
vulnerability VCID-mh96-gkf1-9uek
56
vulnerability VCID-mq44-5pmp-2qhh
57
vulnerability VCID-msd2-35g9-nyd2
58
vulnerability VCID-naac-snjw-qbad
59
vulnerability VCID-p8vk-yf66-wbb7
60
vulnerability VCID-p97a-kjpp-f3d8
61
vulnerability VCID-p9v4-nweu-vydg
62
vulnerability VCID-q46r-7nct-s3bw
63
vulnerability VCID-q8ja-keyk-fyfb
64
vulnerability VCID-q8tg-prj1-y7b8
65
vulnerability VCID-q9ht-ra39-kuef
66
vulnerability VCID-qe9z-wuze-tucq
67
vulnerability VCID-r2g9-c896-rkge
68
vulnerability VCID-rfdp-gsgs-eubq
69
vulnerability VCID-rt5e-saz2-j7c9
70
vulnerability VCID-s2gu-8jpq-mub9
71
vulnerability VCID-s6gu-gm97-fyfk
72
vulnerability VCID-secz-78pt-dben
73
vulnerability VCID-sesh-938m-x3f8
74
vulnerability VCID-snsg-c2up-b7cn
75
vulnerability VCID-sutv-qt2x-2yc7
76
vulnerability VCID-swmn-7ns9-ekg1
77
vulnerability VCID-tcxd-z7f3-kkes
78
vulnerability VCID-td39-d3tf-vkhc
79
vulnerability VCID-tn33-re3r-yfhw
80
vulnerability VCID-tyqp-e8cp-dbbm
81
vulnerability VCID-ugrr-z2zv-6qgp
82
vulnerability VCID-uh5a-zcds-3bcc
83
vulnerability VCID-vfc1-yy11-bycp
84
vulnerability VCID-vpkr-9akj-hbf6
85
vulnerability VCID-w472-84ep-fkdx
86
vulnerability VCID-w8ff-vxga-8qcz
87
vulnerability VCID-xgj8-zrta-kub9
88
vulnerability VCID-xsnb-eujr-y7bz
89
vulnerability VCID-xyze-msxs-1qem
90
vulnerability VCID-y44u-23he-aya8
91
vulnerability VCID-yjtj-ydsg-u7ca
92
vulnerability VCID-z8ex-47nd-47cm
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.35.0
aliases CVE-2014-0015
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4qf-7gqs-qyg3
21
url VCID-f276-amhj-9yfx
vulnerability_id VCID-f276-amhj-9yfx
summary The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
reference_id
reference_type
scores
0
value 0.08372
scoring_system epss
scoring_elements 0.92451
published_at 2026-06-04T12:55:00Z
1
value 0.08372
scoring_system epss
scoring_elements 0.92464
published_at 2026-06-05T12:55:00Z
2
value 0.08372
scoring_system epss
scoring_elements 0.9246
published_at 2026-06-06T12:55:00Z
3
value 0.08372
scoring_system epss
scoring_elements 0.92455
published_at 2026-06-07T12:55:00Z
4
value 0.08372
scoring_system epss
scoring_elements 0.92454
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
2
reference_url https://curl.se/docs/CVE-2015-3153.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3153.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1217341
reference_id 1217341
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1217341
5
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.42.1
purl pkg:generic/curl.se/curl@7.42.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-5m1h-d3cm-dqfu
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5un8-xymy-37bt
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6fv7-7u2t-gfgb
23
vulnerability VCID-6rk4-vb5u-bkg6
24
vulnerability VCID-738z-myg9-37hr
25
vulnerability VCID-7jrx-ykk8-h3gp
26
vulnerability VCID-7wqd-99h2-e7hk
27
vulnerability VCID-7yvu-s3p2-sfhc
28
vulnerability VCID-9rvz-5w86-u7e5
29
vulnerability VCID-a58z-fu87-9ybs
30
vulnerability VCID-a8z6-bswu-jue8
31
vulnerability VCID-am31-t2h3-zbgw
32
vulnerability VCID-av4f-gxku-qbhp
33
vulnerability VCID-azcz-b8f2-63be
34
vulnerability VCID-bb6v-z8yg-6fe3
35
vulnerability VCID-bcuq-n4vb-k7f3
36
vulnerability VCID-bx2m-n5ft-3be8
37
vulnerability VCID-cdar-9qhw-hke7
38
vulnerability VCID-cdzf-3ydt-8bdk
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f7n8-zzhz-fuc8
41
vulnerability VCID-f8vu-23bb-5ue7
42
vulnerability VCID-f9nm-d5ax-qkcb
43
vulnerability VCID-fhc8-r8gv-bugj
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g7ux-4vz2-ckfg
46
vulnerability VCID-gud1-yg9u-zyfp
47
vulnerability VCID-gueb-wzpx-ufb2
48
vulnerability VCID-h6xj-mys4-pucf
49
vulnerability VCID-hhms-2hg6-nke9
50
vulnerability VCID-j688-cyfg-p7gu
51
vulnerability VCID-jf17-h97b-6bak
52
vulnerability VCID-kkrm-dj79-4ucj
53
vulnerability VCID-kq38-7s5x-nqaz
54
vulnerability VCID-mh96-gkf1-9uek
55
vulnerability VCID-mq44-5pmp-2qhh
56
vulnerability VCID-msd2-35g9-nyd2
57
vulnerability VCID-naac-snjw-qbad
58
vulnerability VCID-p8vk-yf66-wbb7
59
vulnerability VCID-p97a-kjpp-f3d8
60
vulnerability VCID-q46r-7nct-s3bw
61
vulnerability VCID-q8ja-keyk-fyfb
62
vulnerability VCID-q8tg-prj1-y7b8
63
vulnerability VCID-qe9z-wuze-tucq
64
vulnerability VCID-qrnc-7ywu-37cz
65
vulnerability VCID-r2g9-c896-rkge
66
vulnerability VCID-rfdp-gsgs-eubq
67
vulnerability VCID-rt5e-saz2-j7c9
68
vulnerability VCID-s2gu-8jpq-mub9
69
vulnerability VCID-secz-78pt-dben
70
vulnerability VCID-sesh-938m-x3f8
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-ugrr-z2zv-6qgp
78
vulnerability VCID-vfc1-yy11-bycp
79
vulnerability VCID-vpkr-9akj-hbf6
80
vulnerability VCID-w472-84ep-fkdx
81
vulnerability VCID-w8ff-vxga-8qcz
82
vulnerability VCID-xgj8-zrta-kub9
83
vulnerability VCID-xyze-msxs-1qem
84
vulnerability VCID-y41p-tgpa-m7cs
85
vulnerability VCID-y44u-23he-aya8
86
vulnerability VCID-yjtj-ydsg-u7ca
87
vulnerability VCID-z8ex-47nd-47cm
88
vulnerability VCID-zg98-v6dj-s7gv
89
vulnerability VCID-zqyj-7rr3-fqew
90
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.42.1
aliases CVE-2015-3153
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f276-amhj-9yfx
22
url VCID-f922-jx9w-mbc5
vulnerability_id VCID-f922-jx9w-mbc5
summary CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
reference_id
reference_type
scores
0
value 0.01225
scoring_system epss
scoring_elements 0.79462
published_at 2026-06-04T12:55:00Z
1
value 0.01225
scoring_system epss
scoring_elements 0.79489
published_at 2026-06-05T12:55:00Z
2
value 0.01225
scoring_system epss
scoring_elements 0.79495
published_at 2026-06-06T12:55:00Z
3
value 0.01225
scoring_system epss
scoring_elements 0.79487
published_at 2026-06-07T12:55:00Z
4
value 0.01225
scoring_system epss
scoring_elements 0.79477
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
2
reference_url https://curl.se/docs/CVE-2014-8150.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-8150.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
reference_id 1178692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
6
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
7
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
8
reference_url https://usn.ubuntu.com/2474-1/
reference_id USN-2474-1
reference_type
scores
url https://usn.ubuntu.com/2474-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.40.0
purl pkg:generic/curl.se/curl@7.40.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-5m1h-d3cm-dqfu
17
vulnerability VCID-5sem-gndf-97e6
18
vulnerability VCID-5svr-3vv9-mqea
19
vulnerability VCID-5ujs-47hf-g7gj
20
vulnerability VCID-5un8-xymy-37bt
21
vulnerability VCID-5xjw-u8ad-n3g5
22
vulnerability VCID-6745-tyba-33fa
23
vulnerability VCID-6fv7-7u2t-gfgb
24
vulnerability VCID-6rk4-vb5u-bkg6
25
vulnerability VCID-738z-myg9-37hr
26
vulnerability VCID-7jrx-ykk8-h3gp
27
vulnerability VCID-7wqd-99h2-e7hk
28
vulnerability VCID-7yvu-s3p2-sfhc
29
vulnerability VCID-8j6v-xbhy-7uc2
30
vulnerability VCID-9rvz-5w86-u7e5
31
vulnerability VCID-a58z-fu87-9ybs
32
vulnerability VCID-a8z6-bswu-jue8
33
vulnerability VCID-am31-t2h3-zbgw
34
vulnerability VCID-av4f-gxku-qbhp
35
vulnerability VCID-azcz-b8f2-63be
36
vulnerability VCID-bb6v-z8yg-6fe3
37
vulnerability VCID-bcuq-n4vb-k7f3
38
vulnerability VCID-bx2m-n5ft-3be8
39
vulnerability VCID-cdar-9qhw-hke7
40
vulnerability VCID-cdzf-3ydt-8bdk
41
vulnerability VCID-dndt-tapy-23d2
42
vulnerability VCID-f276-amhj-9yfx
43
vulnerability VCID-f8vu-23bb-5ue7
44
vulnerability VCID-f9nm-d5ax-qkcb
45
vulnerability VCID-fhc8-r8gv-bugj
46
vulnerability VCID-g4n9-kg3s-pfcr
47
vulnerability VCID-g7ux-4vz2-ckfg
48
vulnerability VCID-gud1-yg9u-zyfp
49
vulnerability VCID-gueb-wzpx-ufb2
50
vulnerability VCID-h6xj-mys4-pucf
51
vulnerability VCID-hhms-2hg6-nke9
52
vulnerability VCID-j688-cyfg-p7gu
53
vulnerability VCID-jf17-h97b-6bak
54
vulnerability VCID-kkrm-dj79-4ucj
55
vulnerability VCID-kq38-7s5x-nqaz
56
vulnerability VCID-mh96-gkf1-9uek
57
vulnerability VCID-mq44-5pmp-2qhh
58
vulnerability VCID-msd2-35g9-nyd2
59
vulnerability VCID-naac-snjw-qbad
60
vulnerability VCID-p8vk-yf66-wbb7
61
vulnerability VCID-p97a-kjpp-f3d8
62
vulnerability VCID-p9v4-nweu-vydg
63
vulnerability VCID-q46r-7nct-s3bw
64
vulnerability VCID-q8ja-keyk-fyfb
65
vulnerability VCID-q8tg-prj1-y7b8
66
vulnerability VCID-qe9z-wuze-tucq
67
vulnerability VCID-qrnc-7ywu-37cz
68
vulnerability VCID-r2g9-c896-rkge
69
vulnerability VCID-rfdp-gsgs-eubq
70
vulnerability VCID-rt5e-saz2-j7c9
71
vulnerability VCID-s2gu-8jpq-mub9
72
vulnerability VCID-s6gu-gm97-fyfk
73
vulnerability VCID-secz-78pt-dben
74
vulnerability VCID-sesh-938m-x3f8
75
vulnerability VCID-snsg-c2up-b7cn
76
vulnerability VCID-sutv-qt2x-2yc7
77
vulnerability VCID-swmn-7ns9-ekg1
78
vulnerability VCID-tcxd-z7f3-kkes
79
vulnerability VCID-td39-d3tf-vkhc
80
vulnerability VCID-tn33-re3r-yfhw
81
vulnerability VCID-ugrr-z2zv-6qgp
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w8ff-vxga-8qcz
86
vulnerability VCID-xgj8-zrta-kub9
87
vulnerability VCID-xyze-msxs-1qem
88
vulnerability VCID-y44u-23he-aya8
89
vulnerability VCID-yjtj-ydsg-u7ca
90
vulnerability VCID-z8ex-47nd-47cm
91
vulnerability VCID-zg98-v6dj-s7gv
92
vulnerability VCID-zqyj-7rr3-fqew
93
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.40.0
aliases CVE-2014-8150
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f922-jx9w-mbc5
23
url VCID-fhc8-r8gv-bugj
vulnerability_id VCID-fhc8-r8gv-bugj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
reference_id
reference_type
scores
0
value 0.00115
scoring_system epss
scoring_elements 0.29764
published_at 2026-06-08T12:55:00Z
1
value 0.00115
scoring_system epss
scoring_elements 0.29798
published_at 2026-06-07T12:55:00Z
2
value 0.00115
scoring_system epss
scoring_elements 0.2983
published_at 2026-06-06T12:55:00Z
3
value 0.00115
scoring_system epss
scoring_elements 0.29799
published_at 2026-06-04T12:55:00Z
4
value 0.00115
scoring_system epss
scoring_elements 0.29867
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1101882
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://hackerone.com/reports/1101882
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
reference_id 1941964
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
reference_id 2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
reference_id 986269
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
15
reference_url https://security.archlinux.org/AVG-1753
reference_id AVG-1753
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1753
16
reference_url https://security.archlinux.org/AVG-1754
reference_id AVG-1754
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1754
17
reference_url https://security.archlinux.org/AVG-1755
reference_id AVG-1755
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1755
18
reference_url https://security.archlinux.org/AVG-1756
reference_id AVG-1756
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1756
19
reference_url https://security.archlinux.org/AVG-1757
reference_id AVG-1757
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1757
20
reference_url https://security.archlinux.org/AVG-1758
reference_id AVG-1758
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1758
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
reference_id CVE-2021-22876
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
22
reference_url https://curl.se/docs/CVE-2021-22876.html
reference_id CVE-2021-22876.HTML
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://curl.se/docs/CVE-2021-22876.html
23
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.gentoo.org/glsa/202105-36
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
reference_id ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
reference_id KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
26
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
reference_id msg00019.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
27
reference_url https://security.netapp.com/advisory/ntap-20210521-0007/
reference_id ntap-20210521-0007
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.netapp.com/advisory/ntap-20210521-0007/
28
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
29
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
30
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
31
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
32
reference_url https://usn.ubuntu.com/4898-1/
reference_id USN-4898-1
reference_type
scores
url https://usn.ubuntu.com/4898-1/
33
reference_url https://usn.ubuntu.com/4903-1/
reference_id USN-4903-1
reference_type
scores
url https://usn.ubuntu.com/4903-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.76.0
purl pkg:generic/curl.se/curl@7.76.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-3p2z-61gq-muhs
9
vulnerability VCID-5un8-xymy-37bt
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-7z3h-9pk3-rqct
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bcuq-n4vb-k7f3
20
vulnerability VCID-bx2m-n5ft-3be8
21
vulnerability VCID-byzw-xw9s-pkga
22
vulnerability VCID-cdzf-3ydt-8bdk
23
vulnerability VCID-cfry-nx5h-kudv
24
vulnerability VCID-cjyz-fdnv-b3g4
25
vulnerability VCID-f9nm-d5ax-qkcb
26
vulnerability VCID-fcb7-8163-muf4
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-p155-gbtu-abg1
36
vulnerability VCID-p97a-kjpp-f3d8
37
vulnerability VCID-q8tg-prj1-y7b8
38
vulnerability VCID-r2g9-c896-rkge
39
vulnerability VCID-razg-yr7y-ukgd
40
vulnerability VCID-secz-78pt-dben
41
vulnerability VCID-sutv-qt2x-2yc7
42
vulnerability VCID-td39-d3tf-vkhc
43
vulnerability VCID-tzs5-qzhn-rqbk
44
vulnerability VCID-u1p8-s8vm-3yer
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vgap-k5zw-9qbn
48
vulnerability VCID-vpkr-9akj-hbf6
49
vulnerability VCID-w472-84ep-fkdx
50
vulnerability VCID-w8ff-vxga-8qcz
51
vulnerability VCID-wbwx-5vg3-uqcd
52
vulnerability VCID-wgur-psum-pbck
53
vulnerability VCID-wmam-qmmg-6uay
54
vulnerability VCID-xgj8-zrta-kub9
55
vulnerability VCID-y41p-tgpa-m7cs
56
vulnerability VCID-y44u-23he-aya8
57
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.76.0
aliases CVE-2021-22876
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhc8-r8gv-bugj
24
url VCID-g4n9-kg3s-pfcr
vulnerability_id VCID-g4n9-kg3s-pfcr
summary An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
reference_id
reference_type
scores
0
value 0.00297
scoring_system epss
scoring_elements 0.53316
published_at 2026-06-08T12:55:00Z
1
value 0.00297
scoring_system epss
scoring_elements 0.5335
published_at 2026-06-05T12:55:00Z
2
value 0.00297
scoring_system epss
scoring_elements 0.53358
published_at 2026-06-06T12:55:00Z
3
value 0.00297
scoring_system epss
scoring_elements 0.53342
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
2
reference_url https://curl.se/docs/CVE-2023-28321.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28321.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1950627
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://hackerone.com/reports/1950627
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
reference_id 2196786
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
reference_id msg00016.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4523
reference_id RHSA-2023:4523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4523
20
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
21
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
22
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
23
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
24
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
25
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
26
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28321
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g4n9-kg3s-pfcr
25
url VCID-g72q-eedp-aufb
vulnerability_id VCID-g72q-eedp-aufb
