Vulnerabilidades em CURL
98 resultadosAnálise Vexday
O CURL apresenta footprint reduzido na base Vexday com apenas 1 CVE registrada, atualmente sem exploração ativa conhecida (KEV=0). A vulnerabilidade identificada relaciona-se a validação inadequada de certificados (CWE-295), representando risco de confiança em conexões criptografadas, porém sem indicadores de ataque no período recente.
CVE-2025-14819MEDIUMOpenSSL partial chain store policy bypassEPSS 0.8%CVE-2025-0167LOWnetrc and default credential leakEPSS 0.7%CVE-2026-19931CRITICALNegotiate ambient user conn reuseEPSS 0.7%CVE-2026-86413CRITICALNegotiate credentials sent to redirected originEPSS 0.7%CVE-2026-92389HIGHTFTP direction confusionEPSS 0.7%CVE-2026-6253MEDIUMproxy credentials leak over redirect-to proxyEPSS 0.7%CVE-2026-107928HIGHinfo leak uploading over WebSockets with GnuTLSEPSS 0.7%CVE-2026-92388CRITICALFTP wildcard write callback mixupEPSS 0.7%CVE-2026-11856CRITICALcross-origin Digest auth state leakEPSS 0.7%CVE-2025-14524MEDIUMbearer token leak on cross-protocol redirectEPSS 0.7%CVE-2026-87861CRITICALcross-origin reuse of a Negotiate connectionEPSS 0.7%CVE-2026-86414CRITICALleaking host credentials to HTTP proxyEPSS 0.7%CVE-2026-107929HIGHlocal interface connection reuse mixupEPSS 0.7%CVE-2026-8924CRITICALtrailing dot domain super cookieEPSS 0.7%CVE-2026-9546HIGHsending old refererEPSS 0.7%CVE-2026-5773HIGHwrong reuse of SMB connectionEPSS 0.6%CVE-2026-11564CRITICALNative CA trust persistEPSS 0.6%CVE-2026-87865HIGHknownhost callback mismatches key as missingEPSS 0.6%CVE-2026-10536CRITICALHTTP/2 stream-dependency tree UAFEPSS 0.6%CVE-2026-92390HIGH-J no-clobber guarantee bypassed with 103 early hintsEPSS 0.6%