Lookup for vulnerable packages by Package URL.

Purlpkg:generic/curl.se/curl@5.9.1
Typegeneric
Namespacecurl.se
Namecurl
Version5.9.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version8.20.0
Latest_non_vulnerable_version8.20.0
Affected_by_vulnerabilities
0
url VCID-3kbr-qnc1-2qe5
vulnerability_id VCID-3kbr-qnc1-2qe5
summary cookie leak with IP address as domain
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
reference_id
reference_type
scores
0
value 0.0182
scoring_system epss
scoring_elements 0.83185
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
1
reference_url https://curl.se/docs/CVE-2014-3613.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3613.html
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
3
reference_url https://usn.ubuntu.com/2346-1/
reference_id USN-2346-1
reference_type
scores
url https://usn.ubuntu.com/2346-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.38.0
purl pkg:generic/curl.se/curl@7.38.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-2xx7-bgje-xffr
8
vulnerability VCID-333q-c9qf-vbae
9
vulnerability VCID-33qq-rab3-13hh
10
vulnerability VCID-36hy-wvfw-5bhn
11
vulnerability VCID-37es-qgwr-c3ep
12
vulnerability VCID-3a88-rrsx-bkex
13
vulnerability VCID-3er6-ss7m-xqf1
14
vulnerability VCID-3ga8-md1g-qqgb
15
vulnerability VCID-3shp-e3et-mqf3
16
vulnerability VCID-3vxw-r6zv-syhb
17
vulnerability VCID-42je-5dt6-qfcv
18
vulnerability VCID-43m2-zsez-1kdt
19
vulnerability VCID-4eqe-gybr-33fe
20
vulnerability VCID-4fbt-z885-efdf
21
vulnerability VCID-4k19-9t2q-tucv
22
vulnerability VCID-4mb6-tpsp-p7gt
23
vulnerability VCID-55ts-hggh-2fan
24
vulnerability VCID-57nq-b14c-duew
25
vulnerability VCID-5bqj-5jb4-vqdp
26
vulnerability VCID-5czu-unnz-dqe3
27
vulnerability VCID-66uq-dcdp-zfhd
28
vulnerability VCID-6dst-1qdv-3qc7
29
vulnerability VCID-6e8s-49d3-pfdk
30
vulnerability VCID-6g2m-x1g7-zubg
31
vulnerability VCID-7ama-66qp-f3cc
32
vulnerability VCID-7bqs-7j62-uba5
33
vulnerability VCID-7g9f-6sg4-s3es
34
vulnerability VCID-7r3q-d9jh-vkec
35
vulnerability VCID-82au-sdj4-1bg8
36
vulnerability VCID-8f2r-dvmz-u7bw
37
vulnerability VCID-8mbn-f7qx-dfbg
38
vulnerability VCID-922k-xceg-nkft
39
vulnerability VCID-948z-df6d-3yb9
40
vulnerability VCID-9c2x-g9wr-dbdb
41
vulnerability VCID-9tr9-xdae-gkhu
42
vulnerability VCID-9w51-97c9-4qdm
43
vulnerability VCID-a46m-9jv8-h3dp
44
vulnerability VCID-ar1s-rbmm-wyex
45
vulnerability VCID-b1e2-ngtx-puge
46
vulnerability VCID-b3wx-mq6y-gye7
47
vulnerability VCID-b788-g7hy-xqf9
48
vulnerability VCID-bh36-c1md-p3gs
49
vulnerability VCID-btbt-n6nq-9fer
50
vulnerability VCID-bwys-kp79-7kgb
51
vulnerability VCID-ck4g-j9rq-5kcq
52
vulnerability VCID-cks2-k7t6-a3gt
53
vulnerability VCID-evh5-vmmv-5uee
54
vulnerability VCID-fcav-jjqy-tqfy
55
vulnerability VCID-g4bw-cj2v-c3en
56
vulnerability VCID-gnc8-1tfm-yqbd
57
vulnerability VCID-guru-ff8a-wqgu
58
vulnerability VCID-h1e3-v4dt-ayav
59
vulnerability VCID-h5r1-q326-cyaz
60
vulnerability VCID-h6bv-tsyf-vqcv
61
vulnerability VCID-h9pa-n4v6-c7c6
62
vulnerability VCID-hdnn-2m1x-hydf
63
vulnerability VCID-hfyp-6h1g-ykhk
64
vulnerability VCID-hjn9-ubdc-2qh9
65
vulnerability VCID-hxt8-j2wk-jqbu
66
vulnerability VCID-jrdn-k4c1-hkcs
67
vulnerability VCID-mavm-1p7b-z3gt
68
vulnerability VCID-md9a-5z1n-j7ex
69
vulnerability VCID-ntea-fmp4-u3a5
70
vulnerability VCID-p2fq-tujh-ykgt
71
vulnerability VCID-pce6-p38r-gkhe
72
vulnerability VCID-pvdy-3kvz-tud2
73
vulnerability VCID-pyb7-2c5k-47c4
74
vulnerability VCID-qb3k-dzzx-cyb2
75
vulnerability VCID-qbw7-ay83-rket
76
vulnerability VCID-rmrr-cpq4-9yer
77
vulnerability VCID-syme-mbp9-hbbu
78
vulnerability VCID-t162-92tf-4uef
79
vulnerability VCID-t1rn-wxx1-2qd3
80
vulnerability VCID-tac5-jfmv-3yeq
81
vulnerability VCID-tzdv-3a3k-tyaa
82
vulnerability VCID-unke-kr69-wubn
83
vulnerability VCID-us1y-f2nx-6uhu
84
vulnerability VCID-uv3d-52va-b7hr
85
vulnerability VCID-v8t7-d4zr-3kb5
86
vulnerability VCID-vtd7-gapq-q7ea
87
vulnerability VCID-wqeb-6u57-4bck
88
vulnerability VCID-x6bb-299t-mfhx
89
vulnerability VCID-x7j1-6ju4-v3ce
90
vulnerability VCID-y79j-fe1u-eyc2
91
vulnerability VCID-yf3m-cda8-83bw
92
vulnerability VCID-yq8t-vx5q-k3hp
93
vulnerability VCID-z6a6-ac8q-j7dy
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.38.0
aliases CVE-2014-3613
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3kbr-qnc1-2qe5
1
url VCID-3vxw-r6zv-syhb
vulnerability_id VCID-3vxw-r6zv-syhb
summary control code in cookie denial of service
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52535
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
1
reference_url https://curl.se/docs/CVE-2022-35252.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-35252.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://hackerone.com/reports/1613943
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://hackerone.com/reports/1613943
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
reference_id 1018831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
5
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
6
reference_url http://seclists.org/fulldisclosure/2023/Jan/21
reference_id 21
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/21
7
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.gentoo.org/glsa/202212-01
8
reference_url https://support.apple.com/kb/HT213603
reference_id HT213603
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213603
9
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213604
10
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
11
reference_url https://security.netapp.com/advisory/ntap-20220930-0005/
reference_id ntap-20220930-0005
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.netapp.com/advisory/ntap-20220930-0005/
12
reference_url https://usn.ubuntu.com/5587-1/
reference_id USN-5587-1
reference_type
scores
url https://usn.ubuntu.com/5587-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.85.0
purl pkg:generic/curl.se/curl@7.85.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eyc-44w4-67cb
1
vulnerability VCID-1g9p-du9r-hfdk
2
vulnerability VCID-2fqs-x6nt-87ea
3
vulnerability VCID-2ncy-ud8q-3bgt
4
vulnerability VCID-36hy-wvfw-5bhn
5
vulnerability VCID-39dz-7h6u-d7e6
6
vulnerability VCID-55ts-hggh-2fan
7
vulnerability VCID-56ct-pa4k-83a9
8
vulnerability VCID-5v1w-zggj-4ub6
9
vulnerability VCID-72yf-89en-1fff
10