summary The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
reference_id
reference_type
scores
0
value 0.02482
scoring_system epss
scoring_elements 0.85568
published_at 2026-06-04T12:55:00Z
1
value 0.02482
scoring_system epss
scoring_elements 0.8559
published_at 2026-06-05T12:55:00Z
2
value 0.02482
scoring_system epss
scoring_elements 0.85595
published_at 2026-06-06T12:55:00Z
3
value 0.02482
scoring_system epss
scoring_elements 0.85592
published_at 2026-06-07T12:55:00Z
4
value 0.02482
scoring_system epss
scoring_elements 0.85577
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
2
reference_url https://curl.se/docs/CVE-2013-1944.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-1944.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
reference_id 705274
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=950577
reference_id 950577
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=950577
6
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
7
reference_url https://access.redhat.com/errata/RHSA-2013:0771
reference_id RHSA-2013:0771
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0771
8
reference_url https://usn.ubuntu.com/1801-1/
reference_id USN-1801-1
reference_type
scores
url https://usn.ubuntu.com/1801-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.30.0
purl pkg:generic/curl.se/curl@7.30.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-2u6v-6vm9-z3by
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3s4s-6c3v-7kgn
10
vulnerability VCID-4zcd-rbx3-qye5
11
vulnerability VCID-51ac-1jc2-vfed
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6fv7-7u2t-gfgb
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-a8z6-bswu-jue8
25
vulnerability VCID-am31-t2h3-zbgw
26
vulnerability VCID-av4f-gxku-qbhp
27
vulnerability VCID-azcz-b8f2-63be
28
vulnerability VCID-bcuq-n4vb-k7f3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cmcn-f8ws-q3h2
33
vulnerability VCID-cxy6-vzz9-w3ff
34
vulnerability VCID-dndt-tapy-23d2
35
vulnerability VCID-e4qf-7gqs-qyg3
36
vulnerability VCID-f276-amhj-9yfx
37
vulnerability VCID-f922-jx9w-mbc5
38
vulnerability VCID-f9nm-d5ax-qkcb
39
vulnerability VCID-fhc8-r8gv-bugj
40
vulnerability VCID-g4n9-kg3s-pfcr
41
vulnerability VCID-g7ux-4vz2-ckfg
42
vulnerability VCID-gud1-yg9u-zyfp
43
vulnerability VCID-gueb-wzpx-ufb2
44
vulnerability VCID-h6xj-mys4-pucf
45
vulnerability VCID-hhu3-dp3m-gbgm
46
vulnerability VCID-jf17-h97b-6bak
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-msd2-35g9-nyd2
49
vulnerability VCID-naac-snjw-qbad
50
vulnerability VCID-nkmd-xb13-mbg9
51
vulnerability VCID-p8vk-yf66-wbb7
52
vulnerability VCID-p97a-kjpp-f3d8
53
vulnerability VCID-p9v4-nweu-vydg
54
vulnerability VCID-q46r-7nct-s3bw
55
vulnerability VCID-q8ja-keyk-fyfb
56
vulnerability VCID-q8tg-prj1-y7b8
57
vulnerability VCID-q9ht-ra39-kuef
58
vulnerability VCID-qe9z-wuze-tucq
59
vulnerability VCID-r2g9-c896-rkge
60
vulnerability VCID-rfdp-gsgs-eubq
61
vulnerability VCID-rt5e-saz2-j7c9
62
vulnerability VCID-s2gu-8jpq-mub9
63
vulnerability VCID-secz-78pt-dben
64
vulnerability VCID-sesh-938m-x3f8
65
vulnerability VCID-snsg-c2up-b7cn
66
vulnerability VCID-sutv-qt2x-2yc7
67
vulnerability VCID-swmn-7ns9-ekg1
68
vulnerability VCID-tcxd-z7f3-kkes
69
vulnerability VCID-td39-d3tf-vkhc
70
vulnerability VCID-tn33-re3r-yfhw
71
vulnerability VCID-tyqp-e8cp-dbbm
72
vulnerability VCID-ugrr-z2zv-6qgp
73
vulnerability VCID-uh5a-zcds-3bcc
74
vulnerability VCID-vfc1-yy11-bycp
75
vulnerability VCID-vpkr-9akj-hbf6
76
vulnerability VCID-w472-84ep-fkdx
77
vulnerability VCID-w8ff-vxga-8qcz
78
vulnerability VCID-xgj8-zrta-kub9
79
vulnerability VCID-xsnb-eujr-y7bz
80
vulnerability VCID-xyze-msxs-1qem
81
vulnerability VCID-y44u-23he-aya8
82
vulnerability VCID-z8ex-47nd-47cm
83
vulnerability VCID-zg98-v6dj-s7gv
84
vulnerability VCID-zqyj-7rr3-fqew
85
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.30.0
aliases CVE-2013-1944
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g72q-eedp-aufb
26
url VCID-g7ux-4vz2-ckfg
vulnerability_id VCID-g7ux-4vz2-ckfg
summary curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5545.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5545.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-5545
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.11031
published_at 2026-06-08T12:55:00Z
1
value 0.00036
scoring_system epss
scoring_elements 0.11112
published_at 2026-06-07T12:55:00Z
2
value 0.00037
scoring_system epss
scoring_elements 0.11302
published_at 2026-06-05T12:55:00Z
3
value 0.00037
scoring_system epss
scoring_elements 0.11294
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-5545
2
reference_url https://curl.se/docs/CVE-2026-5545.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://curl.se/docs/CVE-2026-5545.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3642555
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://hackerone.com/reports/3642555
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461204
reference_id 2461204
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461204
7
reference_url https://curl.se/docs/CVE-2026-5545.json
reference_id CVE-2026-5545.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://curl.se/docs/CVE-2026-5545.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-5545
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g7ux-4vz2-ckfg
27
url VCID-hhu3-dp3m-gbgm
vulnerability_id VCID-hhu3-dp3m-gbgm
summary Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
reference_id
reference_type
scores
0
value 0.03181
scoring_system epss
scoring_elements 0.872
published_at 2026-06-04T12:55:00Z
1
value 0.03181
scoring_system epss
scoring_elements 0.87223
published_at 2026-06-05T12:55:00Z
2
value 0.03181
scoring_system epss
scoring_elements 0.8722
published_at 2026-06-06T12:55:00Z
3
value 0.03181
scoring_system epss
scoring_elements 0.87218
published_at 2026-06-07T12:55:00Z
4
value 0.03181
scoring_system epss
scoring_elements 0.87214
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
2
reference_url https://curl.se/docs/CVE-2013-2174.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-2174.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=965640
reference_id 965640
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=965640
5
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
6
reference_url https://access.redhat.com/errata/RHSA-2013:0983
reference_id RHSA-2013:0983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0983
7
reference_url https://usn.ubuntu.com/1894-1/
reference_id USN-1894-1
reference_type
scores
url https://usn.ubuntu.com/1894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.31.0
purl pkg:generic/curl.se/curl@7.31.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-2u6v-6vm9-z3by
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3s4s-6c3v-7kgn
10
vulnerability VCID-3xcn-bur1-tkdt
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-51ac-1jc2-vfed
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6fv7-7u2t-gfgb
18
vulnerability VCID-6rk4-vb5u-bkg6
19
vulnerability VCID-738z-myg9-37hr
20
vulnerability VCID-7jrx-ykk8-h3gp
21
vulnerability VCID-7wqd-99h2-e7hk
22
vulnerability VCID-7yvu-s3p2-sfhc
23
vulnerability VCID-8j6v-xbhy-7uc2
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-a8z6-bswu-jue8
26
vulnerability VCID-am31-t2h3-zbgw
27
vulnerability VCID-av4f-gxku-qbhp
28
vulnerability VCID-azcz-b8f2-63be
29
vulnerability VCID-bcuq-n4vb-k7f3
30
vulnerability VCID-bx2m-n5ft-3be8
31
vulnerability VCID-cdar-9qhw-hke7
32
vulnerability VCID-cdzf-3ydt-8bdk
33
vulnerability VCID-cmcn-f8ws-q3h2
34
vulnerability VCID-cxy6-vzz9-w3ff
35
vulnerability VCID-dndt-tapy-23d2
36
vulnerability VCID-e4qf-7gqs-qyg3
37
vulnerability VCID-f276-amhj-9yfx
38
vulnerability VCID-f922-jx9w-mbc5
39
vulnerability VCID-f9nm-d5ax-qkcb
40
vulnerability VCID-fhc8-r8gv-bugj
41
vulnerability VCID-g4n9-kg3s-pfcr
42
vulnerability VCID-g7ux-4vz2-ckfg
43
vulnerability VCID-gnur-763x-qkcu
44
vulnerability VCID-gud1-yg9u-zyfp
45
vulnerability VCID-gueb-wzpx-ufb2
46
vulnerability VCID-h6xj-mys4-pucf
47
vulnerability VCID-jf17-h97b-6bak
48
vulnerability VCID-kkrm-dj79-4ucj
49
vulnerability VCID-msd2-35g9-nyd2
50
vulnerability VCID-naac-snjw-qbad
51
vulnerability VCID-nkmd-xb13-mbg9
52
vulnerability VCID-p8vk-yf66-wbb7
53
vulnerability VCID-p97a-kjpp-f3d8
54
vulnerability VCID-p9v4-nweu-vydg
55
vulnerability VCID-q46r-7nct-s3bw
56
vulnerability VCID-q8ja-keyk-fyfb
57
vulnerability VCID-q8tg-prj1-y7b8
58
vulnerability VCID-q9ht-ra39-kuef
59
vulnerability VCID-qe9z-wuze-tucq
60
vulnerability VCID-r2g9-c896-rkge
61
vulnerability VCID-rfdp-gsgs-eubq
62
vulnerability VCID-rt5e-saz2-j7c9
63
vulnerability VCID-s2gu-8jpq-mub9
64
vulnerability VCID-s6gu-gm97-fyfk
65
vulnerability VCID-secz-78pt-dben
66
vulnerability VCID-sesh-938m-x3f8
67
vulnerability VCID-snsg-c2up-b7cn
68
vulnerability VCID-sutv-qt2x-2yc7
69
vulnerability VCID-swmn-7ns9-ekg1
70
vulnerability VCID-tcxd-z7f3-kkes
71
vulnerability VCID-td39-d3tf-vkhc
72
vulnerability VCID-tn33-re3r-yfhw
73
vulnerability VCID-tyqp-e8cp-dbbm
74
vulnerability VCID-ugrr-z2zv-6qgp
75
vulnerability VCID-uh5a-zcds-3bcc
76
vulnerability VCID-vfc1-yy11-bycp
77
vulnerability VCID-vpkr-9akj-hbf6
78
vulnerability VCID-w472-84ep-fkdx
79
vulnerability VCID-w8ff-vxga-8qcz
80
vulnerability VCID-xgj8-zrta-kub9
81
vulnerability VCID-xsnb-eujr-y7bz
82
vulnerability VCID-xyze-msxs-1qem
83
vulnerability VCID-y44u-23he-aya8
84
vulnerability VCID-z8ex-47nd-47cm
85
vulnerability VCID-zg98-v6dj-s7gv
86
vulnerability VCID-zqyj-7rr3-fqew
87
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.31.0
aliases CVE-2013-2174
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu3-dp3m-gbgm
28
url VCID-jwmh-kyed-1uca
vulnerability_id VCID-jwmh-kyed-1uca
summary Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3185.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3185.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2005-3185
reference_id
reference_type
scores
0
value 0.04852
scoring_system epss
scoring_elements 0.89725
published_at 2026-06-04T12:55:00Z
1
value 0.04852
scoring_system epss
scoring_elements 0.89741
published_at 2026-06-05T12:55:00Z
2
value 0.04852
scoring_system epss
scoring_elements 0.89743
published_at 2026-06-08T12:55:00Z
3
value 0.04852
scoring_system epss
scoring_elements 0.89742
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2005-3185
2
reference_url https://curl.se/docs/CVE-2005-3185.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2005-3185.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3185
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1617794
reference_id 1617794
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1617794
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333734
reference_id 333734
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333734
6
reference_url https://security.gentoo.org/glsa/200510-19
reference_id GLSA-200510-19
reference_type
scores
url https://security.gentoo.org/glsa/200510-19
7
reference_url https://access.redhat.com/errata/RHSA-2005:807
reference_id RHSA-2005:807
reference_type
scores
url https://access.redhat.com/errata/RHSA-2005:807
8
reference_url https://access.redhat.com/errata/RHSA-2005:812
reference_id RHSA-2005:812
reference_type
scores
url https://access.redhat.com/errata/RHSA-2005:812
9
reference_url https://usn.ubuntu.com/205-1/
reference_id USN-205-1
reference_type
scores
url https://usn.ubuntu.com/205-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.15.0
purl pkg:generic/curl.se/curl@7.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-39qh-jayw-g3dh
4
vulnerability VCID-5svr-3vv9-mqea
5
vulnerability VCID-5xjw-u8ad-n3g5
6
vulnerability VCID-64mt-9155-tkbv
7
vulnerability VCID-6fv7-7u2t-gfgb
8
vulnerability VCID-6rk4-vb5u-bkg6
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-8dwr-e4pw-67aq
11
vulnerability VCID-8j6v-xbhy-7uc2
12
vulnerability VCID-a58z-fu87-9ybs
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-acsd-4kqa-dba2
15
vulnerability VCID-am31-t2h3-zbgw
16
vulnerability VCID-av4f-gxku-qbhp
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-cdar-9qhw-hke7
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-dndt-tapy-23d2
23
vulnerability VCID-e4qf-7gqs-qyg3
24
vulnerability VCID-f276-amhj-9yfx
25
vulnerability VCID-f922-jx9w-mbc5
26
vulnerability VCID-f9nm-d5ax-qkcb
27
vulnerability VCID-fhc8-r8gv-bugj
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g72q-eedp-aufb
30
vulnerability VCID-g7ux-4vz2-ckfg
31
vulnerability VCID-hhu3-dp3m-gbgm
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-msd2-35g9-nyd2
34
vulnerability VCID-naac-snjw-qbad
35
vulnerability VCID-p178-tq2e-4ya4
36
vulnerability VCID-p9v4-nweu-vydg
37
vulnerability VCID-q2kb-mjg4-uba1
38
vulnerability VCID-q8ja-keyk-fyfb
39
vulnerability VCID-q9ht-ra39-kuef
40
vulnerability VCID-qe9z-wuze-tucq
41
vulnerability VCID-rfdp-gsgs-eubq
42
vulnerability VCID-rt5e-saz2-j7c9
43
vulnerability VCID-s2gu-8jpq-mub9
44
vulnerability VCID-secz-78pt-dben
45
vulnerability VCID-sesh-938m-x3f8
46
vulnerability VCID-snsg-c2up-b7cn
47
vulnerability VCID-sutv-qt2x-2yc7
48
vulnerability VCID-td39-d3tf-vkhc
49
vulnerability VCID-tn33-re3r-yfhw
50
vulnerability VCID-tyqp-e8cp-dbbm
51
vulnerability VCID-uh5a-zcds-3bcc
52
vulnerability VCID-vfc1-yy11-bycp
53
vulnerability VCID-vnqb-6t3e-rudt
54
vulnerability VCID-w472-84ep-fkdx
55
vulnerability VCID-wc29-pw8g-mkgj
56
vulnerability VCID-xyze-msxs-1qem
57
vulnerability VCID-y44u-23he-aya8
58
vulnerability VCID-y8yr-dfz4-67fp
59
vulnerability VCID-zg98-v6dj-s7gv
60
vulnerability VCID-zqyj-7rr3-fqew
61
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.15.0
aliases CVE-2005-3185
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jwmh-kyed-1uca
29
url VCID-kkrm-dj79-4ucj
vulnerability_id VCID-kkrm-dj79-4ucj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
reference_id
reference_type
scores
0
value 0.00682
scoring_system epss
scoring_elements 0.72057
published_at 2026-06-05T12:55:00Z
1
value 0.00682
scoring_system epss
scoring_elements 0.72027
published_at 2026-06-08T12:55:00Z
2
value 0.00682
scoring_system epss
scoring_elements 0.72041
published_at 2026-06-07T12:55:00Z
3
value 0.00682
scoring_system epss
scoring_elements 0.72064
published_at 2026-06-06T12:55:00Z
4
value 0.00682
scoring_system epss
scoring_elements 0.72016
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
2
reference_url https://curl.se/docs/CVE-2022-27776.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27776.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1547048
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://hackerone.com/reports/1547048
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
reference_id 1010252
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
reference_id 2078408
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
reference_id 7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
23
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
reference_id DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
28
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
29
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
30
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
31
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5m9y-9y57-kqg6
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6en5-etsd-2bce
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-f9nm-d5ax-qkcb
20
vulnerability VCID-fcb7-8163-muf4
21
vulnerability VCID-g4n9-kg3s-pfcr
22
vulnerability VCID-g7ux-4vz2-ckfg
23
vulnerability VCID-gueb-wzpx-ufb2
24
vulnerability VCID-h4nw-va5b-23ef
25
vulnerability VCID-hb4z-s871-d7ck
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-jnq1-hk6d-b3a3
28
vulnerability VCID-k5vr-1fmp-sqbw
