Search
43,412 CVEs
CVEs (43,412, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 326–350 of 43,412 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92389 | NONE | — | 2026-10-20 | libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes inte… | |
| CVE-2026-92390 | NONE | — | 2026-10-20 | When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the f… | |
| CVE-2026-92391 | NONE | — | 2026-10-20 | A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth wi… | |
| CVE-2026-86415 | NONE | — | 2026-10-20 | libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a… | |
| CVE-2026-87861 | NONE | — | 2026-10-20 | When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origi… | |
| CVE-2026-87862 | NONE | — | 2026-10-20 | Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS… | |
| CVE-2026-87863 | NONE | — | 2026-10-20 | An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age … | |
| CVE-2026-87864 | NONE | — | 2026-10-20 | Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting line-ending expanded data. The server reads on… | |
| CVE-2026-87865 | NONE | — | 2026-10-20 | When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `C… | |
| CVE-2026-87866 | NONE | — | 2026-10-20 | When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates th… | |
| CVE-2026-86414 | NONE | — | 2026-10-20 | An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunne… | |
| CVE-2026-107928 | NONE | — | 2026-10-20 | When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_rec… | |
| CVE-2026-107929 | NONE | — | 2026-10-20 | When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part … | |
| CVE-2026-86409 | NONE | — | 2026-10-20 | Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentation. A subsequent transfer on the same handle still se… | |
| CVE-2026-86410 | NONE | — | 2026-10-20 | A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a… | |
| CVE-2026-86411 | NONE | — | 2026-10-20 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle upgraded with `STARTTLS` and authenticated usin… | |
| CVE-2026-86412 | NONE | — | 2026-10-20 | A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and… | |
| CVE-2026-86413 | NONE | — | 2026-10-20 | When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated sec… | |
| CVE-2026-113867 | NONE | Patched | — | 2026-10-20 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XM… |
| CVE-2026-97406 | NONE | — | 2026-10-20 | XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of … | |
| CVE-2026-75747 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-75751 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-75997 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-48279 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-21266 | NONE | — | 2026-10-20 | Rejected reason: this CVE was issued in error. |