vulnerability VCID-7r3q-d9jh-vkec
11
vulnerability VCID-84fn-4ybd-sbgs
12
vulnerability VCID-922k-xceg-nkft
13
vulnerability VCID-9c2x-g9wr-dbdb
14
vulnerability VCID-aubk-fp51-x7ed
15
vulnerability VCID-b788-g7hy-xqf9
16
vulnerability VCID-bg42-sjja-2qa6
17
vulnerability VCID-bs39-uk1w-yfcx
18
vulnerability VCID-d72k-u2f3-8ueq
19
vulnerability VCID-eqzr-trfg-3kam
20
vulnerability VCID-evh5-vmmv-5uee
21
vulnerability VCID-g95u-1q59-ckh7
22
vulnerability VCID-guru-ff8a-wqgu
23
vulnerability VCID-h1e3-v4dt-ayav
24
vulnerability VCID-hdnn-2m1x-hydf
25
vulnerability VCID-hfyp-6h1g-ykhk
26
vulnerability VCID-hjn9-ubdc-2qh9
27
vulnerability VCID-hxt8-j2wk-jqbu
28
vulnerability VCID-jrdn-k4c1-hkcs
29
vulnerability VCID-n7e7-j1fz-gbb6
30
vulnerability VCID-nahe-781n-aqhf
31
vulnerability VCID-ntea-fmp4-u3a5
32
vulnerability VCID-pvdy-3kvz-tud2
33
vulnerability VCID-pw7w-s4s1-77fv
34
vulnerability VCID-qb3k-dzzx-cyb2
35
vulnerability VCID-qbw7-ay83-rket
36
vulnerability VCID-s1pj-yhs2-myg6
37
vulnerability VCID-sgvn-hfwe-7kad
38
vulnerability VCID-sz5z-1ktj-bkff
39
vulnerability VCID-t1rn-wxx1-2qd3
40
vulnerability VCID-tbq2-5mpk-47gx
41
vulnerability VCID-u35q-qk4d-k3gd
42
vulnerability VCID-wqeb-6u57-4bck
43
vulnerability VCID-y7n3-4462-wfhz
44
vulnerability VCID-yphr-tywa-jyb2
45
vulnerability VCID-zaur-dwzz-qkgu
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.85.0
aliases CVE-2022-35252
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3vxw-r6zv-syhb
2
url VCID-5nu4-me98-wke7
vulnerability_id VCID-5nu4-me98-wke7
summary cookie domain tailmatch
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
reference_id
reference_type
scores
0
value 0.02482
scoring_system epss
scoring_elements 0.85546
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
1
reference_url https://curl.se/docs/CVE-2013-1944.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-1944.html
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
reference_id 705274
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
3
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
4
reference_url https://usn.ubuntu.com/1801-1/
reference_id USN-1801-1
reference_type
scores
url https://usn.ubuntu.com/1801-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.30.0
purl pkg:generic/curl.se/curl@7.30.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-33at-jrsw-23bg
8
vulnerability VCID-33qq-rab3-13hh
9
vulnerability VCID-37es-qgwr-c3ep
10
vulnerability VCID-3er6-ss7m-xqf1
11
vulnerability VCID-3ga8-md1g-qqgb
12
vulnerability VCID-3kbr-qnc1-2qe5
13
vulnerability VCID-3vxw-r6zv-syhb
14
vulnerability VCID-42je-5dt6-qfcv
15
vulnerability VCID-43m2-zsez-1kdt
16
vulnerability VCID-4eqe-gybr-33fe
17
vulnerability VCID-4fbt-z885-efdf
18
vulnerability VCID-4k19-9t2q-tucv
19
vulnerability VCID-4mb6-tpsp-p7gt
20
vulnerability VCID-57nq-b14c-duew
21
vulnerability VCID-5bqj-5jb4-vqdp
22
vulnerability VCID-5czu-unnz-dqe3
23
vulnerability VCID-6dst-1qdv-3qc7
24
vulnerability VCID-6e8s-49d3-pfdk
25
vulnerability VCID-7ama-66qp-f3cc
26
vulnerability VCID-7bqs-7j62-uba5
27
vulnerability VCID-7g9f-6sg4-s3es
28
vulnerability VCID-7r3q-d9jh-vkec
29
vulnerability VCID-8f2r-dvmz-u7bw
30
vulnerability VCID-922k-xceg-nkft
31
vulnerability VCID-948z-df6d-3yb9
32
vulnerability VCID-9c2x-g9wr-dbdb
33
vulnerability VCID-9tr9-xdae-gkhu
34
vulnerability VCID-9tw4-88jh-qfes
35
vulnerability VCID-a46m-9jv8-h3dp
36
vulnerability VCID-b3wx-mq6y-gye7
37
vulnerability VCID-b788-g7hy-xqf9
38
vulnerability VCID-btbt-n6nq-9fer
39
vulnerability VCID-bwys-kp79-7kgb
40
vulnerability VCID-ck4g-j9rq-5kcq
41
vulnerability VCID-cks2-k7t6-a3gt
42
vulnerability VCID-efue-w21e-rbev
43
vulnerability VCID-eqxv-c77t-p3hy
44
vulnerability VCID-evh5-vmmv-5uee
45
vulnerability VCID-fk4f-1fft-b3gh
46
vulnerability VCID-g4bw-cj2v-c3en
47
vulnerability VCID-gnc8-1tfm-yqbd
48
vulnerability VCID-guru-ff8a-wqgu
49
vulnerability VCID-h1e3-v4dt-ayav
50
vulnerability VCID-h5r1-q326-cyaz
51
vulnerability VCID-h6bv-tsyf-vqcv
52
vulnerability VCID-h9pa-n4v6-c7c6
53
vulnerability VCID-hfyp-6h1g-ykhk
54
vulnerability VCID-hjn9-ubdc-2qh9
55
vulnerability VCID-hxt8-j2wk-jqbu
56
vulnerability VCID-jrdn-k4c1-hkcs
57
vulnerability VCID-mavm-1p7b-z3gt
58
vulnerability VCID-md9a-5z1n-j7ex
59
vulnerability VCID-ntea-fmp4-u3a5
60
vulnerability VCID-p2fq-tujh-ykgt
61
vulnerability VCID-pce6-p38r-gkhe
62
vulnerability VCID-pvdy-3kvz-tud2
63
vulnerability VCID-pyb7-2c5k-47c4
64
vulnerability VCID-qb3k-dzzx-cyb2
65
vulnerability VCID-qbw7-ay83-rket
66
vulnerability VCID-rmrr-cpq4-9yer
67
vulnerability VCID-rsr8-dx1t-tka9
68
vulnerability VCID-syme-mbp9-hbbu
69
vulnerability VCID-t162-92tf-4uef
70
vulnerability VCID-t1rn-wxx1-2qd3
71
vulnerability VCID-tac5-jfmv-3yeq
72
vulnerability VCID-unke-kr69-wubn
73
vulnerability VCID-us1y-f2nx-6uhu
74
vulnerability VCID-uv3d-52va-b7hr
75
vulnerability VCID-v8t7-d4zr-3kb5
76
vulnerability VCID-vtd7-gapq-q7ea
77
vulnerability VCID-whqe-uwbe-wfgf
78
vulnerability VCID-wqeb-6u57-4bck
79
vulnerability VCID-x6bb-299t-mfhx
80
vulnerability VCID-x7j1-6ju4-v3ce
81
vulnerability VCID-y79j-fe1u-eyc2
82
vulnerability VCID-yf3m-cda8-83bw
83
vulnerability VCID-yq8t-vx5q-k3hp
84
vulnerability VCID-z6a6-ac8q-j7dy
85
vulnerability VCID-zupa-pczr-jbch
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.30.0
aliases CVE-2013-1944
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5nu4-me98-wke7
3
url VCID-7g9f-6sg4-s3es
vulnerability_id VCID-7g9f-6sg4-s3es
summary double free in curl_maprintf
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
reference_id
reference_type
scores
0
value 0.01811
scoring_system epss
scoring_elements 0.83152
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
1
reference_url https://curl.se/docs/CVE-2016-8618.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8618.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
4
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
5
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
6
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
7
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
8
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
9
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
10
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2r94-vq93-3kge
5
vulnerability VCID-2wp5-xvyh-cyaa
6
vulnerability VCID-2xx7-bgje-xffr
7
vulnerability VCID-333q-c9qf-vbae