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-mqzd-mcw5-s3h6
31
vulnerability VCID-mray-vkqx-5ka7
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-r2g9-c896-rkge
37
vulnerability VCID-razg-yr7y-ukgd
38
vulnerability VCID-secz-78pt-dben
39
vulnerability VCID-sutv-qt2x-2yc7
40
vulnerability VCID-tzs5-qzhn-rqbk
41
vulnerability VCID-u1p8-s8vm-3yer
42
vulnerability VCID-v82t-s9e1-2fbw
43
vulnerability VCID-vpkr-9akj-hbf6
44
vulnerability VCID-w472-84ep-fkdx
45
vulnerability VCID-w8ff-vxga-8qcz
46
vulnerability VCID-wbwx-5vg3-uqcd
47
vulnerability VCID-wgur-psum-pbck
48
vulnerability VCID-wmam-qmmg-6uay
49
vulnerability VCID-xgj8-zrta-kub9
50
vulnerability VCID-y41p-tgpa-m7cs
51
vulnerability VCID-y44u-23he-aya8
52
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27776
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kkrm-dj79-4ucj
30
url VCID-msd2-35g9-nyd2
vulnerability_id VCID-msd2-35g9-nyd2
summary A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24369
published_at 2026-06-05T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24235
published_at 2026-06-08T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24295
published_at 2026-06-07T12:55:00Z
3
value 0.00083
scoring_system epss
scoring_elements 0.2435
published_at 2026-06-06T12:55:00Z
4
value 0.00083
scoring_system epss
scoring_elements 0.24269
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
2
reference_url https://curl.se/docs/CVE-2020-8284.html
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://curl.se/docs/CVE-2020-8284.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/1040166
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://hackerone.com/reports/1040166
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
reference_id 1902667
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
reference_id 977163
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
15
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
17
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://www.debian.org/security/2021/dsa-4881
18
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.gentoo.org/glsa/202012-14
19
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212325
20
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212326
21
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212327
22
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
23
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
25
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
26
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
27
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
28
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
29
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.74.0
purl pkg:generic/curl.se/curl@7.74.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-738z-myg9-37hr
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7yvu-s3p2-sfhc
13
vulnerability VCID-7z3h-9pk3-rqct
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kn6z-caj8-bbc9
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-p155-gbtu-abg1
37
vulnerability VCID-p97a-kjpp-f3d8
38
vulnerability VCID-q8tg-prj1-y7b8
39
vulnerability VCID-r2g9-c896-rkge
40
vulnerability VCID-razg-yr7y-ukgd
41
vulnerability VCID-secz-78pt-dben
42
vulnerability VCID-sutv-qt2x-2yc7
43
vulnerability VCID-td39-d3tf-vkhc
44
vulnerability VCID-tzs5-qzhn-rqbk
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wgur-psum-pbck
52
vulnerability VCID-wmam-qmmg-6uay
53
vulnerability VCID-xgj8-zrta-kub9
54
vulnerability VCID-y41p-tgpa-m7cs
55
vulnerability VCID-y44u-23he-aya8
56
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0
aliases CVE-2020-8284
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-msd2-35g9-nyd2
31
url VCID-naac-snjw-qbad
vulnerability_id VCID-naac-snjw-qbad
summary libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000254
reference_id
reference_type
scores
0
value 0.01318
scoring_system epss
scoring_elements 0.80206
published_at 2026-06-04T12:55:00Z
1
value 0.01318
scoring_system epss
scoring_elements 0.80222
published_at 2026-06-08T12:55:00Z
2
value 0.01318
scoring_system epss
scoring_elements 0.80229
published_at 2026-06-07T12:55:00Z
3
value 0.01318
scoring_system epss
scoring_elements 0.80233
published_at 2026-06-06T12:55:00Z
4
value 0.01318
scoring_system epss
scoring_elements 0.8023
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000254
2
reference_url https://curl.se/docs/CVE-2017-1000254.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-1000254.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:N/A:P
1
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1495541
reference_id 1495541
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1495541
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671
reference_id 877671
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671
9
reference_url https://security.archlinux.org/ASA-201710-2
reference_id ASA-201710-2
reference_type
scores
url https://security.archlinux.org/ASA-201710-2
10
reference_url https://security.archlinux.org/ASA-201710-3
reference_id ASA-201710-3
reference_type
scores
url https://security.archlinux.org/ASA-201710-3
11
reference_url https://security.archlinux.org/ASA-201710-4
reference_id ASA-201710-4
reference_type
scores
url https://security.archlinux.org/ASA-201710-4
12
reference_url https://security.archlinux.org/ASA-201710-5
reference_id ASA-201710-5
reference_type
scores
url https://security.archlinux.org/ASA-201710-5
13
reference_url https://security.archlinux.org/ASA-201710-6
reference_id ASA-201710-6
reference_type
scores
url https://security.archlinux.org/ASA-201710-6
14
reference_url https://security.archlinux.org/ASA-201710-7
reference_id ASA-201710-7
reference_type
scores
url https://security.archlinux.org/ASA-201710-7
15
reference_url https://security.archlinux.org/AVG-371
reference_id AVG-371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-371
16
reference_url https://security.archlinux.org/AVG-386
reference_id AVG-386
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-386
17
reference_url https://security.archlinux.org/AVG-387
reference_id AVG-387
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-387
18
reference_url https://security.archlinux.org/AVG-388
reference_id AVG-388
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-388
19
reference_url https://security.archlinux.org/AVG-389
reference_id AVG-389
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-389
20
reference_url https://security.archlinux.org/AVG-422
reference_id AVG-422
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-422
21
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
url https://security.gentoo.org/glsa/201712-04
22
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
23
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.56.0
purl pkg:generic/curl.se/curl@7.56.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7jrx-ykk8-h3gp
18
vulnerability VCID-7wqd-99h2-e7hk
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-a58z-fu87-9ybs
21
vulnerability VCID-a8z6-bswu-jue8
22
vulnerability VCID-am31-t2h3-zbgw
23
vulnerability VCID-azcz-b8f2-63be
24
vulnerability VCID-bb6v-z8yg-6fe3
25
vulnerability VCID-bcuq-n4vb-k7f3
26
vulnerability VCID-bx2m-n5ft-3be8
27
vulnerability VCID-cdzf-3ydt-8bdk
28
vulnerability VCID-dj48-3dkt-dbdh
29
vulnerability VCID-f7n8-zzhz-fuc8
30
vulnerability VCID-f8vu-23bb-5ue7
31
vulnerability VCID-f9nm-d5ax-qkcb
32
vulnerability VCID-fhc8-r8gv-bugj
33
vulnerability VCID-g4n9-kg3s-pfcr
34
vulnerability VCID-g7ux-4vz2-ckfg
35
vulnerability VCID-gud1-yg9u-zyfp
36
vulnerability VCID-gueb-wzpx-ufb2
37
vulnerability VCID-h6xj-mys4-pucf
38
vulnerability VCID-hhms-2hg6-nke9
39
vulnerability VCID-j688-cyfg-p7gu
40
vulnerability VCID-jnq1-hk6d-b3a3
41
vulnerability VCID-kae8-wmf2-2kf1
42
vulnerability VCID-kkrm-dj79-4ucj
43
vulnerability VCID-kq38-7s5x-nqaz
44
vulnerability VCID-msd2-35g9-nyd2
45
vulnerability VCID-p7mn-a632-c3ag
46
vulnerability VCID-p8vk-yf66-wbb7
47
vulnerability VCID-p97a-kjpp-f3d8
48
vulnerability VCID-q46r-7nct-s3bw
49
vulnerability VCID-q8tg-prj1-y7b8
50
vulnerability VCID-qrnc-7ywu-37cz
51
vulnerability VCID-r2g9-c896-rkge
52
vulnerability VCID-raxd-4nxj-gkhp
53
vulnerability VCID-rt5e-saz2-j7c9
54
vulnerability VCID-secz-78pt-dben
55
vulnerability VCID-sutv-qt2x-2yc7
56
vulnerability VCID-swmn-7ns9-ekg1
57
vulnerability VCID-tcxd-z7f3-kkes
58
vulnerability VCID-td39-d3tf-vkhc
59
vulnerability VCID-tn33-re3r-yfhw
60
vulnerability VCID-uj78-2cgz-zbdb
61
vulnerability VCID-vpkr-9akj-hbf6
62
vulnerability VCID-w472-84ep-fkdx
63
vulnerability VCID-w8ff-vxga-8qcz
64
vulnerability VCID-wmam-qmmg-6uay
65
vulnerability VCID-xgj8-zrta-kub9
66
vulnerability VCID-y41p-tgpa-m7cs
67
vulnerability VCID-y44u-23he-aya8
68
vulnerability VCID-yjtj-ydsg-u7ca
69
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.56.0
aliases CVE-2017-1000254
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-naac-snjw-qbad
32
url VCID-p178-tq2e-4ya4
vulnerability_id VCID-p178-tq2e-4ya4
summary Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?" separator in the hostname portion, which causes a "/" to be prepended to the resulting string.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4077.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-4077.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2005-4077
reference_id
reference_type
scores
0
value 0.00266
scoring_system epss
scoring_elements 0.50289
published_at 2026-06-04T12:55:00Z
1
value 0.00266
scoring_system epss
scoring_elements 0.50351
published_at 2026-06-05T12:55:00Z
2
value 0.00266
scoring_system epss
scoring_elements 0.50358
published_at 2026-06-06T12:55:00Z
3
value 0.00266
scoring_system epss
scoring_elements 0.5034
published_at 2026-06-07T12:55:00Z
4
value 0.00266
scoring_system epss
scoring_elements 0.50311
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2005-4077
2
reference_url https://curl.se/docs/CVE-2005-4077.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2005-4077.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1617850
reference_id 1617850
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1617850
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342339
reference_id 342339
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342339
6
reference_url https://security.gentoo.org/glsa/200512-09
reference_id GLSA-200512-09
reference_type
scores
url https://security.gentoo.org/glsa/200512-09
7
reference_url https://security.gentoo.org/glsa/200603-25
reference_id GLSA-200603-25
reference_type
scores
url https://security.gentoo.org/glsa/200603-25
8
reference_url https://access.redhat.com/errata/RHSA-2005:875
reference_id RHSA-2005:875
reference_type
scores
url https://access.redhat.com/errata/RHSA-2005:875
9
reference_url https://usn.ubuntu.com/228-1/
reference_id USN-228-1
reference_type
scores
url https://usn.ubuntu.com/228-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.15.1
purl pkg:generic/curl.se/curl@7.15.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-39qh-jayw-g3dh
4
vulnerability VCID-5svr-3vv9-mqea
5
vulnerability VCID-5xjw-u8ad-n3g5
6
vulnerability VCID-64mt-9155-tkbv
7
vulnerability VCID-6fv7-7u2t-gfgb
8
vulnerability VCID-6rk4-vb5u-bkg6
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-8dwr-e4pw-67aq
11
vulnerability VCID-8j6v-xbhy-7uc2
12
vulnerability VCID-a58z-fu87-9ybs
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-acsd-4kqa-dba2
15
vulnerability VCID-am31-t2h3-zbgw
16
vulnerability VCID-av4f-gxku-qbhp
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-cdar-9qhw-hke7
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-dndt-tapy-23d2
23
vulnerability VCID-e4qf-7gqs-qyg3
24
vulnerability VCID-f276-amhj-9yfx
25
vulnerability VCID-f922-jx9w-mbc5
26
vulnerability VCID-f9nm-d5ax-qkcb
27
vulnerability VCID-fhc8-r8gv-bugj
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g72q-eedp-aufb
30
vulnerability VCID-g7ux-4vz2-ckfg
31
vulnerability VCID-hhu3-dp3m-gbgm
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-msd2-35g9-nyd2
34
vulnerability VCID-naac-snjw-qbad
35
vulnerability VCID-p9v4-nweu-vydg
36
vulnerability VCID-q2kb-mjg4-uba1
37
vulnerability VCID-q8ja-keyk-fyfb
38
vulnerability VCID-q9ht-ra39-kuef
39
vulnerability VCID-qe9z-wuze-tucq
40
vulnerability VCID-rfdp-gsgs-eubq
41
vulnerability VCID-rt5e-saz2-j7c9
42
vulnerability VCID-s2gu-8jpq-mub9
43
vulnerability VCID-secz-78pt-dben
44
vulnerability VCID-sesh-938m-x3f8
45
vulnerability VCID-snsg-c2up-b7cn
46
vulnerability VCID-sutv-qt2x-2yc7
47
vulnerability VCID-td39-d3tf-vkhc
48
vulnerability VCID-tn33-re3r-yfhw
49
vulnerability VCID-tyqp-e8cp-dbbm
50
vulnerability VCID-uh5a-zcds-3bcc
51
vulnerability VCID-vfc1-yy11-bycp
52
vulnerability VCID-vnqb-6t3e-rudt
53
vulnerability VCID-w472-84ep-fkdx
54
vulnerability VCID-wc29-pw8g-mkgj
55
vulnerability VCID-xyze-msxs-1qem
56
vulnerability VCID-y44u-23he-aya8
57
vulnerability VCID-y8yr-dfz4-67fp
58
vulnerability VCID-zg98-v6dj-s7gv
59
vulnerability VCID-zqyj-7rr3-fqew
60
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.15.1
aliases CVE-2005-4077
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p178-tq2e-4ya4
33
url VCID-p9v4-nweu-vydg
vulnerability_id VCID-p9v4-nweu-vydg
summary cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
reference_id
reference_type
scores
0
value 0.01422
scoring_system epss
scoring_elements 0.80941
published_at 2026-06-04T12:55:00Z
1
value 0.01422
scoring_system epss
scoring_elements 0.8097
published_at 2026-06-05T12:55:00Z
2
value 0.01422
scoring_system epss
scoring_elements 0.80972
published_at 2026-06-06T12:55:00Z
3
value 0.01422
scoring_system epss
scoring_elements 0.80969
published_at 2026-06-07T12:55:00Z
4
value 0.01422
scoring_system epss
scoring_elements 0.80965
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
2
reference_url https://curl.se/docs/CVE-2015-3148.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3148.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
reference_id 1213351
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.42.0
purl pkg:generic/curl.se/curl@7.42.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3s4s-6c3v-7kgn
12
vulnerability VCID-3ws4-1sak-r3ck
13
vulnerability VCID-4hha-2z31-2bf8
14
vulnerability VCID-4zcd-rbx3-qye5
15
vulnerability VCID-51ac-1jc2-vfed
16
vulnerability VCID-5m1h-d3cm-dqfu
17
vulnerability VCID-5svr-3vv9-mqea
18
vulnerability VCID-5ujs-47hf-g7gj
19
vulnerability VCID-5un8-xymy-37bt
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6fv7-7u2t-gfgb
23
vulnerability VCID-6rk4-vb5u-bkg6
24
vulnerability VCID-738z-myg9-37hr
25
vulnerability VCID-7jrx-ykk8-h3gp
26
vulnerability VCID-7wqd-99h2-e7hk
27
vulnerability VCID-7yvu-s3p2-sfhc
28
vulnerability VCID-9rvz-5w86-u7e5
29
vulnerability VCID-a58z-fu87-9ybs
30
vulnerability VCID-a8z6-bswu-jue8
31
vulnerability VCID-am31-t2h3-zbgw
32
vulnerability VCID-av4f-gxku-qbhp
33
vulnerability VCID-azcz-b8f2-63be
34
vulnerability VCID-bb6v-z8yg-6fe3
35
vulnerability VCID-bcuq-n4vb-k7f3
36
vulnerability VCID-bx2m-n5ft-3be8
37
vulnerability VCID-cdar-9qhw-hke7
38
vulnerability VCID-cdzf-3ydt-8bdk
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f276-amhj-9yfx
41
vulnerability VCID-f7n8-zzhz-fuc8
42
vulnerability VCID-f8vu-23bb-5ue7
43
vulnerability VCID-f9nm-d5ax-qkcb
44
vulnerability VCID-fhc8-r8gv-bugj
45
vulnerability VCID-g4n9-kg3s-pfcr
46
vulnerability VCID-g7ux-4vz2-ckfg
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhms-2hg6-nke9
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jf17-h97b-6bak
53
vulnerability VCID-kkrm-dj79-4ucj
54
vulnerability VCID-kq38-7s5x-nqaz
55
vulnerability VCID-mh96-gkf1-9uek
56
vulnerability VCID-mq44-5pmp-2qhh
57
vulnerability VCID-msd2-35g9-nyd2
58
vulnerability VCID-naac-snjw-qbad
59
vulnerability VCID-p8vk-yf66-wbb7