8
vulnerability VCID-36hy-wvfw-5bhn
9
vulnerability VCID-37es-qgwr-c3ep
10
vulnerability VCID-3a88-rrsx-bkex
11
vulnerability VCID-3er6-ss7m-xqf1
12
vulnerability VCID-3ga8-md1g-qqgb
13
vulnerability VCID-3shp-e3et-mqf3
14
vulnerability VCID-3vxw-r6zv-syhb
15
vulnerability VCID-42je-5dt6-qfcv
16
vulnerability VCID-43m2-zsez-1kdt
17
vulnerability VCID-4eqe-gybr-33fe
18
vulnerability VCID-4fbt-z885-efdf
19
vulnerability VCID-4k19-9t2q-tucv
20
vulnerability VCID-55ts-hggh-2fan
21
vulnerability VCID-66uq-dcdp-zfhd
22
vulnerability VCID-6dst-1qdv-3qc7
23
vulnerability VCID-6e8s-49d3-pfdk
24
vulnerability VCID-6g2m-x1g7-zubg
25
vulnerability VCID-7r3q-d9jh-vkec
26
vulnerability VCID-82au-sdj4-1bg8
27
vulnerability VCID-8f2r-dvmz-u7bw
28
vulnerability VCID-922k-xceg-nkft
29
vulnerability VCID-948z-df6d-3yb9
30
vulnerability VCID-9c2x-g9wr-dbdb
31
vulnerability VCID-9tr9-xdae-gkhu
32
vulnerability VCID-ar1s-rbmm-wyex
33
vulnerability VCID-b3wx-mq6y-gye7
34
vulnerability VCID-b788-g7hy-xqf9
35
vulnerability VCID-bg42-sjja-2qa6
36
vulnerability VCID-bs39-uk1w-yfcx
37
vulnerability VCID-cbeq-zwed-2fg8
38
vulnerability VCID-ck4g-j9rq-5kcq
39
vulnerability VCID-evh5-vmmv-5uee
40
vulnerability VCID-g95u-1q59-ckh7
41
vulnerability VCID-gnc8-1tfm-yqbd
42
vulnerability VCID-guru-ff8a-wqgu
43
vulnerability VCID-h1e3-v4dt-ayav
44
vulnerability VCID-h9pa-n4v6-c7c6
45
vulnerability VCID-hdnn-2m1x-hydf
46
vulnerability VCID-hfyp-6h1g-ykhk
47
vulnerability VCID-hjn9-ubdc-2qh9
48
vulnerability VCID-hxt8-j2wk-jqbu
49
vulnerability VCID-jrdn-k4c1-hkcs
50
vulnerability VCID-mavm-1p7b-z3gt
51
vulnerability VCID-ntea-fmp4-u3a5
52
vulnerability VCID-p2fq-tujh-ykgt
53
vulnerability VCID-pce6-p38r-gkhe
54
vulnerability VCID-pvdy-3kvz-tud2
55
vulnerability VCID-pyb7-2c5k-47c4
56
vulnerability VCID-q45p-gz7v-53aa
57
vulnerability VCID-qb3k-dzzx-cyb2
58
vulnerability VCID-qbw7-ay83-rket
59
vulnerability VCID-rmrr-cpq4-9yer
60
vulnerability VCID-syme-mbp9-hbbu
61
vulnerability VCID-sz5z-1ktj-bkff
62
vulnerability VCID-t1rn-wxx1-2qd3
63
vulnerability VCID-tac5-jfmv-3yeq
64
vulnerability VCID-tzdv-3a3k-tyaa
65
vulnerability VCID-us1y-f2nx-6uhu
66
vulnerability VCID-uv3d-52va-b7hr
67
vulnerability VCID-v8t7-d4zr-3kb5
68
vulnerability VCID-w1kv-8hj7-z7a8
69
vulnerability VCID-wqeb-6u57-4bck
70
vulnerability VCID-x6bb-299t-mfhx
71
vulnerability VCID-y79j-fe1u-eyc2
72
vulnerability VCID-yq8t-vx5q-k3hp
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8618
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7g9f-6sg4-s3es
4
url VCID-cks2-k7t6-a3gt
vulnerability_id VCID-cks2-k7t6-a3gt
summary TLS session resumption client cert bypass
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
reference_id
reference_type
scores
0
value 0.01912
scoring_system epss
scoring_elements 0.83606
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
1
reference_url https://curl.se/docs/CVE-2016-5419.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5419.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
4
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.50.1
purl pkg:generic/curl.se/curl@7.50.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-2xx7-bgje-xffr
8
vulnerability VCID-333q-c9qf-vbae
9
vulnerability VCID-33qq-rab3-13hh
10
vulnerability VCID-36hy-wvfw-5bhn
11
vulnerability VCID-37es-qgwr-c3ep
12
vulnerability VCID-3a88-rrsx-bkex
13
vulnerability VCID-3er6-ss7m-xqf1
14
vulnerability VCID-3ga8-md1g-qqgb
15
vulnerability VCID-3shp-e3et-mqf3
16
vulnerability VCID-3vxw-r6zv-syhb
17
vulnerability VCID-42je-5dt6-qfcv
18
vulnerability VCID-43m2-zsez-1kdt
19
vulnerability VCID-4eqe-gybr-33fe
20
vulnerability VCID-4fbt-z885-efdf
21
vulnerability VCID-4k19-9t2q-tucv
22
vulnerability VCID-55ts-hggh-2fan
23
vulnerability VCID-57nq-b14c-duew
24
vulnerability VCID-5czu-unnz-dqe3
25
vulnerability VCID-66uq-dcdp-zfhd
26
vulnerability VCID-6dst-1qdv-3qc7
27
vulnerability VCID-6e8s-49d3-pfdk
28
vulnerability VCID-6g2m-x1g7-zubg
29
vulnerability VCID-7bqs-7j62-uba5
30
vulnerability VCID-7g9f-6sg4-s3es
31
vulnerability VCID-7r3q-d9jh-vkec
32
vulnerability VCID-82au-sdj4-1bg8
33
vulnerability VCID-8f2r-dvmz-u7bw
34
vulnerability VCID-922k-xceg-nkft
35
vulnerability VCID-948z-df6d-3yb9
36
vulnerability VCID-9c2x-g9wr-dbdb
37
vulnerability VCID-9tr9-xdae-gkhu
38
vulnerability VCID-a46m-9jv8-h3dp
39
vulnerability VCID-ar1s-rbmm-wyex
40
vulnerability VCID-b1e2-ngtx-puge
41
vulnerability VCID-b3wx-mq6y-gye7
42
vulnerability VCID-b788-g7hy-xqf9
43
vulnerability VCID-bg42-sjja-2qa6
44
vulnerability VCID-bs39-uk1w-yfcx
45
vulnerability VCID-cbeq-zwed-2fg8
46
vulnerability VCID-ck4g-j9rq-5kcq
47
vulnerability VCID-evh5-vmmv-5uee
48
vulnerability VCID-g4bw-cj2v-c3en
49
vulnerability VCID-g95u-1q59-ckh7
50
vulnerability VCID-gnc8-1tfm-yqbd
51
vulnerability VCID-guru-ff8a-wqgu
52
vulnerability VCID-h1e3-v4dt-ayav
53
vulnerability VCID-h5r1-q326-cyaz
54
vulnerability VCID-h9pa-n4v6-c7c6
55
vulnerability VCID-hdnn-2m1x-hydf
56
vulnerability VCID-hfyp-6h1g-ykhk
57
vulnerability VCID-hjn9-ubdc-2qh9
58
vulnerability VCID-hxt8-j2wk-jqbu
59
vulnerability VCID-jrdn-k4c1-hkcs
60
vulnerability VCID-mavm-1p7b-z3gt
61
vulnerability VCID-md9a-5z1n-j7ex
62
vulnerability VCID-ntea-fmp4-u3a5
63
vulnerability VCID-p2fq-tujh-ykgt
64
vulnerability VCID-pce6-p38r-gkhe
65
vulnerability VCID-pvdy-3kvz-tud2
66
vulnerability VCID-pyb7-2c5k-47c4
67
vulnerability VCID-q45p-gz7v-53aa
68
vulnerability VCID-qb3k-dzzx-cyb2
69
vulnerability VCID-qbw7-ay83-rket
70
vulnerability VCID-rmrr-cpq4-9yer
71
vulnerability VCID-syme-mbp9-hbbu
72
vulnerability VCID-sz5z-1ktj-bkff
73
vulnerability VCID-t162-92tf-4uef
74
vulnerability VCID-t1rn-wxx1-2qd3
75
vulnerability VCID-tac5-jfmv-3yeq
76
vulnerability VCID-tzdv-3a3k-tyaa
77
vulnerability VCID-us1y-f2nx-6uhu
78
vulnerability VCID-uv3d-52va-b7hr
79
vulnerability VCID-v8t7-d4zr-3kb5
80
vulnerability VCID-w1kv-8hj7-z7a8
81
vulnerability VCID-wqeb-6u57-4bck
82
vulnerability VCID-x6bb-299t-mfhx
83
vulnerability VCID-y79j-fe1u-eyc2
84
vulnerability VCID-yq8t-vx5q-k3hp
85
vulnerability VCID-z6a6-ac8q-j7dy
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.50.1
aliases CVE-2016-5419
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cks2-k7t6-a3gt
5
url VCID-eb8m-4cvx-7kex
vulnerability_id VCID-eb8m-4cvx-7kex
summary Proxy Authentication Header Information Leakage
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2003-1605
reference_id
reference_type
scores
0
value 0.00379
scoring_system epss
scoring_elements 0.59683
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2003-1605
1
reference_url https://curl.se/docs/CVE-2003-1605.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2003-1605.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
fixed_packages
0
url pkg:generic/curl.se/curl@7.10.7
purl pkg:generic/curl.se/curl@7.10.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-258j-152p-43dg
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2wp5-xvyh-cyaa
6
vulnerability VCID-3er6-ss7m-xqf1
7
vulnerability VCID-3kbr-qnc1-2qe5
8
vulnerability VCID-3vxw-r6zv-syhb
9
vulnerability VCID-57nq-b14c-duew
10
vulnerability VCID-5nu4-me98-wke7
11
vulnerability VCID-7ama-66qp-f3cc
12
vulnerability VCID-7bqs-7j62-uba5
13
vulnerability VCID-7g9f-6sg4-s3es
14
vulnerability VCID-7pjs-3euy-t7en
15
vulnerability VCID-7r3q-d9jh-vkec
16
vulnerability VCID-7tq8-kvpk-1bd3
17
vulnerability VCID-948z-df6d-3yb9
18
vulnerability VCID-9c2x-g9wr-dbdb
19
vulnerability VCID-9tw4-88jh-qfes
20
vulnerability VCID-b3wx-mq6y-gye7
21
vulnerability VCID-b788-g7hy-xqf9
22
vulnerability VCID-bh7z-r44d-afhu
23
vulnerability VCID-btbt-n6nq-9fer
24
vulnerability VCID-bwys-kp79-7kgb
25
vulnerability VCID-cc14-xuqm-fue4
26
vulnerability VCID-cks2-k7t6-a3gt
27
vulnerability VCID-d7j3-jmjs-rbag
28
vulnerability VCID-eqxv-c77t-p3hy
29
vulnerability VCID-fk4f-1fft-b3gh
30
vulnerability VCID-gnc8-1tfm-yqbd
31
vulnerability VCID-h9pa-n4v6-c7c6
32
vulnerability VCID-hfyp-6h1g-ykhk
33
vulnerability VCID-hjn9-ubdc-2qh9
34
vulnerability VCID-md9a-5z1n-j7ex
35
vulnerability VCID-pvdy-3kvz-tud2
36
vulnerability VCID-qbw7-ay83-rket
37
vulnerability VCID-rmrr-cpq4-9yer
38
vulnerability VCID-rvcr-16nj-r7f7
39
vulnerability VCID-t162-92tf-4uef
40
vulnerability VCID-tac5-jfmv-3yeq
41
vulnerability VCID-unke-kr69-wubn
42
vulnerability VCID-vtd7-gapq-q7ea
43
vulnerability VCID-whqe-uwbe-wfgf
44
vulnerability VCID-x7j1-6ju4-v3ce
45
vulnerability VCID-y79j-fe1u-eyc2
46
vulnerability VCID-yf3m-cda8-83bw
47
vulnerability VCID-yq8t-vx5q-k3hp
48
vulnerability VCID-z6a6-ac8q-j7dy
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.10.7
aliases CVE-2003-1605
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eb8m-4cvx-7kex
6
url VCID-md9a-5z1n-j7ex
vulnerability_id VCID-md9a-5z1n-j7ex
summary cookie injection for other servers
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
reference_id
reference_type
scores
0
value 0.04293
scoring_system epss
scoring_elements 0.89037
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
1
reference_url https://curl.se/docs/CVE-2016-8615.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8615.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securitytracker.com/id/1037192
4
reference_url http://www.securityfocus.com/bid/94096
reference_id 94096
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securityfocus.com/bid/94096
5
reference_url https://curl.haxx.se/docs/adv_20161102A.html
reference_id adv_20161102A.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/docs/adv_20161102A.html
6
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
7
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
8
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
9
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
10
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
11
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
12
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
13
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
14
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
15
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
16
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
17
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
18
reference_url https://curl.haxx.se/CVE-2016-8615.patch
reference_id CVE-2016-8615.patch
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/CVE-2016-8615.patch
19
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://security.gentoo.org/glsa/201701-47
20
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
reference_id show_bug.cgi?id=CVE-2016-8615
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
23
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://www.tenable.com/security/tns-2016-21
24
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.51.0
purl pkg:generic/curl.se/curl@7.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2r94-vq93-3kge
5
vulnerability VCID-2wp5-xvyh-cyaa
6
vulnerability VCID-2xx7-bgje-xffr
7
vulnerability VCID-333q-c9qf-vbae
8
vulnerability VCID-36hy-wvfw-5bhn
9
vulnerability VCID-37es-qgwr-c3ep
10
vulnerability VCID-3a88-rrsx-bkex
11
vulnerability VCID-3er6-ss7m-xqf1
12
vulnerability VCID-3ga8-md1g-qqgb
13
vulnerability VCID-3shp-e3et-mqf3
14
vulnerability VCID-3vxw-r6zv-syhb
15
vulnerability VCID-42je-5dt6-qfcv
16
vulnerability VCID-43m2-zsez-1kdt
17
vulnerability VCID-4eqe-gybr-33fe
18
vulnerability VCID-4fbt-z885-efdf
19
vulnerability VCID-4k19-9t2q-tucv
20
vulnerability VCID-55ts-hggh-2fan
21
vulnerability VCID-66uq-dcdp-zfhd
22
vulnerability VCID-6dst-1qdv-3qc7
23
vulnerability VCID-6e8s-49d3-pfdk
24
vulnerability VCID-6g2m-x1g7-zubg
25
vulnerability VCID-7r3q-d9jh-vkec
26
vulnerability VCID-82au-sdj4-1bg8
27
vulnerability VCID-8f2r-dvmz-u7bw
28
vulnerability VCID-922k-xceg-nkft
29
vulnerability VCID-948z-df6d-3yb9
30
vulnerability VCID-9c2x-g9wr-dbdb
31
vulnerability VCID-9tr9-xdae-gkhu
32
vulnerability VCID-ar1s-rbmm-wyex
33
vulnerability VCID-b3wx-mq6y-gye7
34
vulnerability VCID-b788-g7hy-xqf9
35
vulnerability VCID-bg42-sjja-2qa6
36
vulnerability VCID-bs39-uk1w-yfcx
37
vulnerability VCID-cbeq-zwed-2fg8
38
vulnerability VCID-ck4g-j9rq-5kcq
39
vulnerability VCID-evh5-vmmv-5uee
40
vulnerability VCID-g95u-1q59-ckh7
41
vulnerability VCID-gnc8-1tfm-yqbd
42
vulnerability VCID-guru-ff8a-wqgu
43
vulnerability VCID-h1e3-v4dt-ayav
44
vulnerability VCID-h9pa-n4v6-c7c6
45
vulnerability VCID-hdnn-2m1x-hydf
46
vulnerability VCID-hfyp-6h1g-ykhk
47
vulnerability VCID-hjn9-ubdc-2qh9
48
vulnerability VCID-hxt8-j2wk-jqbu
49
vulnerability VCID-jrdn-k4c1-hkcs
50
vulnerability VCID-mavm-1p7b-z3gt
51
vulnerability VCID-ntea-fmp4-u3a5
52
vulnerability VCID-p2fq-tujh-ykgt
53
vulnerability VCID-pce6-p38r-gkhe
54
vulnerability VCID-pvdy-3kvz-tud2