60
vulnerability VCID-p97a-kjpp-f3d8
61
vulnerability VCID-q46r-7nct-s3bw
62
vulnerability VCID-q8ja-keyk-fyfb
63
vulnerability VCID-q8tg-prj1-y7b8
64
vulnerability VCID-qe9z-wuze-tucq
65
vulnerability VCID-qrnc-7ywu-37cz
66
vulnerability VCID-r2g9-c896-rkge
67
vulnerability VCID-rfdp-gsgs-eubq
68
vulnerability VCID-rt5e-saz2-j7c9
69
vulnerability VCID-s2gu-8jpq-mub9
70
vulnerability VCID-secz-78pt-dben
71
vulnerability VCID-sesh-938m-x3f8
72
vulnerability VCID-snsg-c2up-b7cn
73
vulnerability VCID-sutv-qt2x-2yc7
74
vulnerability VCID-swmn-7ns9-ekg1
75
vulnerability VCID-tcxd-z7f3-kkes
76
vulnerability VCID-td39-d3tf-vkhc
77
vulnerability VCID-tn33-re3r-yfhw
78
vulnerability VCID-ugrr-z2zv-6qgp
79
vulnerability VCID-vfc1-yy11-bycp
80
vulnerability VCID-vpkr-9akj-hbf6
81
vulnerability VCID-w472-84ep-fkdx
82
vulnerability VCID-w8ff-vxga-8qcz
83
vulnerability VCID-xgj8-zrta-kub9
84
vulnerability VCID-xyze-msxs-1qem
85
vulnerability VCID-y41p-tgpa-m7cs
86
vulnerability VCID-y44u-23he-aya8
87
vulnerability VCID-yjtj-ydsg-u7ca
88
vulnerability VCID-z8ex-47nd-47cm
89
vulnerability VCID-zg98-v6dj-s7gv
90
vulnerability VCID-zqyj-7rr3-fqew
91
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.42.0
aliases CVE-2015-3148
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p9v4-nweu-vydg
34
url VCID-q2kb-mjg4-uba1
vulnerability_id VCID-q2kb-mjg4-uba1
summary lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2417.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2417
reference_id
reference_type
scores
0
value 0.0733
scoring_system epss
scoring_elements 0.91834
published_at 2026-06-04T12:55:00Z
1
value 0.0733
scoring_system epss
scoring_elements 0.91847
published_at 2026-06-05T12:55:00Z
2
value 0.0733
scoring_system epss
scoring_elements 0.91848
published_at 2026-06-06T12:55:00Z
3
value 0.0733
scoring_system epss
scoring_elements 0.91845
published_at 2026-06-07T12:55:00Z
4
value 0.0733
scoring_system epss
scoring_elements 0.91844
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2417
2
reference_url https://curl.se/docs/CVE-2009-2417.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2009-2417.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=516181
reference_id 516181
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=516181
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541991
reference_id 541991
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541991
6
reference_url https://security.gentoo.org/glsa/200909-20
reference_id GLSA-200909-20
reference_type
scores
url https://security.gentoo.org/glsa/200909-20
7
reference_url https://access.redhat.com/errata/RHSA-2009:1209
reference_id RHSA-2009:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1209
8
reference_url https://usn.ubuntu.com/1158-1/
reference_id USN-1158-1
reference_type
scores
url https://usn.ubuntu.com/1158-1/
9
reference_url https://usn.ubuntu.com/818-1/
reference_id USN-818-1
reference_type
scores
url https://usn.ubuntu.com/818-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.19.6
purl pkg:generic/curl.se/curl@7.19.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-2u6v-6vm9-z3by
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-4zcd-rbx3-qye5
7
vulnerability VCID-5svr-3vv9-mqea
8
vulnerability VCID-5xjw-u8ad-n3g5
9
vulnerability VCID-64mt-9155-tkbv
10
vulnerability VCID-6fv7-7u2t-gfgb
11
vulnerability VCID-6rk4-vb5u-bkg6
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-8j6v-xbhy-7uc2
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-av4f-gxku-qbhp
19
vulnerability VCID-azcz-b8f2-63be
20
vulnerability VCID-bcuq-n4vb-k7f3
21
vulnerability VCID-bx2m-n5ft-3be8
22
vulnerability VCID-cdar-9qhw-hke7
23
vulnerability VCID-cdzf-3ydt-8bdk
24
vulnerability VCID-dndt-tapy-23d2
25
vulnerability VCID-e4qf-7gqs-qyg3
26
vulnerability VCID-f276-amhj-9yfx
27
vulnerability VCID-f922-jx9w-mbc5
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fhc8-r8gv-bugj
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g72q-eedp-aufb
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-hhu3-dp3m-gbgm
35
vulnerability VCID-kkrm-dj79-4ucj
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-nkmd-xb13-mbg9
39
vulnerability VCID-p97a-kjpp-f3d8
40
vulnerability VCID-p9v4-nweu-vydg
41
vulnerability VCID-q8ja-keyk-fyfb
42
vulnerability VCID-q9ht-ra39-kuef
43
vulnerability VCID-qe9z-wuze-tucq
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-rfdp-gsgs-eubq
46
vulnerability VCID-rt5e-saz2-j7c9
47
vulnerability VCID-s2gu-8jpq-mub9
48
vulnerability VCID-secz-78pt-dben
49
vulnerability VCID-sesh-938m-x3f8
50
vulnerability VCID-snsg-c2up-b7cn
51
vulnerability VCID-sutv-qt2x-2yc7
52
vulnerability VCID-tcxd-z7f3-kkes
53
vulnerability VCID-td39-d3tf-vkhc
54
vulnerability VCID-tn33-re3r-yfhw
55
vulnerability VCID-tyqp-e8cp-dbbm
56
vulnerability VCID-ugrr-z2zv-6qgp
57
vulnerability VCID-uh5a-zcds-3bcc
58
vulnerability VCID-vfc1-yy11-bycp
59
vulnerability VCID-vnqb-6t3e-rudt
60
vulnerability VCID-vpkr-9akj-hbf6
61
vulnerability VCID-w472-84ep-fkdx
62
vulnerability VCID-wc29-pw8g-mkgj
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-xyze-msxs-1qem
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-zg98-v6dj-s7gv
67
vulnerability VCID-zqyj-7rr3-fqew
68
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.19.6
aliases CVE-2009-2417
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q2kb-mjg4-uba1
35
url VCID-q8ja-keyk-fyfb
vulnerability_id VCID-q8ja-keyk-fyfb
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8625
reference_id
reference_type
scores
0
value 0.01671
scoring_system epss
scoring_elements 0.82481
published_at 2026-06-08T12:55:00Z
1
value 0.01671
scoring_system epss
scoring_elements 0.82463
published_at 2026-06-04T12:55:00Z
2
value 0.01671
scoring_system epss
scoring_elements 0.82492
published_at 2026-06-05T12:55:00Z
3
value 0.01671
scoring_system epss
scoring_elements 0.8249
published_at 2026-06-06T12:55:00Z
4
value 0.01671
scoring_system epss
scoring_elements 0.82488
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8625
2
reference_url https://curl.se/docs/CVE-2016-8625.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8625.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388392
reference_id 1388392
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388392
6
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
7
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
8
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
9
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
10
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
11
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
12
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
13
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
14
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
15
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
16
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
17
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
18
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8625
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q8ja-keyk-fyfb
36
url VCID-q9ht-ra39-kuef
vulnerability_id VCID-q9ht-ra39-kuef
summary The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
reference_id
reference_type
scores
0
value 0.00666
scoring_system epss
scoring_elements 0.7168
published_at 2026-06-05T12:55:00Z
1
value 0.00666
scoring_system epss
scoring_elements 0.71685
published_at 2026-06-06T12:55:00Z
2
value 0.00666
scoring_system epss
scoring_elements 0.71662
published_at 2026-06-07T12:55:00Z
3
value 0.00666
scoring_system epss
scoring_elements 0.71647
published_at 2026-06-08T12:55:00Z
4
value 0.00903
scoring_system epss
scoring_elements 0.76091
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
2
reference_url https://curl.se/docs/CVE-2014-0138.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0138.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
reference_id 1079148
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
9
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.36.0
purl pkg:generic/curl.se/curl@7.36.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-2u6v-6vm9-z3by
11
vulnerability VCID-39qh-jayw-g3dh
12
vulnerability VCID-3s4s-6c3v-7kgn
13
vulnerability VCID-3ws4-1sak-r3ck
14
vulnerability VCID-3xcn-bur1-tkdt
15
vulnerability VCID-4hha-2z31-2bf8
16
vulnerability VCID-4zcd-rbx3-qye5
17
vulnerability VCID-51ac-1jc2-vfed
18
vulnerability VCID-5svr-3vv9-mqea
19
vulnerability VCID-5ujs-47hf-g7gj
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6fv7-7u2t-gfgb
23
vulnerability VCID-6rk4-vb5u-bkg6
24
vulnerability VCID-738z-myg9-37hr
25
vulnerability VCID-7jrx-ykk8-h3gp
26
vulnerability VCID-7wqd-99h2-e7hk
27
vulnerability VCID-7yvu-s3p2-sfhc
28
vulnerability VCID-8j6v-xbhy-7uc2
29
vulnerability VCID-a58z-fu87-9ybs
30
vulnerability VCID-a8z6-bswu-jue8
31
vulnerability VCID-am31-t2h3-zbgw
32
vulnerability VCID-av4f-gxku-qbhp
33
vulnerability VCID-azcz-b8f2-63be
34
vulnerability VCID-bb6v-z8yg-6fe3
35
vulnerability VCID-bcuq-n4vb-k7f3
36
vulnerability VCID-bx2m-n5ft-3be8
37
vulnerability VCID-cdar-9qhw-hke7
38
vulnerability VCID-cdzf-3ydt-8bdk
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f276-amhj-9yfx
41
vulnerability VCID-f8vu-23bb-5ue7
42
vulnerability VCID-f922-jx9w-mbc5
43
vulnerability VCID-f9nm-d5ax-qkcb
44
vulnerability VCID-fhc8-r8gv-bugj
45
vulnerability VCID-g4n9-kg3s-pfcr
46
vulnerability VCID-g7ux-4vz2-ckfg
47
vulnerability VCID-gnur-763x-qkcu
48
vulnerability VCID-gud1-yg9u-zyfp
49
vulnerability VCID-gueb-wzpx-ufb2
50
vulnerability VCID-h6xj-mys4-pucf
51
vulnerability VCID-hhms-2hg6-nke9
52
vulnerability VCID-j688-cyfg-p7gu
53
vulnerability VCID-jf17-h97b-6bak
54
vulnerability VCID-kkrm-dj79-4ucj
55
vulnerability VCID-kq38-7s5x-nqaz
56
vulnerability VCID-mh96-gkf1-9uek
57
vulnerability VCID-mq44-5pmp-2qhh
58
vulnerability VCID-msd2-35g9-nyd2
59
vulnerability VCID-naac-snjw-qbad
60
vulnerability VCID-p8vk-yf66-wbb7
61
vulnerability VCID-p97a-kjpp-f3d8
62
vulnerability VCID-p9v4-nweu-vydg
63
vulnerability VCID-q46r-7nct-s3bw
64
vulnerability VCID-q8ja-keyk-fyfb
65
vulnerability VCID-q8tg-prj1-y7b8
66
vulnerability VCID-qe9z-wuze-tucq
67
vulnerability VCID-qrnc-7ywu-37cz
68
vulnerability VCID-r2g9-c896-rkge
69
vulnerability VCID-rfdp-gsgs-eubq
70
vulnerability VCID-rt5e-saz2-j7c9
71
vulnerability VCID-s2gu-8jpq-mub9
72
vulnerability VCID-s6gu-gm97-fyfk
73
vulnerability VCID-secz-78pt-dben
74
vulnerability VCID-sesh-938m-x3f8
75
vulnerability VCID-snsg-c2up-b7cn
76
vulnerability VCID-sutv-qt2x-2yc7
77
vulnerability VCID-swmn-7ns9-ekg1
78
vulnerability VCID-tcxd-z7f3-kkes
79
vulnerability VCID-td39-d3tf-vkhc
80
vulnerability VCID-tn33-re3r-yfhw
81
vulnerability VCID-ugrr-z2zv-6qgp
82
vulnerability VCID-uh5a-zcds-3bcc
83
vulnerability VCID-vfc1-yy11-bycp
84
vulnerability VCID-vpkr-9akj-hbf6
85
vulnerability VCID-w472-84ep-fkdx
86
vulnerability VCID-w8ff-vxga-8qcz
87
vulnerability VCID-xgj8-zrta-kub9
88
vulnerability VCID-xyze-msxs-1qem
89
vulnerability VCID-y44u-23he-aya8
90
vulnerability VCID-yjtj-ydsg-u7ca
91
vulnerability VCID-z8ex-47nd-47cm
92
vulnerability VCID-zg98-v6dj-s7gv
93
vulnerability VCID-zqyj-7rr3-fqew
94
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.36.0
aliases CVE-2014-0138
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9ht-ra39-kuef
37
url VCID-qe9z-wuze-tucq
vulnerability_id VCID-qe9z-wuze-tucq
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8616
reference_id
reference_type
scores
0
value 0.04507
scoring_system epss
scoring_elements 0.89343
published_at 2026-06-08T12:55:00Z
1
value 0.04507
scoring_system epss
scoring_elements 0.89342
published_at 2026-06-05T12:55:00Z
2
value 0.04507
scoring_system epss
scoring_elements 0.89324
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8616
2
reference_url https://curl.se/docs/CVE-2016-8616.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8616.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388371
reference_id 1388371
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388371
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
20
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
21
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
22
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
23
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
24
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
25
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
26
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
27
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
28
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8616
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qe9z-wuze-tucq
38
url VCID-rfdp-gsgs-eubq
vulnerability_id VCID-rfdp-gsgs-eubq
summary Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) security.dll, (2) secur32.dll, or (3) ws2_32.dll in the application or current working directory.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4802
reference_id
reference_type
scores
0
value 0.00612
scoring_system epss
scoring_elements 0.70194
published_at 2026-06-04T12:55:00Z
1
value 0.00612
scoring_system epss
scoring_elements 0.70236
published_at 2026-06-05T12:55:00Z
2
value 0.00612
scoring_system epss
scoring_elements 0.70245
published_at 2026-06-06T12:55:00Z
3
value 0.00612
scoring_system epss
scoring_elements 0.70227
published_at 2026-06-07T12:55:00Z
4
value 0.00612
scoring_system epss
scoring_elements 0.70216
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4802
1
reference_url https://curl.se/docs/CVE-2016-4802.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-4802.html
fixed_packages
0
url pkg:generic/curl.se/curl@7.49.1
purl pkg:generic/curl.se/curl@7.49.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3ws4-1sak-r3ck
12
vulnerability VCID-4hha-2z31-2bf8
13
vulnerability VCID-4zcd-rbx3-qye5
14
vulnerability VCID-51ac-1jc2-vfed
15
vulnerability VCID-58p5-pfy3-xug1
16
vulnerability VCID-5svr-3vv9-mqea
17
vulnerability VCID-5ujs-47hf-g7gj
18
vulnerability VCID-5un8-xymy-37bt
19
vulnerability VCID-5xjw-u8ad-n3g5
20
vulnerability VCID-6745-tyba-33fa
21
vulnerability VCID-6rk4-vb5u-bkg6
22
vulnerability VCID-738z-myg9-37hr
23
vulnerability VCID-7jrx-ykk8-h3gp
24
vulnerability VCID-7wqd-99h2-e7hk
25
vulnerability VCID-7yvu-s3p2-sfhc
26
vulnerability VCID-a58z-fu87-9ybs
27
vulnerability VCID-a8z6-bswu-jue8
28
vulnerability VCID-am31-t2h3-zbgw
29
vulnerability VCID-av4f-gxku-qbhp
30
vulnerability VCID-azcz-b8f2-63be
31
vulnerability VCID-bb6v-z8yg-6fe3
32
vulnerability VCID-bcuq-n4vb-k7f3
33
vulnerability VCID-bx2m-n5ft-3be8
34
vulnerability VCID-cdzf-3ydt-8bdk
35
vulnerability VCID-dndt-tapy-23d2
36
vulnerability VCID-f7n8-zzhz-fuc8
37
vulnerability VCID-f8vu-23bb-5ue7
38
vulnerability VCID-f9nm-d5ax-qkcb
39
vulnerability VCID-fhc8-r8gv-bugj
40
vulnerability VCID-g4n9-kg3s-pfcr
41
vulnerability VCID-g7ux-4vz2-ckfg
42
vulnerability VCID-gud1-yg9u-zyfp
43
vulnerability VCID-gueb-wzpx-ufb2
44
vulnerability VCID-h6xj-mys4-pucf
45
vulnerability VCID-hhms-2hg6-nke9
46
vulnerability VCID-j688-cyfg-p7gu
47
vulnerability VCID-jf17-h97b-6bak
48
vulnerability VCID-jnq1-hk6d-b3a3
49
vulnerability VCID-kkrm-dj79-4ucj
50
vulnerability VCID-kq38-7s5x-nqaz
51
vulnerability VCID-mh96-gkf1-9uek
52
vulnerability VCID-mq44-5pmp-2qhh
53
vulnerability VCID-msd2-35g9-nyd2
54
vulnerability VCID-naac-snjw-qbad
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-q46r-7nct-s3bw
58
vulnerability VCID-q8ja-keyk-fyfb
59
vulnerability VCID-q8tg-prj1-y7b8
60
vulnerability VCID-qe9z-wuze-tucq
61
vulnerability VCID-qrnc-7ywu-37cz
62
vulnerability VCID-r2g9-c896-rkge
63
vulnerability VCID-raxd-4nxj-gkhp
64
vulnerability VCID-rt5e-saz2-j7c9
65
vulnerability VCID-s2gu-8jpq-mub9
66
vulnerability VCID-secz-78pt-dben
67
vulnerability VCID-sesh-938m-x3f8
68