55
vulnerability VCID-pyb7-2c5k-47c4
56
vulnerability VCID-q45p-gz7v-53aa
57
vulnerability VCID-qb3k-dzzx-cyb2
58
vulnerability VCID-qbw7-ay83-rket
59
vulnerability VCID-rmrr-cpq4-9yer
60
vulnerability VCID-syme-mbp9-hbbu
61
vulnerability VCID-sz5z-1ktj-bkff
62
vulnerability VCID-t1rn-wxx1-2qd3
63
vulnerability VCID-tac5-jfmv-3yeq
64
vulnerability VCID-tzdv-3a3k-tyaa
65
vulnerability VCID-us1y-f2nx-6uhu
66
vulnerability VCID-uv3d-52va-b7hr
67
vulnerability VCID-v8t7-d4zr-3kb5
68
vulnerability VCID-w1kv-8hj7-z7a8
69
vulnerability VCID-wqeb-6u57-4bck
70
vulnerability VCID-x6bb-299t-mfhx
71
vulnerability VCID-y79j-fe1u-eyc2
72
vulnerability VCID-yq8t-vx5q-k3hp
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.51.0
aliases CVE-2016-8615
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-md9a-5z1n-j7ex
7
url VCID-rmrr-cpq4-9yer
vulnerability_id VCID-rmrr-cpq4-9yer
summary trusting FTP PASV responses
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
reference_id
reference_type
scores
0
value 0.00104
scoring_system epss
scoring_elements 0.28001
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
1
reference_url https://curl.se/docs/CVE-2020-8284.html
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://curl.se/docs/CVE-2020-8284.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://hackerone.com/reports/1040166
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://hackerone.com/reports/1040166
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
reference_id 977163
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
5
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
7
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://www.debian.org/security/2021/dsa-4881
8
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.gentoo.org/glsa/202012-14
9
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212325
10
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212326
11
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212327
12
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
13
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
15
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
16
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.74.0
purl pkg:generic/curl.se/curl@7.74.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eyc-44w4-67cb
1
vulnerability VCID-1g9p-du9r-hfdk
2
vulnerability VCID-2fqs-x6nt-87ea
3
vulnerability VCID-2r94-vq93-3kge
4
vulnerability VCID-2wp5-xvyh-cyaa
5
vulnerability VCID-36hy-wvfw-5bhn
6
vulnerability VCID-39dz-7h6u-d7e6
7
vulnerability VCID-3shp-e3et-mqf3
8
vulnerability VCID-3vxw-r6zv-syhb
9
vulnerability VCID-42je-5dt6-qfcv
10
vulnerability VCID-43m2-zsez-1kdt
11
vulnerability VCID-4k19-9t2q-tucv
12
vulnerability VCID-55ts-hggh-2fan
13
vulnerability VCID-56ct-pa4k-83a9
14
vulnerability VCID-6caw-c8nd-wfeh
15
vulnerability VCID-6dst-1qdv-3qc7
16
vulnerability VCID-7r3q-d9jh-vkec
17
vulnerability VCID-7x1f-8c6x-6uaw
18
vulnerability VCID-84fn-4ybd-sbgs
19
vulnerability VCID-922k-xceg-nkft
20
vulnerability VCID-948z-df6d-3yb9
21
vulnerability VCID-9c2x-g9wr-dbdb
22
vulnerability VCID-9rqa-y8fj-zfht
23
vulnerability VCID-ar1s-rbmm-wyex
24
vulnerability VCID-aubk-fp51-x7ed
25
vulnerability VCID-b788-g7hy-xqf9
26
vulnerability VCID-bg42-sjja-2qa6
27
vulnerability VCID-bs39-uk1w-yfcx
28
vulnerability VCID-d764-8d2p-cfak
29
vulnerability VCID-eqzr-trfg-3kam
30
vulnerability VCID-evh5-vmmv-5uee
31
vulnerability VCID-g95u-1q59-ckh7
32
vulnerability VCID-gnc8-1tfm-yqbd
33
vulnerability VCID-guru-ff8a-wqgu
34
vulnerability VCID-h1e3-v4dt-ayav
35
vulnerability VCID-h9pa-n4v6-c7c6
36
vulnerability VCID-hdnn-2m1x-hydf
37
vulnerability VCID-hfyp-6h1g-ykhk
38
vulnerability VCID-hjn9-ubdc-2qh9
39
vulnerability VCID-hxt8-j2wk-jqbu
40
vulnerability VCID-jdnx-1b7b-nye2
41
vulnerability VCID-jrdn-k4c1-hkcs
42
vulnerability VCID-k2cc-pe53-b3bd
43
vulnerability VCID-ntea-fmp4-u3a5
44
vulnerability VCID-pvdy-3kvz-tud2
45
vulnerability VCID-pyb7-2c5k-47c4
46
vulnerability VCID-qb3k-dzzx-cyb2
47
vulnerability VCID-qbw7-ay83-rket
48
vulnerability VCID-sz5z-1ktj-bkff
49
vulnerability VCID-t1rn-wxx1-2qd3
50
vulnerability VCID-tbq2-5mpk-47gx
51
vulnerability VCID-tzdv-3a3k-tyaa
52
vulnerability VCID-utu4-vqyx-rfb8
53
vulnerability VCID-wqeb-6u57-4bck
54
vulnerability VCID-y79j-fe1u-eyc2
55
vulnerability VCID-yphr-tywa-jyb2
56
vulnerability VCID-yq8t-vx5q-k3hp
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0
aliases CVE-2020-8284
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rmrr-cpq4-9yer
8
url VCID-tac5-jfmv-3yeq
vulnerability_id VCID-tac5-jfmv-3yeq
summary printf floating point buffer overflow
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
reference_id
reference_type
scores
0
value 0.01009
scoring_system epss
scoring_elements 0.77389
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
1
reference_url https://curl.se/docs/CVE-2016-9586.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-9586.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.2
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:N/I:N/A:P
1
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url http://www.securitytracker.com/id/1037515
reference_id 1037515
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securitytracker.com/id/1037515
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
reference_id 848958
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
5
reference_url http://www.securityfocus.com/bid/95019
reference_id 95019
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securityfocus.com/bid/95019
6
reference_url https://curl.haxx.se/docs/adv_20161221A.html
reference_id adv_20161221A.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://curl.haxx.se/docs/adv_20161221A.html
7
reference_url https://security.archlinux.org/ASA-201612-22
reference_id ASA-201612-22
reference_type
scores
url https://security.archlinux.org/ASA-201612-22
8
reference_url https://security.archlinux.org/ASA-201701-10
reference_id ASA-201701-10
reference_type
scores
url https://security.archlinux.org/ASA-201701-10
9
reference_url https://security.archlinux.org/ASA-201701-11
reference_id ASA-201701-11
reference_type
scores
url https://security.archlinux.org/ASA-201701-11
10
reference_url https://security.archlinux.org/ASA-201701-7
reference_id ASA-201701-7
reference_type
scores
url https://security.archlinux.org/ASA-201701-7
11
reference_url https://security.archlinux.org/ASA-201701-8
reference_id ASA-201701-8
reference_type
scores
url https://security.archlinux.org/ASA-201701-8
12
reference_url https://security.archlinux.org/ASA-201701-9
reference_id ASA-201701-9
reference_type
scores
url https://security.archlinux.org/ASA-201701-9
13
reference_url https://security.archlinux.org/AVG-112
reference_id AVG-112
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-112
14
reference_url https://security.archlinux.org/AVG-113
reference_id AVG-113
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-113
15
reference_url https://security.archlinux.org/AVG-114
reference_id AVG-114
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-114
16
reference_url https://security.archlinux.org/AVG-115
reference_id AVG-115
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-115
17
reference_url https://security.archlinux.org/AVG-116
reference_id AVG-116
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-116
18
reference_url https://security.archlinux.org/AVG-117
reference_id AVG-117
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-117
19
reference_url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
reference_id curl-7_51_0-162-g3ab3c16
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
20
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://security.gentoo.org/glsa/201701-47
21
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
22
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
23
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
24
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
reference_id show_bug.cgi?id=CVE-2016-9586
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
25
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
26
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.52.0
purl pkg:generic/curl.se/curl@7.52.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-1max-ak81-4kgw
4
vulnerability VCID-2fqs-x6nt-87ea
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-2xx7-bgje-xffr
8
vulnerability VCID-333q-c9qf-vbae
9
vulnerability VCID-36hy-wvfw-5bhn
10
vulnerability VCID-37es-qgwr-c3ep
11
vulnerability VCID-3a88-rrsx-bkex
12
vulnerability VCID-3er6-ss7m-xqf1
13
vulnerability VCID-3ga8-md1g-qqgb
14
vulnerability VCID-3shp-e3et-mqf3
15
vulnerability VCID-3vxw-r6zv-syhb
16
vulnerability VCID-42je-5dt6-qfcv
17
vulnerability VCID-43m2-zsez-1kdt
18
vulnerability VCID-4eqe-gybr-33fe
19
vulnerability VCID-4fbt-z885-efdf
20
vulnerability VCID-4k19-9t2q-tucv
21
vulnerability VCID-55ts-hggh-2fan
22
vulnerability VCID-66uq-dcdp-zfhd
23
vulnerability VCID-6dst-1qdv-3qc7
24
vulnerability VCID-6e8s-49d3-pfdk
25
vulnerability VCID-6g2m-x1g7-zubg
26
vulnerability VCID-78kd-h5g9-4yga
27
vulnerability VCID-7r3q-d9jh-vkec
28
vulnerability VCID-82au-sdj4-1bg8
29
vulnerability VCID-922k-xceg-nkft
30
vulnerability VCID-948z-df6d-3yb9
31
vulnerability VCID-9c2x-g9wr-dbdb
32
vulnerability VCID-9tr9-xdae-gkhu
33
vulnerability VCID-ar1s-rbmm-wyex
34
vulnerability VCID-b3wx-mq6y-gye7
35
vulnerability VCID-b788-g7hy-xqf9
36
vulnerability VCID-bg42-sjja-2qa6
37
vulnerability VCID-bs39-uk1w-yfcx
38
vulnerability VCID-cbeq-zwed-2fg8
39
vulnerability VCID-ck4g-j9rq-5kcq
40
vulnerability VCID-evh5-vmmv-5uee
41
vulnerability VCID-fv79-zqt1-n7hc
42
vulnerability VCID-g95u-1q59-ckh7
43
vulnerability VCID-gnc8-1tfm-yqbd
44
vulnerability VCID-guru-ff8a-wqgu
45
vulnerability VCID-h1e3-v4dt-ayav
46
vulnerability VCID-h9pa-n4v6-c7c6
47
vulnerability VCID-hdnn-2m1x-hydf
48
vulnerability VCID-hfyp-6h1g-ykhk
49
vulnerability VCID-hjn9-ubdc-2qh9
50
vulnerability VCID-hxt8-j2wk-jqbu
51
vulnerability VCID-jrdn-k4c1-hkcs
52
vulnerability VCID-mavm-1p7b-z3gt
53
vulnerability VCID-ntea-fmp4-u3a5
54
vulnerability VCID-p2fq-tujh-ykgt
55
vulnerability VCID-pce6-p38r-gkhe
56
vulnerability VCID-pvdy-3kvz-tud2
57
vulnerability VCID-pyb7-2c5k-47c4
58
vulnerability VCID-q45p-gz7v-53aa
59
vulnerability VCID-qb3k-dzzx-cyb2
60
vulnerability VCID-qbw7-ay83-rket
61
vulnerability VCID-qe3j-eh1s-t3fv
62
vulnerability VCID-rmrr-cpq4-9yer
63
vulnerability VCID-syme-mbp9-hbbu
64
vulnerability VCID-sz5z-1ktj-bkff
65
vulnerability VCID-t1rn-wxx1-2qd3
66
vulnerability VCID-tzdv-3a3k-tyaa
67
vulnerability VCID-uv3d-52va-b7hr
68
vulnerability VCID-v8t7-d4zr-3kb5
69
vulnerability VCID-w1kv-8hj7-z7a8
70
vulnerability VCID-wqeb-6u57-4bck
71
vulnerability VCID-x6bb-299t-mfhx
72
vulnerability VCID-y79j-fe1u-eyc2
73
vulnerability VCID-yq8t-vx5q-k3hp
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.52.0
aliases CVE-2016-9586
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tac5-jfmv-3yeq
9
url VCID-unke-kr69-wubn
vulnerability_id VCID-unke-kr69-wubn
summary sensitive HTTP server headers also sent to proxies
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
reference_id
reference_type
scores
0
value 0.08372
scoring_system epss
scoring_elements 0.92434
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
1
reference_url https://curl.se/docs/CVE-2015-3153.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3153.html
2
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.42.1
purl pkg:generic/curl.se/curl@7.42.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-2xx7-bgje-xffr
8
vulnerability VCID-333q-c9qf-vbae
9
vulnerability VCID-33qq-rab3-13hh
10
vulnerability VCID-36hy-wvfw-5bhn
11
vulnerability VCID-37es-qgwr-c3ep
12
vulnerability VCID-3a88-rrsx-bkex
13
vulnerability VCID-3er6-ss7m-xqf1
14
vulnerability VCID-3ga8-md1g-qqgb
15
vulnerability VCID-3shp-e3et-mqf3
16
vulnerability VCID-3vxw-r6zv-syhb
17
vulnerability VCID-42je-5dt6-qfcv
18
vulnerability VCID-43m2-zsez-1kdt
19
vulnerability VCID-4eqe-gybr-33fe
20
vulnerability VCID-4fbt-z885-efdf
21
vulnerability VCID-4k19-9t2q-tucv
22
vulnerability VCID-4mb6-tpsp-p7gt
23
vulnerability VCID-55ts-hggh-2fan
24
vulnerability VCID-57nq-b14c-duew
25
vulnerability VCID-5bqj-5jb4-vqdp
26
vulnerability VCID-5czu-unnz-dqe3
27
vulnerability VCID-66uq-dcdp-zfhd
28
vulnerability VCID-6dst-1qdv-3qc7
29
vulnerability VCID-6e8s-49d3-pfdk
30
vulnerability VCID-6g2m-x1g7-zubg
31
vulnerability VCID-72ny-y7wn-xkfu
32
vulnerability VCID-7ama-66qp-f3cc
33
vulnerability VCID-7bqs-7j62-uba5
34
vulnerability VCID-7g9f-6sg4-s3es
35
vulnerability VCID-7r3q-d9jh-vkec
36
vulnerability VCID-82au-sdj4-1bg8
37
vulnerability VCID-8f2r-dvmz-u7bw