vulnerability VCID-snsg-c2up-b7cn
69
vulnerability VCID-sutv-qt2x-2yc7
70
vulnerability VCID-swmn-7ns9-ekg1
71
vulnerability VCID-tcxd-z7f3-kkes
72
vulnerability VCID-td39-d3tf-vkhc
73
vulnerability VCID-tn33-re3r-yfhw
74
vulnerability VCID-ugrr-z2zv-6qgp
75
vulnerability VCID-vfc1-yy11-bycp
76
vulnerability VCID-vpkr-9akj-hbf6
77
vulnerability VCID-w472-84ep-fkdx
78
vulnerability VCID-w8ff-vxga-8qcz
79
vulnerability VCID-wmam-qmmg-6uay
80
vulnerability VCID-xgj8-zrta-kub9
81
vulnerability VCID-xyze-msxs-1qem
82
vulnerability VCID-y41p-tgpa-m7cs
83
vulnerability VCID-y44u-23he-aya8
84
vulnerability VCID-yjtj-ydsg-u7ca
85
vulnerability VCID-z8ex-47nd-47cm
86
vulnerability VCID-zg98-v6dj-s7gv
87
vulnerability VCID-zqyj-7rr3-fqew
88
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.49.1
aliases CVE-2016-4802
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rfdp-gsgs-eubq
39
url VCID-rt5e-saz2-j7c9
vulnerability_id VCID-rt5e-saz2-j7c9
summary libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
reference_id
reference_type
scores
0
value 0.03854
scoring_system epss
scoring_elements 0.88416
published_at 2026-06-04T12:55:00Z
1
value 0.03854
scoring_system epss
scoring_elements 0.88436
published_at 2026-06-06T12:55:00Z
2
value 0.03854
scoring_system epss
scoring_elements 0.88434
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
2
reference_url https://curl.se/docs/CVE-2018-1000007.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000007.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
reference_id 1537125
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
6
reference_url https://security.archlinux.org/ASA-201801-20
reference_id ASA-201801-20
reference_type
scores
url https://security.archlinux.org/ASA-201801-20
7
reference_url https://security.archlinux.org/ASA-201801-22
reference_id ASA-201801-22
reference_type
scores
url https://security.archlinux.org/ASA-201801-22
8
reference_url https://security.archlinux.org/ASA-201801-23
reference_id ASA-201801-23
reference_type
scores
url https://security.archlinux.org/ASA-201801-23
9
reference_url https://security.archlinux.org/ASA-201801-24
reference_id ASA-201801-24
reference_type
scores
url https://security.archlinux.org/ASA-201801-24
10
reference_url https://security.archlinux.org/ASA-201801-25
reference_id ASA-201801-25
reference_type
scores
url https://security.archlinux.org/ASA-201801-25
11
reference_url https://security.archlinux.org/ASA-201801-26
reference_id ASA-201801-26
reference_type
scores
url https://security.archlinux.org/ASA-201801-26
12
reference_url https://security.archlinux.org/AVG-593
reference_id AVG-593
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-593
13
reference_url https://security.archlinux.org/AVG-594
reference_id AVG-594
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-594
14
reference_url https://security.archlinux.org/AVG-595
reference_id AVG-595
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-595
15
reference_url https://security.archlinux.org/AVG-596
reference_id AVG-596
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-596
16
reference_url https://security.archlinux.org/AVG-597
reference_id AVG-597
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-597
17
reference_url https://security.archlinux.org/AVG-598
reference_id AVG-598
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-598
18
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
19
reference_url https://usn.ubuntu.com/3554-1/
reference_id USN-3554-1
reference_type
scores
url https://usn.ubuntu.com/3554-1/
20
reference_url https://usn.ubuntu.com/3554-2/
reference_id USN-3554-2
reference_type
scores
url https://usn.ubuntu.com/3554-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.58.0
purl pkg:generic/curl.se/curl@7.58.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fcb7-8163-muf4
31
vulnerability VCID-fhc8-r8gv-bugj
32
vulnerability VCID-g4n9-kg3s-pfcr
33
vulnerability VCID-g7ux-4vz2-ckfg
34
vulnerability VCID-gud1-yg9u-zyfp
35
vulnerability VCID-gueb-wzpx-ufb2
36
vulnerability VCID-h6xj-mys4-pucf
37
vulnerability VCID-hhms-2hg6-nke9
38
vulnerability VCID-j688-cyfg-p7gu
39
vulnerability VCID-jnq1-hk6d-b3a3
40
vulnerability VCID-kae8-wmf2-2kf1
41
vulnerability VCID-kkrm-dj79-4ucj
42
vulnerability VCID-kq38-7s5x-nqaz
43
vulnerability VCID-msd2-35g9-nyd2
44
vulnerability VCID-p7mn-a632-c3ag
45
vulnerability VCID-p8vk-yf66-wbb7
46
vulnerability VCID-p97a-kjpp-f3d8
47
vulnerability VCID-q46r-7nct-s3bw
48
vulnerability VCID-q8tg-prj1-y7b8
49
vulnerability VCID-qrnc-7ywu-37cz
50
vulnerability VCID-r2g9-c896-rkge
51
vulnerability VCID-secz-78pt-dben
52
vulnerability VCID-sutv-qt2x-2yc7
53
vulnerability VCID-tcxd-z7f3-kkes
54
vulnerability VCID-td39-d3tf-vkhc
55
vulnerability VCID-tn33-re3r-yfhw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-v82t-s9e1-2fbw
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.58.0
aliases CVE-2018-1000007
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rt5e-saz2-j7c9
40
url VCID-s2gu-8jpq-mub9
vulnerability_id VCID-s2gu-8jpq-mub9
summary Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json
reference_id
reference_type
scores
0
value 2.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7167
reference_id
reference_type
scores
0
value 0.02257
scoring_system epss
scoring_elements 0.84935
published_at 2026-06-05T12:55:00Z
1
value 0.02257
scoring_system epss
scoring_elements 0.84925
published_at 2026-06-08T12:55:00Z
2
value 0.02257
scoring_system epss
scoring_elements 0.84934
published_at 2026-06-07T12:55:00Z
3
value 0.02257
scoring_system epss
scoring_elements 0.8491
published_at 2026-06-04T12:55:00Z
4
value 0.02257
scoring_system epss
scoring_elements 0.84939
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7167
2
reference_url https://curl.se/docs/CVE-2016-7167.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-7167.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1375906
reference_id 1375906
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1375906
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837945
reference_id 837945
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837945
7
reference_url https://security.archlinux.org/ASA-201609-18
reference_id ASA-201609-18
reference_type
scores
url https://security.archlinux.org/ASA-201609-18
8
reference_url https://security.archlinux.org/ASA-201609-19
reference_id ASA-201609-19
reference_type
scores
url https://security.archlinux.org/ASA-201609-19
9
reference_url https://security.archlinux.org/AVG-20
reference_id AVG-20
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-20
10
reference_url https://security.archlinux.org/AVG-21
reference_id AVG-21
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-21
11
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
12
reference_url https://access.redhat.com/errata/RHSA-2017:2016
reference_id RHSA-2017:2016
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2016
13
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.50.3
purl pkg:generic/curl.se/curl@7.50.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-39qh-jayw-g3dh
11
vulnerability VCID-3ws4-1sak-r3ck
12
vulnerability VCID-4hha-2z31-2bf8
13
vulnerability VCID-4zcd-rbx3-qye5
14
vulnerability VCID-51ac-1jc2-vfed
15
vulnerability VCID-58p5-pfy3-xug1
16
vulnerability VCID-5svr-3vv9-mqea
17
vulnerability VCID-5ujs-47hf-g7gj
18
vulnerability VCID-5un8-xymy-37bt
19
vulnerability VCID-5xjw-u8ad-n3g5
20
vulnerability VCID-6745-tyba-33fa
21
vulnerability VCID-738z-myg9-37hr
22
vulnerability VCID-7jrx-ykk8-h3gp
23
vulnerability VCID-7wqd-99h2-e7hk
24
vulnerability VCID-7yvu-s3p2-sfhc
25
vulnerability VCID-a58z-fu87-9ybs
26
vulnerability VCID-a8z6-bswu-jue8
27
vulnerability VCID-am31-t2h3-zbgw
28
vulnerability VCID-av4f-gxku-qbhp
29
vulnerability VCID-azcz-b8f2-63be
30
vulnerability VCID-bb6v-z8yg-6fe3
31
vulnerability VCID-bcuq-n4vb-k7f3
32
vulnerability VCID-bx2m-n5ft-3be8
33
vulnerability VCID-cdzf-3ydt-8bdk
34
vulnerability VCID-f7n8-zzhz-fuc8
35
vulnerability VCID-f8vu-23bb-5ue7
36
vulnerability VCID-f9nm-d5ax-qkcb
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-g4n9-kg3s-pfcr
39
vulnerability VCID-g7ux-4vz2-ckfg
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-hhms-2hg6-nke9
44
vulnerability VCID-j688-cyfg-p7gu
45
vulnerability VCID-jf17-h97b-6bak
46
vulnerability VCID-jnq1-hk6d-b3a3
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kq38-7s5x-nqaz
49
vulnerability VCID-mh96-gkf1-9uek
50
vulnerability VCID-msd2-35g9-nyd2
51
vulnerability VCID-naac-snjw-qbad
52
vulnerability VCID-p8vk-yf66-wbb7
53
vulnerability VCID-p97a-kjpp-f3d8
54
vulnerability VCID-q46r-7nct-s3bw
55
vulnerability VCID-q8ja-keyk-fyfb
56
vulnerability VCID-q8tg-prj1-y7b8
57
vulnerability VCID-qe9z-wuze-tucq
58
vulnerability VCID-qrnc-7ywu-37cz
59
vulnerability VCID-r2g9-c896-rkge
60
vulnerability VCID-raxd-4nxj-gkhp
61
vulnerability VCID-rt5e-saz2-j7c9
62
vulnerability VCID-secz-78pt-dben
63
vulnerability VCID-sesh-938m-x3f8
64
vulnerability VCID-snsg-c2up-b7cn
65
vulnerability VCID-sutv-qt2x-2yc7
66
vulnerability VCID-swmn-7ns9-ekg1
67
vulnerability VCID-tcxd-z7f3-kkes
68
vulnerability VCID-td39-d3tf-vkhc
69
vulnerability VCID-tn33-re3r-yfhw
70
vulnerability VCID-vfc1-yy11-bycp
71
vulnerability VCID-vpkr-9akj-hbf6
72
vulnerability VCID-w472-84ep-fkdx
73
vulnerability VCID-w8ff-vxga-8qcz
74
vulnerability VCID-wmam-qmmg-6uay
75
vulnerability VCID-xgj8-zrta-kub9
76
vulnerability VCID-xyze-msxs-1qem
77
vulnerability VCID-y41p-tgpa-m7cs
78
vulnerability VCID-y44u-23he-aya8
79
vulnerability VCID-yjtj-ydsg-u7ca
80
vulnerability VCID-z8ex-47nd-47cm
81
vulnerability VCID-zg98-v6dj-s7gv
82
vulnerability VCID-zqyj-7rr3-fqew
83
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.3
aliases CVE-2016-7167
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s2gu-8jpq-mub9
41
url VCID-sesh-938m-x3f8
vulnerability_id VCID-sesh-938m-x3f8
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
reference_id
reference_type
scores
0
value 0.01811
scoring_system epss
scoring_elements 0.83203
published_at 2026-06-06T12:55:00Z
1
value 0.01811
scoring_system epss
scoring_elements 0.83191
published_at 2026-06-08T12:55:00Z
2
value 0.01811
scoring_system epss
scoring_elements 0.83199
published_at 2026-06-07T12:55:00Z
3
value 0.01811
scoring_system epss
scoring_elements 0.83202
published_at 2026-06-05T12:55:00Z
4
value 0.01811
scoring_system epss
scoring_elements 0.83176
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
2
reference_url https://curl.se/docs/CVE-2016-8618.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8618.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388378
reference_id 1388378
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388378
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
19
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
20
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
21
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
22
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8618
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sesh-938m-x3f8
42
url VCID-snsg-c2up-b7cn
vulnerability_id VCID-snsg-c2up-b7cn
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8623
reference_id
reference_type
scores
0
value 0.0114
scoring_system epss
scoring_elements 0.78774
published_at 2026-06-07T12:55:00Z
1
value 0.0114
scoring_system epss
scoring_elements 0.78764
published_at 2026-06-08T12:55:00Z
2
value 0.0114
scoring_system epss
scoring_elements 0.78784
published_at 2026-06-06T12:55:00Z
3
value 0.01171
scoring_system epss
scoring_elements 0.79018
published_at 2026-06-04T12:55:00Z
4
value 0.01171
scoring_system epss
scoring_elements 0.79044
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8623
2
reference_url https://curl.se/docs/CVE-2016-8623.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8623.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388388
reference_id 1388388
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388388
16
reference_url http://www.securityfocus.com/bid/94106
reference_id 94106
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url http://www.securityfocus.com/bid/94106
17
reference_url https://curl.haxx.se/docs/adv_20161102I.html
reference_id adv_20161102I.html
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://curl.haxx.se/docs/adv_20161102I.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8623.patch
reference_id CVE-2016-8623.patch
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://curl.haxx.se/CVE-2016-8623.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8623
reference_id show_bug.cgi?id=CVE-2016-8623
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8623
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8623
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-snsg-c2up-b7cn
43
url VCID-sutv-qt2x-2yc7
vulnerability_id VCID-sutv-qt2x-2yc7
summary An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
reference_id
reference_type
scores
0
value 0.00631
scoring_system epss
scoring_elements 0.70703
published_at 2026-06-08T12:55:00Z
1
value 0.00631
scoring_system epss
scoring_elements 0.70725
published_at 2026-06-05T12:55:00Z
2
value 0.00631
scoring_system epss
scoring_elements 0.70733
published_at 2026-06-06T12:55:00Z
3
value 0.00631
scoring_system epss
scoring_elements 0.70715
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
2
reference_url https://curl.se/docs/CVE-2023-28322.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28322.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1954658
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://hackerone.com/reports/1954658
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
reference_id 2196793
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
reference_id msg00015.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
20
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
21
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
22
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
23
reference_url https://access.redhat.com/errata/RHSA-2024:0585
reference_id RHSA-2024:0585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0585
24
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
25
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
26
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
27
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
28
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
29
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28322
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sutv-qt2x-2yc7
44
url VCID-td39-d3tf-vkhc
vulnerability_id VCID-td39-d3tf-vkhc
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
reference_id
reference_type
scores
0
value 0.0056
scoring_system epss
scoring_elements 0.68666
published_at 2026-06-08T12:55:00Z
1
value 0.0056
scoring_system epss
scoring_elements 0.68689
published_at 2026-06-06T12:55:00Z
2
value 0.0056
scoring_system epss
scoring_elements 0.68682
published_at 2026-06-07T12:55:00Z
3
value 0.0056
scoring_system epss
scoring_elements 0.68641
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
2
reference_url https://curl.se/docs/CVE-2021-22924.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22924.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1223565
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://hackerone.com/reports/1223565
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
reference_id 1981460
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
21
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
reference_id 991492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
22
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
23
reference_url https://security.archlinux.org/ASA-202107-60
reference_id ASA-202107-60
reference_type
scores