38
vulnerability VCID-922k-xceg-nkft
39
vulnerability VCID-948z-df6d-3yb9
40
vulnerability VCID-9c2x-g9wr-dbdb
41
vulnerability VCID-9tr9-xdae-gkhu
42
vulnerability VCID-a46m-9jv8-h3dp
43
vulnerability VCID-ahzg-vhxy-xydx
44
vulnerability VCID-ar1s-rbmm-wyex
45
vulnerability VCID-b1e2-ngtx-puge
46
vulnerability VCID-b3wx-mq6y-gye7
47
vulnerability VCID-b788-g7hy-xqf9
48
vulnerability VCID-bg42-sjja-2qa6
49
vulnerability VCID-btbt-n6nq-9fer
50
vulnerability VCID-ck4g-j9rq-5kcq
51
vulnerability VCID-cks2-k7t6-a3gt
52
vulnerability VCID-evh5-vmmv-5uee
53
vulnerability VCID-fcav-jjqy-tqfy
54
vulnerability VCID-g4bw-cj2v-c3en
55
vulnerability VCID-gnc8-1tfm-yqbd
56
vulnerability VCID-guru-ff8a-wqgu
57
vulnerability VCID-h1e3-v4dt-ayav
58
vulnerability VCID-h5r1-q326-cyaz
59
vulnerability VCID-h9pa-n4v6-c7c6
60
vulnerability VCID-hdnn-2m1x-hydf
61
vulnerability VCID-hfyp-6h1g-ykhk
62
vulnerability VCID-hjn9-ubdc-2qh9
63
vulnerability VCID-hxt8-j2wk-jqbu
64
vulnerability VCID-jrdn-k4c1-hkcs
65
vulnerability VCID-mavm-1p7b-z3gt
66
vulnerability VCID-md9a-5z1n-j7ex
67
vulnerability VCID-ntea-fmp4-u3a5
68
vulnerability VCID-p2fq-tujh-ykgt
69
vulnerability VCID-pce6-p38r-gkhe
70
vulnerability VCID-pvdy-3kvz-tud2
71
vulnerability VCID-pyb7-2c5k-47c4
72
vulnerability VCID-qb3k-dzzx-cyb2
73
vulnerability VCID-qbw7-ay83-rket
74
vulnerability VCID-rmrr-cpq4-9yer
75
vulnerability VCID-syme-mbp9-hbbu
76
vulnerability VCID-sz5z-1ktj-bkff
77
vulnerability VCID-t162-92tf-4uef
78
vulnerability VCID-t1rn-wxx1-2qd3
79
vulnerability VCID-tac5-jfmv-3yeq
80
vulnerability VCID-tzdv-3a3k-tyaa
81
vulnerability VCID-us1y-f2nx-6uhu
82
vulnerability VCID-uv3d-52va-b7hr
83
vulnerability VCID-v8t7-d4zr-3kb5
84
vulnerability VCID-w1kv-8hj7-z7a8
85
vulnerability VCID-wqeb-6u57-4bck
86
vulnerability VCID-x6bb-299t-mfhx
87
vulnerability VCID-x7j1-6ju4-v3ce
88
vulnerability VCID-y79j-fe1u-eyc2
89
vulnerability VCID-yq8t-vx5q-k3hp
90
vulnerability VCID-z6a6-ac8q-j7dy
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.42.1
aliases CVE-2015-3153
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-unke-kr69-wubn
10
url VCID-x7j1-6ju4-v3ce
vulnerability_id VCID-x7j1-6ju4-v3ce
summary remote filename path traversal in curl tool for Windows
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0754
reference_id
reference_type
scores
0
value 0.00351
scoring_system epss
scoring_elements 0.57758
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0754
1
reference_url https://curl.se/docs/CVE-2016-0754.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-0754.html
fixed_packages
0
url pkg:generic/curl.se/curl@7.47.0
purl pkg:generic/curl.se/curl@7.47.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bn6-efkw-uyfc
1
vulnerability VCID-1eyc-44w4-67cb
2
vulnerability VCID-1g9p-du9r-hfdk
3
vulnerability VCID-2fqs-x6nt-87ea
4
vulnerability VCID-2hcz-2g46-jkgf
5
vulnerability VCID-2r94-vq93-3kge
6
vulnerability VCID-2wp5-xvyh-cyaa
7
vulnerability VCID-2xx7-bgje-xffr
8
vulnerability VCID-333q-c9qf-vbae
9
vulnerability VCID-33qq-rab3-13hh
10
vulnerability VCID-36hy-wvfw-5bhn
11
vulnerability VCID-37es-qgwr-c3ep
12
vulnerability VCID-3a88-rrsx-bkex
13
vulnerability VCID-3er6-ss7m-xqf1
14
vulnerability VCID-3ga8-md1g-qqgb
15
vulnerability VCID-3shp-e3et-mqf3
16
vulnerability VCID-3vxw-r6zv-syhb
17
vulnerability VCID-42je-5dt6-qfcv
18
vulnerability VCID-43m2-zsez-1kdt
19
vulnerability VCID-4eqe-gybr-33fe
20
vulnerability VCID-4fbt-z885-efdf
21
vulnerability VCID-4k19-9t2q-tucv
22
vulnerability VCID-4mb6-tpsp-p7gt
23
vulnerability VCID-55ts-hggh-2fan
24
vulnerability VCID-57nq-b14c-duew
25
vulnerability VCID-5bqj-5jb4-vqdp
26
vulnerability VCID-5czu-unnz-dqe3
27
vulnerability VCID-66uq-dcdp-zfhd
28
vulnerability VCID-6dst-1qdv-3qc7
29
vulnerability VCID-6e8s-49d3-pfdk
30
vulnerability VCID-6g2m-x1g7-zubg
31
vulnerability VCID-7bqs-7j62-uba5
32
vulnerability VCID-7g9f-6sg4-s3es
33
vulnerability VCID-7r3q-d9jh-vkec
34
vulnerability VCID-82au-sdj4-1bg8
35
vulnerability VCID-8f2r-dvmz-u7bw
36
vulnerability VCID-922k-xceg-nkft
37
vulnerability VCID-948z-df6d-3yb9
38
vulnerability VCID-9c2x-g9wr-dbdb
39
vulnerability VCID-9tr9-xdae-gkhu
40
vulnerability VCID-a46m-9jv8-h3dp
41
vulnerability VCID-ar1s-rbmm-wyex
42
vulnerability VCID-b1e2-ngtx-puge
43
vulnerability VCID-b3wx-mq6y-gye7
44
vulnerability VCID-b788-g7hy-xqf9
45
vulnerability VCID-bg42-sjja-2qa6
46
vulnerability VCID-bs39-uk1w-yfcx
47
vulnerability VCID-btbt-n6nq-9fer
48
vulnerability VCID-cbeq-zwed-2fg8
49
vulnerability VCID-ck4g-j9rq-5kcq
50
vulnerability VCID-cks2-k7t6-a3gt
51
vulnerability VCID-evh5-vmmv-5uee
52
vulnerability VCID-fcav-jjqy-tqfy
53
vulnerability VCID-g4bw-cj2v-c3en
54
vulnerability VCID-g95u-1q59-ckh7
55
vulnerability VCID-gnc8-1tfm-yqbd
56
vulnerability VCID-guru-ff8a-wqgu
57
vulnerability VCID-h1e3-v4dt-ayav
58
vulnerability VCID-h5r1-q326-cyaz
59
vulnerability VCID-h9pa-n4v6-c7c6
60
vulnerability VCID-hdnn-2m1x-hydf
61
vulnerability VCID-hfyp-6h1g-ykhk
62
vulnerability VCID-hjn9-ubdc-2qh9
63
vulnerability VCID-hxt8-j2wk-jqbu
64
vulnerability VCID-jrdn-k4c1-hkcs
65
vulnerability VCID-mavm-1p7b-z3gt
66
vulnerability VCID-md9a-5z1n-j7ex
67
vulnerability VCID-ntea-fmp4-u3a5
68
vulnerability VCID-p2fq-tujh-ykgt
69
vulnerability VCID-pce6-p38r-gkhe
70
vulnerability VCID-pvdy-3kvz-tud2
71
vulnerability VCID-pyb7-2c5k-47c4
72
vulnerability VCID-qb3k-dzzx-cyb2
73
vulnerability VCID-qbw7-ay83-rket
74
vulnerability VCID-rmrr-cpq4-9yer
75
vulnerability VCID-syme-mbp9-hbbu
76
vulnerability VCID-sz5z-1ktj-bkff
77
vulnerability VCID-t162-92tf-4uef
78
vulnerability VCID-t1rn-wxx1-2qd3
79
vulnerability VCID-tac5-jfmv-3yeq
80
vulnerability VCID-tzdv-3a3k-tyaa
81
vulnerability VCID-us1y-f2nx-6uhu
82
vulnerability VCID-uv3d-52va-b7hr
83
vulnerability VCID-v8t7-d4zr-3kb5
84
vulnerability VCID-w1kv-8hj7-z7a8
85
vulnerability VCID-wqeb-6u57-4bck
86
vulnerability VCID-x6bb-299t-mfhx
87
vulnerability VCID-y79j-fe1u-eyc2
88
vulnerability VCID-yq8t-vx5q-k3hp
89
vulnerability VCID-z6a6-ac8q-j7dy
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.47.0
aliases CVE-2016-0754
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x7j1-6ju4-v3ce
11
url VCID-y79j-fe1u-eyc2
vulnerability_id VCID-y79j-fe1u-eyc2
summary Credential leak on redirect
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
reference_id
reference_type
scores
0
value 0.00314
scoring_system epss
scoring_elements 0.54815
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
1
reference_url https://curl.se/docs/CVE-2022-27774.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27774.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://hackerone.com/reports/1543773
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://hackerone.com/reports/1543773
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
reference_id 1010254
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
5
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
6
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://www.debian.org/security/2022/dsa-5197
7
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.gentoo.org/glsa/202212-01
8
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
9
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
10
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eyc-44w4-67cb
1
vulnerability VCID-1g9p-du9r-hfdk
2
vulnerability VCID-2fqs-x6nt-87ea
3
vulnerability VCID-2ncy-ud8q-3bgt
4
vulnerability VCID-36hy-wvfw-5bhn
5
vulnerability VCID-39dz-7h6u-d7e6
6
vulnerability VCID-3shp-e3et-mqf3
7
vulnerability VCID-3vxw-r6zv-syhb
8
vulnerability VCID-42je-5dt6-qfcv
9
vulnerability VCID-43m2-zsez-1kdt
10
vulnerability VCID-55ts-hggh-2fan
11
vulnerability VCID-56ct-pa4k-83a9
12
vulnerability VCID-5v1w-zggj-4ub6
13
vulnerability VCID-6caw-c8nd-wfeh
14
vulnerability VCID-6dnn-arvb-nuek
15
vulnerability VCID-7r3q-d9jh-vkec
16
vulnerability VCID-84fn-4ybd-sbgs
17
vulnerability VCID-922k-xceg-nkft
18
vulnerability VCID-9c2x-g9wr-dbdb
19
vulnerability VCID-aubk-fp51-x7ed
20
vulnerability VCID-b788-g7hy-xqf9
21
vulnerability VCID-bg42-sjja-2qa6
22
vulnerability VCID-bs39-uk1w-yfcx
23
vulnerability VCID-d72k-u2f3-8ueq
24
vulnerability VCID-eqzr-trfg-3kam
25
vulnerability VCID-evh5-vmmv-5uee
26
vulnerability VCID-g95u-1q59-ckh7
27
vulnerability VCID-guru-ff8a-wqgu
28
vulnerability VCID-h1e3-v4dt-ayav
29
vulnerability VCID-hdnn-2m1x-hydf
30
vulnerability VCID-hfyp-6h1g-ykhk
31
vulnerability VCID-hjn9-ubdc-2qh9
32
vulnerability VCID-hxt8-j2wk-jqbu
33
vulnerability VCID-jrdn-k4c1-hkcs
34
vulnerability VCID-k2cc-pe53-b3bd
35
vulnerability VCID-nahe-781n-aqhf
36
vulnerability VCID-ntea-fmp4-u3a5
37
vulnerability VCID-pvdy-3kvz-tud2
38
vulnerability VCID-pw7w-s4s1-77fv
39
vulnerability VCID-q9sj-vhnr-a7ee
40
vulnerability VCID-qb3k-dzzx-cyb2
41
vulnerability VCID-qbw7-ay83-rket
42
vulnerability VCID-r27q-cvqa-wueu
43
vulnerability VCID-s1pj-yhs2-myg6
44
vulnerability VCID-sgvn-hfwe-7kad
45
vulnerability VCID-sz5z-1ktj-bkff
46
vulnerability VCID-t1rn-wxx1-2qd3
47
vulnerability VCID-tbq2-5mpk-47gx
48
vulnerability VCID-tfp8-2vsv-jfdk
49
vulnerability VCID-utu4-vqyx-rfb8
50
vulnerability VCID-wqeb-6u57-4bck
51
vulnerability VCID-y7n3-4462-wfhz
52
vulnerability VCID-yphr-tywa-jyb2
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27774
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y79j-fe1u-eyc2
12
url VCID-yq8t-vx5q-k3hp
vulnerability_id VCID-yq8t-vx5q-k3hp
summary Auth/cookie leak on redirect
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
reference_id
reference_type
scores
0
value 0.00682
scoring_system epss
scoring_elements 0.71955
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
1
reference_url https://curl.se/docs/CVE-2022-27776.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27776.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://hackerone.com/reports/1547048
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://hackerone.com/reports/1547048
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
reference_id 1010252
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
reference_id 7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
6
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
reference_id DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
8
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://www.debian.org/security/2022/dsa-5197
9
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.gentoo.org/glsa/202212-01
10
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
11
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
12
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eyc-44w4-67cb
1
vulnerability VCID-1g9p-du9r-hfdk
2
vulnerability VCID-2fqs-x6nt-87ea
3
vulnerability VCID-2ncy-ud8q-3bgt
4
vulnerability VCID-36hy-wvfw-5bhn
5
vulnerability VCID-39dz-7h6u-d7e6
6
vulnerability VCID-3shp-e3et-mqf3
7
vulnerability VCID-3vxw-r6zv-syhb
8
vulnerability VCID-42je-5dt6-qfcv
9
vulnerability VCID-43m2-zsez-1kdt
10
vulnerability VCID-55ts-hggh-2fan
11
vulnerability VCID-56ct-pa4k-83a9
12
vulnerability VCID-5v1w-zggj-4ub6
13
vulnerability VCID-6caw-c8nd-wfeh
14
vulnerability VCID-6dnn-arvb-nuek
15
vulnerability VCID-7r3q-d9jh-vkec
16
vulnerability VCID-84fn-4ybd-sbgs
17
vulnerability VCID-922k-xceg-nkft
18
vulnerability VCID-9c2x-g9wr-dbdb
19
vulnerability VCID-aubk-fp51-x7ed
20
vulnerability VCID-b788-g7hy-xqf9
21
vulnerability VCID-bg42-sjja-2qa6
22
vulnerability VCID-bs39-uk1w-yfcx
23
vulnerability VCID-d72k-u2f3-8ueq
24
vulnerability VCID-eqzr-trfg-3kam
25
vulnerability VCID-evh5-vmmv-5uee
26
vulnerability VCID-g95u-1q59-ckh7
27
vulnerability VCID-guru-ff8a-wqgu
28
vulnerability VCID-h1e3-v4dt-ayav
29
vulnerability VCID-hdnn-2m1x-hydf
30
vulnerability VCID-hfyp-6h1g-ykhk
31
vulnerability VCID-hjn9-ubdc-2qh9
32
vulnerability VCID-hxt8-j2wk-jqbu
33
vulnerability VCID-jrdn-k4c1-hkcs
34
vulnerability VCID-k2cc-pe53-b3bd
35
vulnerability VCID-nahe-781n-aqhf
36
vulnerability VCID-ntea-fmp4-u3a5
37
vulnerability VCID-pvdy-3kvz-tud2
38
vulnerability VCID-pw7w-s4s1-77fv
39
vulnerability VCID-q9sj-vhnr-a7ee
40
vulnerability VCID-qb3k-dzzx-cyb2
41
vulnerability VCID-qbw7-ay83-rket
42
vulnerability VCID-r27q-cvqa-wueu
43
vulnerability VCID-s1pj-yhs2-myg6
44
vulnerability VCID-sgvn-hfwe-7kad
45
vulnerability VCID-sz5z-1ktj-bkff
46
vulnerability VCID-t1rn-wxx1-2qd3
47
vulnerability VCID-tbq2-5mpk-47gx
48
vulnerability VCID-tfp8-2vsv-jfdk
49
vulnerability VCID-utu4-vqyx-rfb8
50
vulnerability VCID-wqeb-6u57-4bck
51
vulnerability VCID-y7n3-4462-wfhz
52
vulnerability VCID-yphr-tywa-jyb2
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27776
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yq8t-vx5q-k3hp
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@5.9.1