url https://security.archlinux.org/ASA-202107-60
24
reference_url https://security.archlinux.org/ASA-202107-61
reference_id ASA-202107-61
reference_type
scores
url https://security.archlinux.org/ASA-202107-61
25
reference_url https://security.archlinux.org/ASA-202107-62
reference_id ASA-202107-62
reference_type
scores
url https://security.archlinux.org/ASA-202107-62
26
reference_url https://security.archlinux.org/ASA-202107-63
reference_id ASA-202107-63
reference_type
scores
url https://security.archlinux.org/ASA-202107-63
27
reference_url https://security.archlinux.org/ASA-202107-64
reference_id ASA-202107-64
reference_type
scores
url https://security.archlinux.org/ASA-202107-64
28
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
29
reference_url https://security.archlinux.org/AVG-2195
reference_id AVG-2195
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2195
30
reference_url https://security.archlinux.org/AVG-2196
reference_id AVG-2196
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2196
31
reference_url https://security.archlinux.org/AVG-2197
reference_id AVG-2197
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2197
32
reference_url https://security.archlinux.org/AVG-2198
reference_id AVG-2198
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2198
33
reference_url https://security.archlinux.org/AVG-2199
reference_id AVG-2199
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2199
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
reference_id CVE-2021-22924
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
35
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://www.debian.org/security/2022/dsa-5197
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
37
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
38
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
39
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
40
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
44
reference_url https://access.redhat.com/errata/RHSA-2021:3582
reference_id RHSA-2021:3582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3582
45
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
46
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
reference_id ssa-484086.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
47
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
reference_id ssa-732250.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
48
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22924
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-td39-d3tf-vkhc
45
url VCID-tn33-re3r-yfhw
vulnerability_id VCID-tn33-re3r-yfhw
summary 
Out-of-bounds Write
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
references
0
reference_url https://access.redhat.com/errata/RHBA-2019:0327
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2019:0327
1
reference_url https://access.redhat.com/errata/RHSA-2018:3157
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3157
2
reference_url https://access.redhat.com/errata/RHSA-2018:3558
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3558
3
reference_url https://access.redhat.com/errata/RHSA-2019:1543
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1543
4
reference_url https://access.redhat.com/errata/RHSA-2020:0544
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0544
5
reference_url https://access.redhat.com/errata/RHSA-2020:0594
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0594
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
reference_id
reference_type
scores
0
value 0.01298
scoring_system epss
scoring_elements 0.80081
published_at 2026-06-05T12:55:00Z
1
value 0.01298
scoring_system epss
scoring_elements 0.8008
published_at 2026-06-07T12:55:00Z
2
value 0.01298
scoring_system epss
scoring_elements 0.80071
published_at 2026-06-08T12:55:00Z
3
value 0.01298
scoring_system epss
scoring_elements 0.80086
published_at 2026-06-06T12:55:00Z
4
value 0.01298
scoring_system epss
scoring_elements 0.80056
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
8
reference_url https://curl.haxx.se/docs/adv_2018-9cd6.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.haxx.se/docs/adv_2018-9cd6.html
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://github.com/coapp-packages/curl
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/coapp-packages/curl
14
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
15
reference_url https://usn.ubuntu.com/3598-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-1
16
reference_url https://usn.ubuntu.com/3598-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-1/
17
reference_url https://usn.ubuntu.com/3598-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-2
18
reference_url https://usn.ubuntu.com/3598-2/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-2/
19
reference_url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
20
reference_url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
21
reference_url https://www.debian.org/security/2018/dsa-4136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4136
22
reference_url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
23
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
24
reference_url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
25
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
26
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
reference_id 1552628
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
28
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
29
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
30
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
31
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
32
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
33
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
34
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
35
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
36
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
37
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
38
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
39
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
40
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
reference_id CVE-2018-1000120
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
42
reference_url https://curl.se/docs/CVE-2018-1000120.html
reference_id CVE-2018-1000120.HTML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value High
scoring_system cvssv3.1
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.se/docs/CVE-2018-1000120.html
43
reference_url https://github.com/advisories/GHSA-674j-7m97-j2p9
reference_id GHSA-674j-7m97-j2p9
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-674j-7m97-j2p9
44
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:generic/curl.se/curl@7.59.0
purl pkg:generic/curl.se/curl@7.59.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-6745-tyba-33fa
15
vulnerability VCID-738z-myg9-37hr
16
vulnerability VCID-7wqd-99h2-e7hk
17
vulnerability VCID-7yvu-s3p2-sfhc
18
vulnerability VCID-a58z-fu87-9ybs
19
vulnerability VCID-a8z6-bswu-jue8
20
vulnerability VCID-am31-t2h3-zbgw
21
vulnerability VCID-azcz-b8f2-63be
22
vulnerability VCID-bb6v-z8yg-6fe3
23
vulnerability VCID-bcuq-n4vb-k7f3
24
vulnerability VCID-bx2m-n5ft-3be8
25
vulnerability VCID-cdzf-3ydt-8bdk
26
vulnerability VCID-cfry-nx5h-kudv
27
vulnerability VCID-f7n8-zzhz-fuc8
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fcb7-8163-muf4
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p97a-kjpp-f3d8
45
vulnerability VCID-q46r-7nct-s3bw
46
vulnerability VCID-q8tg-prj1-y7b8
47
vulnerability VCID-qrnc-7ywu-37cz
48
vulnerability VCID-r2g9-c896-rkge
49
vulnerability VCID-secz-78pt-dben
50
vulnerability VCID-sutv-qt2x-2yc7
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-ubnn-z97k-47gw
54
vulnerability VCID-uj78-2cgz-zbdb
55
vulnerability VCID-v82t-s9e1-2fbw
56
vulnerability VCID-vpkr-9akj-hbf6
57
vulnerability VCID-w472-84ep-fkdx
58
vulnerability VCID-w8ff-vxga-8qcz
59
vulnerability VCID-wbwx-5vg3-uqcd
60
vulnerability VCID-wmam-qmmg-6uay
61
vulnerability VCID-xgj8-zrta-kub9
62
vulnerability VCID-y41p-tgpa-m7cs
63
vulnerability VCID-y44u-23he-aya8
64
vulnerability VCID-yjtj-ydsg-u7ca
65
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.59.0
aliases CVE-2018-1000120, GHSA-674j-7m97-j2p9
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tn33-re3r-yfhw
46
url VCID-tyqp-e8cp-dbbm
vulnerability_id VCID-tyqp-e8cp-dbbm
summary cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
reference_id
reference_type
scores
0
value 0.01203
scoring_system epss
scoring_elements 0.79289
published_at 2026-06-05T12:55:00Z
1
value 0.01203
scoring_system epss
scoring_elements 0.79294
published_at 2026-06-06T12:55:00Z
2
value 0.01203
scoring_system epss
scoring_elements 0.79287
published_at 2026-06-07T12:55:00Z
3
value 0.01203
scoring_system epss
scoring_elements 0.79276
published_at 2026-06-08T12:55:00Z
4
value 0.01626
scoring_system epss
scoring_elements 0.82203
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
2
reference_url https://curl.se/docs/CVE-2014-0139.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0139.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
reference_id 1079149
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.36.0
purl pkg:generic/curl.se/curl@7.36.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-2u6v-6vm9-z3by
11
vulnerability VCID-39qh-jayw-g3dh
12
vulnerability VCID-3s4s-6c3v-7kgn
13
vulnerability VCID-3ws4-1sak-r3ck
14
vulnerability VCID-3xcn-bur1-tkdt
15
vulnerability VCID-4hha-2z31-2bf8
16
vulnerability VCID-4zcd-rbx3-qye5
17
vulnerability VCID-51ac-1jc2-vfed
18
vulnerability VCID-5svr-3vv9-mqea
19
vulnerability VCID-5ujs-47hf-g7gj
20
vulnerability VCID-5xjw-u8ad-n3g5
21
vulnerability VCID-6745-tyba-33fa
22
vulnerability VCID-6fv7-7u2t-gfgb
23
vulnerability VCID-6rk4-vb5u-bkg6
24
vulnerability VCID-738z-myg9-37hr
25
vulnerability VCID-7jrx-ykk8-h3gp
26
vulnerability VCID-7wqd-99h2-e7hk
27
vulnerability VCID-7yvu-s3p2-sfhc
28
vulnerability VCID-8j6v-xbhy-7uc2
29
vulnerability VCID-a58z-fu87-9ybs
30
vulnerability VCID-a8z6-bswu-jue8
31
vulnerability VCID-am31-t2h3-zbgw
32
vulnerability VCID-av4f-gxku-qbhp
33
vulnerability VCID-azcz-b8f2-63be
34
vulnerability VCID-bb6v-z8yg-6fe3
35
vulnerability VCID-bcuq-n4vb-k7f3
36
vulnerability VCID-bx2m-n5ft-3be8
37
vulnerability VCID-cdar-9qhw-hke7
38
vulnerability VCID-cdzf-3ydt-8bdk
39
vulnerability VCID-dndt-tapy-23d2
40
vulnerability VCID-f276-amhj-9yfx
41
vulnerability VCID-f8vu-23bb-5ue7
42
vulnerability VCID-f922-jx9w-mbc5
43
vulnerability VCID-f9nm-d5ax-qkcb
44
vulnerability VCID-fhc8-r8gv-bugj
45
vulnerability VCID-g4n9-kg3s-pfcr
46
vulnerability VCID-g7ux-4vz2-ckfg
47
vulnerability VCID-gnur-763x-qkcu
48
vulnerability VCID-gud1-yg9u-zyfp
49
vulnerability VCID-gueb-wzpx-ufb2
50
vulnerability VCID-h6xj-mys4-pucf
51
vulnerability VCID-hhms-2hg6-nke9
52
vulnerability VCID-j688-cyfg-p7gu
53
vulnerability VCID-jf17-h97b-6bak
54
vulnerability VCID-kkrm-dj79-4ucj
55
vulnerability VCID-kq38-7s5x-nqaz
56
vulnerability VCID-mh96-gkf1-9uek
57
vulnerability VCID-mq44-5pmp-2qhh
58
vulnerability VCID-msd2-35g9-nyd2
59
vulnerability VCID-naac-snjw-qbad
60
vulnerability VCID-p8vk-yf66-wbb7
61
vulnerability VCID-p97a-kjpp-f3d8
62
vulnerability VCID-p9v4-nweu-vydg
63
vulnerability VCID-q46r-7nct-s3bw
64
vulnerability VCID-q8ja-keyk-fyfb
65
vulnerability VCID-q8tg-prj1-y7b8
66
vulnerability VCID-qe9z-wuze-tucq
67
vulnerability VCID-qrnc-7ywu-37cz
68
vulnerability VCID-r2g9-c896-rkge
69
vulnerability VCID-rfdp-gsgs-eubq
70
vulnerability VCID-rt5e-saz2-j7c9
71
vulnerability VCID-s2gu-8jpq-mub9
72
vulnerability VCID-s6gu-gm97-fyfk
73
vulnerability VCID-secz-78pt-dben
74
vulnerability VCID-sesh-938m-x3f8
75
vulnerability VCID-snsg-c2up-b7cn
76
vulnerability VCID-sutv-qt2x-2yc7
77
vulnerability VCID-swmn-7ns9-ekg1
78
vulnerability VCID-tcxd-z7f3-kkes
79
vulnerability VCID-td39-d3tf-vkhc
80
vulnerability VCID-tn33-re3r-yfhw
81
vulnerability VCID-ugrr-z2zv-6qgp
82
vulnerability VCID-uh5a-zcds-3bcc
83
vulnerability VCID-vfc1-yy11-bycp
84
vulnerability VCID-vpkr-9akj-hbf6
85
vulnerability VCID-w472-84ep-fkdx
86
vulnerability VCID-w8ff-vxga-8qcz
87
vulnerability VCID-xgj8-zrta-kub9
88
vulnerability VCID-xyze-msxs-1qem
89
vulnerability VCID-y44u-23he-aya8
90
vulnerability VCID-yjtj-ydsg-u7ca
91
vulnerability VCID-z8ex-47nd-47cm
92
vulnerability VCID-zg98-v6dj-s7gv
93
vulnerability VCID-zqyj-7rr3-fqew
94
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.36.0
aliases CVE-2014-0139
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tyqp-e8cp-dbbm
47
url VCID-uh5a-zcds-3bcc
vulnerability_id VCID-uh5a-zcds-3bcc
summary cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
reference_id
reference_type
scores
0
value 0.0182
scoring_system epss
scoring_elements 0.83211
published_at 2026-06-04T12:55:00Z
1
value 0.0182
scoring_system epss
scoring_elements 0.83237
published_at 2026-06-05T12:55:00Z
2
value 0.0182
scoring_system epss
scoring_elements 0.83238
published_at 2026-06-06T12:55:00Z
3
value 0.0182
scoring_system epss
scoring_elements 0.83233
published_at 2026-06-07T12:55:00Z
4
value 0.0182
scoring_system epss
scoring_elements 0.83225
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
2
reference_url https://curl.se/docs/CVE-2014-3613.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3613.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
reference_id 1136154
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
5
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
6
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
7
reference_url https://usn.ubuntu.com/2346-1/
reference_id USN-2346-1
reference_type
scores
url https://usn.ubuntu.com/2346-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.38.0
purl pkg:generic/curl.se/curl@7.38.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1y6d-7vfu-ybb3
7
vulnerability VCID-1zsv-4jdy-63en
8
vulnerability VCID-21ff-tazv-9ud3
9
vulnerability VCID-27bv-f11z-myak
10
vulnerability VCID-2u6v-6vm9-z3by
11
vulnerability VCID-39qh-jayw-g3dh
12
vulnerability VCID-3s4s-6c3v-7kgn
13
vulnerability VCID-3ws4-1sak-r3ck
14
vulnerability VCID-3xcn-bur1-tkdt
15
vulnerability VCID-4hha-2z31-2bf8
16
vulnerability VCID-4zcd-rbx3-qye5
17
vulnerability VCID-51ac-1jc2-vfed
18
vulnerability VCID-5sem-gndf-97e6
19
vulnerability VCID-5svr-3vv9-mqea
20
vulnerability VCID-5ujs-47hf-g7gj
21
vulnerability VCID-5xjw-u8ad-n3g5
22
vulnerability VCID-6745-tyba-33fa
23
vulnerability VCID-6fv7-7u2t-gfgb
24
vulnerability VCID-6rk4-vb5u-bkg6
25
vulnerability VCID-738z-myg9-37hr
26
vulnerability VCID-7jrx-ykk8-h3gp
27
vulnerability VCID-7wqd-99h2-e7hk
28
vulnerability VCID-7yvu-s3p2-sfhc
29
vulnerability VCID-8j6v-xbhy-7uc2
30
vulnerability VCID-a58z-fu87-9ybs
31
vulnerability VCID-a8z6-bswu-jue8
32
vulnerability VCID-am31-t2h3-zbgw
33
vulnerability VCID-av4f-gxku-qbhp
34
vulnerability VCID-azcz-b8f2-63be
35
vulnerability VCID-bb6v-z8yg-6fe3
36
vulnerability VCID-bcuq-n4vb-k7f3
37
vulnerability VCID-bx2m-n5ft-3be8
38
vulnerability VCID-cdar-9qhw-hke7
39
vulnerability VCID-cdzf-3ydt-8bdk
40
vulnerability VCID-dndt-tapy-23d2
41
vulnerability VCID-f276-amhj-9yfx
42
vulnerability VCID-f8vu-23bb-5ue7
43
vulnerability VCID-f922-jx9w-mbc5
44
vulnerability VCID-f9nm-d5ax-qkcb
45
vulnerability VCID-fhc8-r8gv-bugj
46
vulnerability VCID-g4n9-kg3s-pfcr
47
vulnerability VCID-g7ux-4vz2-ckfg
48
vulnerability VCID-gud1-yg9u-zyfp
49
vulnerability VCID-gueb-wzpx-ufb2
50
vulnerability VCID-h6xj-mys4-pucf
51
vulnerability VCID-hhms-2hg6-nke9
52
vulnerability VCID-j688-cyfg-p7gu
53
vulnerability VCID-jf17-h97b-6bak
54
vulnerability VCID-kkrm-dj79-4ucj
55
vulnerability VCID-kq38-7s5x-nqaz
56
vulnerability VCID-mh96-gkf1-9uek
57
vulnerability VCID-mq44-5pmp-2qhh
58
vulnerability VCID-msd2-35g9-nyd2
59
vulnerability VCID-naac-snjw-qbad
60
vulnerability VCID-p8vk-yf66-wbb7
61
vulnerability VCID-p97a-kjpp-f3d8
62
vulnerability VCID-p9v4-nweu-vydg
63
vulnerability VCID-q46r-7nct-s3bw
64
vulnerability VCID-q8ja-keyk-fyfb
65
vulnerability VCID-q8tg-prj1-y7b8
66
vulnerability VCID-qe9z-wuze-tucq
67
vulnerability VCID-qrnc-7ywu-37cz
68
vulnerability VCID-r2g9-c896-rkge
69
vulnerability VCID-rfdp-gsgs-eubq
70
vulnerability VCID-rt5e-saz2-j7c9
71
vulnerability VCID-s2gu-8jpq-mub9
72
vulnerability VCID-s6gu-gm97-fyfk
73
vulnerability VCID-secz-78pt-dben
74
vulnerability VCID-sesh-938m-x3f8
75
vulnerability VCID-snsg-c2up-b7cn
76
vulnerability VCID-sutv-qt2x-2yc7
77
vulnerability VCID-swmn-7ns9-ekg1
78
vulnerability VCID-tcxd-z7f3-kkes
79
vulnerability VCID-td39-d3tf-vkhc
80
vulnerability VCID-tn33-re3r-yfhw
81
vulnerability VCID-ugrr-z2zv-6qgp
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w8ff-vxga-8qcz
86
vulnerability VCID-xgj8-zrta-kub9
87
vulnerability VCID-xyze-msxs-1qem
88
vulnerability VCID-y44u-23he-aya8
89
vulnerability VCID-yjtj-ydsg-u7ca
90
vulnerability VCID-z8ex-47nd-47cm
91
vulnerability VCID-zg98-v6dj-s7gv
92
vulnerability VCID-zqyj-7rr3-fqew
93
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.38.0
aliases CVE-2014-3613
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uh5a-zcds-3bcc
48
url VCID-vfc1-yy11-bycp
vulnerability_id VCID-vfc1-yy11-bycp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8619
reference_id
reference_type
scores
0
value 0.03314
scoring_system epss
scoring_elements 0.87504
published_at 2026-06-07T12:55:00Z
1
value 0.03314
scoring_system epss
scoring_elements 0.87505
published_at 2026-06-06T12:55:00Z
2
value 0.03314
scoring_system epss
scoring_elements 0.87506
published_at 2026-06-05T12:55:00Z
3
value 0.03314
scoring_system epss
scoring_elements 0.87485
published_at 2026-06-04T12:55:00Z
4
value 0.03363
scoring_system epss
scoring_elements 0.87587
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8619
2
reference_url https://curl.se/docs/CVE-2016-8619.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8619.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388379
reference_id 1388379
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388379
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
20
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
21
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
22
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
23
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
24
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
25
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
26
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
27
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
28
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8619
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vfc1-yy11-bycp
49
url VCID-vnqb-6t3e-rudt
vulnerability_id VCID-vnqb-6t3e-rudt
summary content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0734.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0734.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0734
reference_id
reference_type
scores
0
value 0.0548
scoring_system epss
scoring_elements 0.9037
published_at 2026-06-04T12:55:00Z
1
value 0.0548
scoring_system epss
scoring_elements 0.90385
published_at 2026-06-05T12:55:00Z
2
value 0.0548
scoring_system epss
scoring_elements 0.90384
published_at 2026-06-06T12:55:00Z
3
value 0.0548
scoring_system epss
scoring_elements 0.90381
published_at 2026-06-07T12:55:00Z
4
value 0.0548
scoring_system epss
scoring_elements 0.90382
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0734
2
reference_url https://curl.se/docs/CVE-2010-0734.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2010-0734.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0734
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0734
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=563220
reference_id 563220
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=563220
5
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
6
reference_url https://access.redhat.com/errata/RHSA-2010:0273
reference_id RHSA-2010:0273
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0273
7
reference_url https://access.redhat.com/errata/RHSA-2010:0329
reference_id RHSA-2010:0329
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0329
8
reference_url https://usn.ubuntu.com/1158-1/
reference_id USN-1158-1
reference_type
scores
url https://usn.ubuntu.com/1158-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.20.0
purl pkg:generic/curl.se/curl@7.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1yr3-4rvr-8kcv
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-39qh-jayw-g3dh
7
vulnerability VCID-4zcd-rbx3-qye5
8
vulnerability VCID-5svr-3vv9-mqea
9
vulnerability VCID-5ujs-47hf-g7gj
10
vulnerability VCID-5xjw-u8ad-n3g5
11
vulnerability VCID-64mt-9155-tkbv
12
vulnerability VCID-6745-tyba-33fa
13
vulnerability VCID-6fv7-7u2t-gfgb
14
vulnerability VCID-6rk4-vb5u-bkg6
15
vulnerability VCID-738z-myg9-37hr
16
vulnerability VCID-7wqd-99h2-e7hk
17
vulnerability VCID-7yvu-s3p2-sfhc
18
vulnerability VCID-8j6v-xbhy-7uc2
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-av4f-gxku-qbhp
23
vulnerability VCID-azcz-b8f2-63be
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdar-9qhw-hke7
27
vulnerability VCID-cdzf-3ydt-8bdk
28
vulnerability VCID-dndt-tapy-23d2
29
vulnerability VCID-e4qf-7gqs-qyg3
30
vulnerability VCID-f276-amhj-9yfx
31
vulnerability VCID-f922-jx9w-mbc5
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g72q-eedp-aufb
36
vulnerability VCID-g7ux-4vz2-ckfg
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhu3-dp3m-gbgm
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-msd2-35g9-nyd2
42
vulnerability VCID-naac-snjw-qbad
43
vulnerability VCID-nkmd-xb13-mbg9
44
vulnerability VCID-p97a-kjpp-f3d8
45
vulnerability VCID-p9v4-nweu-vydg
46
vulnerability VCID-q8ja-keyk-fyfb
47
vulnerability VCID-q8tg-prj1-y7b8
48
vulnerability VCID-q9ht-ra39-kuef
49
vulnerability VCID-qe9z-wuze-tucq
50
vulnerability VCID-r2g9-c896-rkge
51
vulnerability VCID-rfdp-gsgs-eubq
52
vulnerability VCID-rt5e-saz2-j7c9
53
vulnerability VCID-s2gu-8jpq-mub9
54
vulnerability VCID-secz-78pt-dben
55
vulnerability VCID-sesh-938m-x3f8
56
vulnerability VCID-snsg-c2up-b7cn
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-tyqp-e8cp-dbbm
63
vulnerability VCID-ugrr-z2zv-6qgp
64
vulnerability VCID-uh5a-zcds-3bcc
65
vulnerability VCID-v6z8-sjxs-h3f1
66
vulnerability VCID-vfc1-yy11-bycp
67
vulnerability VCID-vpkr-9akj-hbf6
68
vulnerability VCID-w472-84ep-fkdx
69
vulnerability VCID-w8ff-vxga-8qcz
70
vulnerability VCID-wc29-pw8g-mkgj
71
vulnerability VCID-xgj8-zrta-kub9
72
vulnerability VCID-xyze-msxs-1qem
73
vulnerability VCID-y44u-23he-aya8
74
vulnerability VCID-zg98-v6dj-s7gv
75
vulnerability VCID-zqyj-7rr3-fqew
76
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.20.0
aliases CVE-2010-0734
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vnqb-6t3e-rudt
50
url VCID-w472-84ep-fkdx
vulnerability_id VCID-w472-84ep-fkdx
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
reference_id
reference_type
scores
0
value 0.00441
scoring_system epss
scoring_elements 0.63583
published_at 2026-06-06T12:55:00Z
1
value 0.00441
scoring_system epss
scoring_elements 0.63576
published_at 2026-06-05T12:55:00Z
2
value 0.00441
scoring_system epss
scoring_elements 0.63563
published_at 2026-06-08T12:55:00Z
3
value 0.00441
scoring_system epss
scoring_elements 0.63574
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2148242
reference_id
reference_type
scores
url https://hackerone.com/reports/2148242
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
reference_id 2241938
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
7
reference_url http://seclists.org/fulldisclosure/2024/Jan/34
reference_id 34
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/34
8
reference_url http://seclists.org/fulldisclosure/2024/Jan/37
reference_id 37
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/37
9
reference_url http://seclists.org/fulldisclosure/2024/Jan/38
reference_id 38
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/38
10
reference_url https://security.archlinux.org/AVG-2845
reference_id AVG-2845
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2845
11
reference_url https://security.archlinux.org/AVG-2846
reference_id AVG-2846
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2846
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
reference_id CVE-2023-38546
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
13
reference_url https://curl.se/docs/CVE-2023-38546.html
reference_id CVE-2023-38546.HTML
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://curl.se/docs/CVE-2023-38546.html
14
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
15
reference_url https://support.apple.com/kb/HT214036
reference_id HT214036
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214036
16
reference_url https://support.apple.com/kb/HT214057
reference_id HT214057
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214057
17
reference_url https://support.apple.com/kb/HT214058
reference_id HT214058
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214058
18
reference_url https://support.apple.com/kb/HT214063
reference_id HT214063
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214063
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
reference_id OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
20
reference_url https://access.redhat.com/errata/RHSA-2023:5700
reference_id RHSA-2023:5700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5700
21
reference_url https://access.redhat.com/errata/RHSA-2023:5763
reference_id RHSA-2023:5763
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5763
22
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
23
reference_url https://access.redhat.com/errata/RHSA-2023:6745
reference_id RHSA-2023:6745
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6745
24
reference_url https://access.redhat.com/errata/RHSA-2023:7540
reference_id RHSA-2023:7540
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7540
25
reference_url https://access.redhat.com/errata/RHSA-2023:7625
reference_id RHSA-2023:7625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7625
26
reference_url https://access.redhat.com/errata/RHSA-2023:7626
reference_id RHSA-2023:7626
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7626
27
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
28
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
29
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
30
reference_url https://access.redhat.com/errata/RHSA-2024:2101
reference_id RHSA-2024:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2101
31
reference_url https://usn.ubuntu.com/6429-1/
reference_id USN-6429-1
reference_type
scores
url https://usn.ubuntu.com/6429-1/
32
reference_url https://usn.ubuntu.com/6429-2/
reference_id USN-6429-2
reference_type
scores
url https://usn.ubuntu.com/6429-2/
33
reference_url https://usn.ubuntu.com/6429-3/
reference_id USN-6429-3
reference_type
scores
url https://usn.ubuntu.com/6429-3/
34
reference_url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
reference_id viewtopic.php?f=8&t=8868
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
fixed_packages
0
url pkg:generic/curl.se/curl@8.4.0
purl pkg:generic/curl.se/curl@8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-kq38-7s5x-nqaz
17
vulnerability VCID-p155-gbtu-abg1
18
vulnerability VCID-secz-78pt-dben
19
vulnerability VCID-u1p8-s8vm-3yer
20
vulnerability VCID-v82t-s9e1-2fbw
21
vulnerability VCID-w8ff-vxga-8qcz
22
vulnerability VCID-wgur-psum-pbck
23
vulnerability VCID-wmam-qmmg-6uay
24
vulnerability VCID-y41p-tgpa-m7cs
25
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.4.0
aliases CVE-2023-38546
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w472-84ep-fkdx
51
url VCID-wc29-pw8g-mkgj
vulnerability_id VCID-wc29-pw8g-mkgj
summary The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2192
reference_id
reference_type
scores
0
value 0.02049
scoring_system epss
scoring_elements 0.84184
published_at 2026-06-04T12:55:00Z
1
value 0.02049
scoring_system epss
scoring_elements 0.84208
published_at 2026-06-05T12:55:00Z
2
value 0.02049
scoring_system epss
scoring_elements 0.84211
published_at 2026-06-06T12:55:00Z
3
value 0.02049
scoring_system epss
scoring_elements 0.84205
published_at 2026-06-07T12:55:00Z
4
value 0.02049
scoring_system epss
scoring_elements 0.84194
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2192
2
reference_url https://curl.se/docs/CVE-2011-2192.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2011-2192.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631615
reference_id 631615
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631615
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=711454
reference_id 711454
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=711454
6
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
7
reference_url https://access.redhat.com/errata/RHSA-2011:0918
reference_id RHSA-2011:0918
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0918
8
reference_url https://usn.ubuntu.com/1158-1/
reference_id USN-1158-1
reference_type
scores
url https://usn.ubuntu.com/1158-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.21.7
purl pkg:generic/curl.se/curl@7.21.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1yr3-4rvr-8kcv
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-39qh-jayw-g3dh
7
vulnerability VCID-3s4s-6c3v-7kgn
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-5svr-3vv9-mqea
10
vulnerability VCID-5ujs-47hf-g7gj
11
vulnerability VCID-5xjw-u8ad-n3g5
12
vulnerability VCID-64mt-9155-tkbv
13
vulnerability VCID-6745-tyba-33fa
14
vulnerability VCID-6fv7-7u2t-gfgb
15
vulnerability VCID-6rk4-vb5u-bkg6
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7jrx-ykk8-h3gp
18
vulnerability VCID-7wqd-99h2-e7hk
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-8j6v-xbhy-7uc2
21
vulnerability VCID-a58z-fu87-9ybs
22
vulnerability VCID-a8z6-bswu-jue8
23
vulnerability VCID-am31-t2h3-zbgw
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bcuq-n4vb-k7f3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cmcn-f8ws-q3h2
31
vulnerability VCID-dndt-tapy-23d2
32
vulnerability VCID-e4qf-7gqs-qyg3
33
vulnerability VCID-f276-amhj-9yfx
34
vulnerability VCID-f922-jx9w-mbc5
35
vulnerability VCID-f9nm-d5ax-qkcb
36
vulnerability VCID-fhc8-r8gv-bugj
37
vulnerability VCID-g4n9-kg3s-pfcr
38
vulnerability VCID-g72q-eedp-aufb
39
vulnerability VCID-g7ux-4vz2-ckfg
40
vulnerability VCID-gueb-wzpx-ufb2
41
vulnerability VCID-h6xj-mys4-pucf
42
vulnerability VCID-hhu3-dp3m-gbgm
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-msd2-35g9-nyd2
45
vulnerability VCID-naac-snjw-qbad
46
vulnerability VCID-nkmd-xb13-mbg9
47
vulnerability VCID-p8vk-yf66-wbb7
48
vulnerability VCID-p97a-kjpp-f3d8
49
vulnerability VCID-p9v4-nweu-vydg
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8ja-keyk-fyfb
52
vulnerability VCID-q8tg-prj1-y7b8
53
vulnerability VCID-q9ht-ra39-kuef
54
vulnerability VCID-qe9z-wuze-tucq
55
vulnerability VCID-r2g9-c896-rkge
56
vulnerability VCID-rfdp-gsgs-eubq
57
vulnerability VCID-rt5e-saz2-j7c9
58
vulnerability VCID-s2gu-8jpq-mub9
59
vulnerability VCID-secz-78pt-dben
60
vulnerability VCID-sesh-938m-x3f8
61
vulnerability VCID-snsg-c2up-b7cn
62
vulnerability VCID-sutv-qt2x-2yc7
63
vulnerability VCID-swmn-7ns9-ekg1
64
vulnerability VCID-tcxd-z7f3-kkes
65
vulnerability VCID-td39-d3tf-vkhc
66
vulnerability VCID-tn33-re3r-yfhw
67
vulnerability VCID-tyqp-e8cp-dbbm
68
vulnerability VCID-ugrr-z2zv-6qgp
69
vulnerability VCID-uh5a-zcds-3bcc
70
vulnerability VCID-vfc1-yy11-bycp
71
vulnerability VCID-vpkr-9akj-hbf6
72
vulnerability VCID-w472-84ep-fkdx
73
vulnerability VCID-w8ff-vxga-8qcz
74
vulnerability VCID-xgj8-zrta-kub9
75
vulnerability VCID-xyze-msxs-1qem
76
vulnerability VCID-y44u-23he-aya8
77
vulnerability VCID-zg98-v6dj-s7gv
78
vulnerability VCID-zqyj-7rr3-fqew
79
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.21.7
aliases CVE-2011-2192
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wc29-pw8g-mkgj
52
url VCID-xyze-msxs-1qem
vulnerability_id VCID-xyze-msxs-1qem
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8617
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24333
published_at 2026-06-06T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24278
published_at 2026-06-07T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24219
published_at 2026-06-08T12:55:00Z
3
value 0.00085
scoring_system epss
scoring_elements 0.24672
published_at 2026-06-04T12:55:00Z
4
value 0.00085
scoring_system epss
scoring_elements 0.24771
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8617
2
reference_url https://curl.se/docs/CVE-2016-8617.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8617.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388377
reference_id 1388377
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388377
16
reference_url http://www.securityfocus.com/bid/94097
reference_id 94097
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url http://www.securityfocus.com/bid/94097
17
reference_url https://curl.haxx.se/docs/adv_20161102C.html
reference_id adv_20161102C.html
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://curl.haxx.se/docs/adv_20161102C.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8617.patch
reference_id CVE-2016-8617.patch
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://curl.haxx.se/CVE-2016-8617.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617
reference_id show_bug.cgi?id=CVE-2016-8617
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8617
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xyze-msxs-1qem
53
url VCID-y44u-23he-aya8
vulnerability_id VCID-y44u-23he-aya8
summary curl: curl: Unauthorized access due to improper HTTP proxy connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-3784
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07281
published_at 2026-06-08T12:55:00Z
1
value 0.00025
scoring_system epss
scoring_elements 0.07339
published_at 2026-06-05T12:55:00Z
2
value 0.00025
scoring_system epss
scoring_elements 0.07345
published_at 2026-06-06T12:55:00Z
3
value 0.00025
scoring_system epss
scoring_elements 0.07325
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-3784
2
reference_url https://curl.se/docs/CVE-2026-3784.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://curl.se/docs/CVE-2026-3784.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3584903
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://hackerone.com/reports/3584903
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2446449
reference_id 2446449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2446449
7
reference_url https://curl.se/docs/CVE-2026-3784.json
reference_id CVE-2026-3784.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://curl.se/docs/CVE-2026-3784.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
9
reference_url https://usn.ubuntu.com/8084-1/
reference_id USN-8084-1
reference_type
scores
url https://usn.ubuntu.com/8084-1/
10
reference_url https://usn.ubuntu.com/8099-1/
reference_id USN-8099-1
reference_type
scores
url https://usn.ubuntu.com/8099-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.19.0
purl pkg:generic/curl.se/curl@8.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5un8-xymy-37bt
1
vulnerability VCID-9vbs-w124-q3au
2
vulnerability VCID-bcuq-n4vb-k7f3
3
vulnerability VCID-f9nm-d5ax-qkcb
4
vulnerability VCID-g7ux-4vz2-ckfg
5
vulnerability VCID-secz-78pt-dben
6
vulnerability VCID-w8ff-vxga-8qcz
7
vulnerability VCID-wgur-psum-pbck
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0
aliases CVE-2026-3784
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y44u-23he-aya8
54
url VCID-y8yr-dfz4-67fp
vulnerability_id VCID-y8yr-dfz4-67fp
summary The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0037.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-0037
reference_id
reference_type
scores
0
value 0.09919
scoring_system epss
scoring_elements 0.93158
published_at 2026-06-04T12:55:00Z
1
value 0.09919
scoring_system epss
scoring_elements 0.93169
published_at 2026-06-05T12:55:00Z
2
value 0.09919
scoring_system epss
scoring_elements 0.93168
published_at 2026-06-06T12:55:00Z
3
value 0.09919
scoring_system epss
scoring_elements 0.93165
published_at 2026-06-07T12:55:00Z
4
value 0.09919
scoring_system epss
scoring_elements 0.93163
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-0037
2
reference_url https://curl.se/docs/CVE-2009-0037.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2009-0037.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=485271
reference_id 485271
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=485271
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518423
reference_id 518423
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518423
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32834.txt
reference_id CVE-2009-0037;OSVDB-53572
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32834.txt
7
reference_url https://www.securityfocus.com/bid/33962/info
reference_id CVE-2009-0037;OSVDB-53572
reference_type exploit
scores
url https://www.securityfocus.com/bid/33962/info
8
reference_url https://security.gentoo.org/glsa/200903-21
reference_id GLSA-200903-21
reference_type
scores
url https://security.gentoo.org/glsa/200903-21
9
reference_url https://access.redhat.com/errata/RHSA-2009:0341
reference_id RHSA-2009:0341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:0341
10
reference_url https://usn.ubuntu.com/726-1/
reference_id USN-726-1
reference_type
scores
url https://usn.ubuntu.com/726-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.19.4
purl pkg:generic/curl.se/curl@7.19.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-2u6v-6vm9-z3by
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-4zcd-rbx3-qye5
7
vulnerability VCID-5svr-3vv9-mqea
8
vulnerability VCID-5xjw-u8ad-n3g5
9
vulnerability VCID-64mt-9155-tkbv
10
vulnerability VCID-6fv7-7u2t-gfgb
11
vulnerability VCID-6rk4-vb5u-bkg6
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-8j6v-xbhy-7uc2
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-av4f-gxku-qbhp
19
vulnerability VCID-azcz-b8f2-63be
20
vulnerability VCID-bcuq-n4vb-k7f3
21
vulnerability VCID-bx2m-n5ft-3be8
22
vulnerability VCID-cdar-9qhw-hke7
23
vulnerability VCID-cdzf-3ydt-8bdk
24
vulnerability VCID-dndt-tapy-23d2
25
vulnerability VCID-e4qf-7gqs-qyg3
26
vulnerability VCID-f276-amhj-9yfx
27
vulnerability VCID-f922-jx9w-mbc5
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fhc8-r8gv-bugj
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g72q-eedp-aufb
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-hhu3-dp3m-gbgm
35
vulnerability VCID-kkrm-dj79-4ucj
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-nkmd-xb13-mbg9
39
vulnerability VCID-p97a-kjpp-f3d8
40
vulnerability VCID-p9v4-nweu-vydg
41
vulnerability VCID-q2kb-mjg4-uba1
42
vulnerability VCID-q8ja-keyk-fyfb
43
vulnerability VCID-q9ht-ra39-kuef
44
vulnerability VCID-qe9z-wuze-tucq
45
vulnerability VCID-r2g9-c896-rkge
46
vulnerability VCID-rfdp-gsgs-eubq
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-s2gu-8jpq-mub9
49
vulnerability VCID-secz-78pt-dben
50
vulnerability VCID-sesh-938m-x3f8
51
vulnerability VCID-snsg-c2up-b7cn
52
vulnerability VCID-sutv-qt2x-2yc7
53
vulnerability VCID-tcxd-z7f3-kkes
54
vulnerability VCID-td39-d3tf-vkhc
55
vulnerability VCID-tn33-re3r-yfhw
56
vulnerability VCID-tyqp-e8cp-dbbm
57
vulnerability VCID-uh5a-zcds-3bcc
58
vulnerability VCID-vfc1-yy11-bycp
59
vulnerability VCID-vnqb-6t3e-rudt
60
vulnerability VCID-vpkr-9akj-hbf6
61
vulnerability VCID-w472-84ep-fkdx
62
vulnerability VCID-wc29-pw8g-mkgj
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-xyze-msxs-1qem
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-zg98-v6dj-s7gv
67
vulnerability VCID-zqyj-7rr3-fqew
68
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.19.4
aliases CVE-2009-0037
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y8yr-dfz4-67fp
55
url VCID-zqyj-7rr3-fqew
vulnerability_id VCID-zqyj-7rr3-fqew
summary The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json
reference_id
reference_type
scores
0
value 2.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7407
reference_id
reference_type
scores
0
value 0.00196
scoring_system epss
scoring_elements 0.41329
published_at 2026-06-08T12:55:00Z
1
value 0.00196
scoring_system epss
scoring_elements 0.41392
published_at 2026-06-06T12:55:00Z
2
value 0.00196
scoring_system epss
scoring_elements 0.4136
published_at 2026-06-07T12:55:00Z
3
value 0.00201
scoring_system epss
scoring_elements 0.4215
published_at 2026-06-05T12:55:00Z
4
value 0.00201
scoring_system epss
scoring_elements 0.42076
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7407
2
reference_url https://curl.se/docs/CVE-2017-7407.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-7407.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:S/C:P/I:N/A:N
1
value 2.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1439190
reference_id 1439190
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1439190
6
reference_url https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13
reference_id 1890d59905414ab84a35892b2e45833654aa5c13
reference_type
scores
0
value 2.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/
url https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500
reference_id 859500
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500
8
reference_url https://security.gentoo.org/glsa/201709-14
reference_id GLSA-201709-14
reference_type
scores
0
value 2.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/
url https://security.gentoo.org/glsa/201709-14
9
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
10
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.54.0
purl pkg:generic/curl.se/curl@7.54.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15sy-wmte-h3ae
1
vulnerability VCID-18p4-rvxz-pkeu
2
vulnerability VCID-1a1k-d4ez-ybdu
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jnq1-hk6d-b3a3
42
vulnerability VCID-kkrm-dj79-4ucj
43
vulnerability VCID-kq38-7s5x-nqaz
44
vulnerability VCID-mh96-gkf1-9uek
45
vulnerability VCID-msd2-35g9-nyd2
46
vulnerability VCID-naac-snjw-qbad
47
vulnerability VCID-p8vk-yf66-wbb7
48
vulnerability VCID-p97a-kjpp-f3d8
49
vulnerability VCID-q46r-7nct-s3bw
50
vulnerability VCID-q8tg-prj1-y7b8
51
vulnerability VCID-qrnc-7ywu-37cz
52
vulnerability VCID-r2g9-c896-rkge
53
vulnerability VCID-raxd-4nxj-gkhp
54
vulnerability VCID-rt5e-saz2-j7c9
55
vulnerability VCID-secz-78pt-dben
56
vulnerability VCID-sutv-qt2x-2yc7
57
vulnerability VCID-swmn-7ns9-ekg1
58
vulnerability VCID-tcxd-z7f3-kkes
59
vulnerability VCID-td39-d3tf-vkhc
60
vulnerability VCID-tn33-re3r-yfhw
61
vulnerability VCID-uj78-2cgz-zbdb
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.54.0
aliases CVE-2017-7407
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zqyj-7rr3-fqew
56
url VCID-zv25-wupq-bqfk
vulnerability_id VCID-zv25-wupq-bqfk
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8621
reference_id
reference_type
scores
0
value 0.03082
scoring_system epss
scoring_elements 0.87034
published_at 2026-06-06T12:55:00Z
1
value 0.03082
scoring_system epss
scoring_elements 0.87029
published_at 2026-06-07T12:55:00Z
2
value 0.03165
scoring_system epss
scoring_elements 0.8719
published_at 2026-06-05T12:55:00Z
3
value 0.03165
scoring_system epss
scoring_elements 0.87167
published_at 2026-06-04T12:55:00Z
4
value 0.03438
scoring_system epss
scoring_elements 0.87727
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8621
2
reference_url https://curl.se/docs/CVE-2016-8621.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8621.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388385
reference_id 1388385
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388385
16
reference_url http://www.securityfocus.com/bid/94101
reference_id 94101
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url http://www.securityfocus.com/bid/94101
17
reference_url https://curl.haxx.se/docs/adv_20161102G.html
reference_id adv_20161102G.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://curl.haxx.se/docs/adv_20161102G.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8621.patch
reference_id CVE-2016-8621.patch
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://curl.haxx.se/CVE-2016-8621.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621
reference_id show_bug.cgi?id=CVE-2016-8621
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621
33
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://www.tenable.com/security/tns-2016-21
34
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1b5g-9trz-7ufb
3
vulnerability VCID-1dw3-33ju-jkbs
4
vulnerability VCID-1kpz-55f1-f7dj
5
vulnerability VCID-1m1w-rayk-sffe
6
vulnerability VCID-1zsv-4jdy-63en
7
vulnerability VCID-21ff-tazv-9ud3
8
vulnerability VCID-27bv-f11z-myak
9
vulnerability VCID-39qh-jayw-g3dh
10
vulnerability VCID-3ws4-1sak-r3ck
11
vulnerability VCID-4hha-2z31-2bf8
12
vulnerability VCID-4zcd-rbx3-qye5
13
vulnerability VCID-58p5-pfy3-xug1
14
vulnerability VCID-5svr-3vv9-mqea
15
vulnerability VCID-5ujs-47hf-g7gj
16
vulnerability VCID-5un8-xymy-37bt
17
vulnerability VCID-6745-tyba-33fa
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7wqd-99h2-e7hk
21
vulnerability VCID-7yvu-s3p2-sfhc
22
vulnerability VCID-a58z-fu87-9ybs
23
vulnerability VCID-a8z6-bswu-jue8
24
vulnerability VCID-am31-t2h3-zbgw
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bcuq-n4vb-k7f3
28
vulnerability VCID-bx2m-n5ft-3be8
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-f7n8-zzhz-fuc8
31
vulnerability VCID-f8vu-23bb-5ue7
32
vulnerability VCID-f9nm-d5ax-qkcb
33
vulnerability VCID-fhc8-r8gv-bugj
34
vulnerability VCID-g4n9-kg3s-pfcr
35
vulnerability VCID-g7ux-4vz2-ckfg
36
vulnerability VCID-gud1-yg9u-zyfp
37
vulnerability VCID-gueb-wzpx-ufb2
38
vulnerability VCID-h6xj-mys4-pucf
39
vulnerability VCID-hhms-2hg6-nke9
40
vulnerability VCID-j688-cyfg-p7gu
41
vulnerability VCID-jf17-h97b-6bak
42
vulnerability VCID-jnq1-hk6d-b3a3
43
vulnerability VCID-kkrm-dj79-4ucj
44
vulnerability VCID-kq38-7s5x-nqaz
45
vulnerability VCID-mh96-gkf1-9uek
46
vulnerability VCID-msd2-35g9-nyd2
47
vulnerability VCID-naac-snjw-qbad
48
vulnerability VCID-p8vk-yf66-wbb7
49
vulnerability VCID-p97a-kjpp-f3d8
50
vulnerability VCID-q46r-7nct-s3bw
51
vulnerability VCID-q8tg-prj1-y7b8
52
vulnerability VCID-qrnc-7ywu-37cz
53
vulnerability VCID-r2g9-c896-rkge
54
vulnerability VCID-raxd-4nxj-gkhp
55
vulnerability VCID-rt5e-saz2-j7c9
56
vulnerability VCID-secz-78pt-dben
57
vulnerability VCID-sutv-qt2x-2yc7
58
vulnerability VCID-swmn-7ns9-ekg1
59
vulnerability VCID-tcxd-z7f3-kkes
60
vulnerability VCID-td39-d3tf-vkhc
61
vulnerability VCID-tn33-re3r-yfhw
62
vulnerability VCID-vpkr-9akj-hbf6
63
vulnerability VCID-w472-84ep-fkdx
64
vulnerability VCID-w8ff-vxga-8qcz
65
vulnerability VCID-wmam-qmmg-6uay
66
vulnerability VCID-xgj8-zrta-kub9
67
vulnerability VCID-y41p-tgpa-m7cs
68
vulnerability VCID-y44u-23he-aya8
69
vulnerability VCID-yjtj-ydsg-u7ca
70
vulnerability VCID-z8ex-47nd-47cm
71
vulnerability VCID-zg98-v6dj-s7gv
72
vulnerability VCID-zqyj-7rr3-fqew
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8621
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zv25-wupq-bqfk
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.13.2