mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Thu Oct 15 12:29:44 UTC 2026
This commit is contained in:
1 parent
b9cd2e1f7d
commit
16757dee04
1531 files changed
+14179
-74
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2000-0357](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0357)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/corp/support/errata/RHSA1999058-01.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2000-0358](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0358)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/corp/support/errata/RHSA1999058-01.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-0235](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0235)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-0236](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0236)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-0237](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0237)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-0238](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0238)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-0239](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0239)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-1351](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and p
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ The clone system call in the Linux kernel 2.6.28 and earlier allows local users
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.ubuntu.com/usn/usn-751-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.ubuntu.com/usn/usn-751-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x b
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.ubuntu.com/usn/usn-751-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.ubuntu.com/usn/usn-751-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.2
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.ubuntu.com/usn/usn-751-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, whe
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2009-0326.html
|
||||
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allow
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://ddilabs.blogspot.com/2014/02/fun-with-hp-data-protector-execbar.html
|
||||
- http://www.exploit-db.com/exploits/32164
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
### [CVE-2016-15060](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-15060)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.exploit-db.com/exploits/40714
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2016-20099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-20099)
|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing indefinite CPU consumption and denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://hackmd.io/@haind-pwn/cve-2016-20099-2026-110599-l-smash-hevc-importer-double-free
|
||||
- https://hackmd.io/@haind-pwn/l-smash-hevc-importer-double-free
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-11656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11656)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -10,6 +11,7 @@ In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuApr2021.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2021.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2020.html
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-12062](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12062)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-12243](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12243)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-12723](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12723)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
### [CVE-2020-12762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13434](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13434)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13435](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13435)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2020-13529](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13529)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13630](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13630)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -11,6 +12,7 @@ ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow,
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2020/Nov/19
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2020.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2020.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13631](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13631)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -11,6 +12,7 @@ SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2020/Nov/19
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2020.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2020.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13632](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13632)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -10,6 +11,7 @@ ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference v
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2020.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2020.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13776](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13776)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13777](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13777)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-13871](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13871)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -10,6 +11,7 @@ SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the p
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuApr2021.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2021.html
|
||||
- https://www.sqlite.org/src/info/c8d3b9f0a750a529
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-14145](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14145)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-14422](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14422)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-15358](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15358)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -11,6 +12,7 @@ In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leadi
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2020/Nov/19
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://usn.ubuntu.com/4438-1/
|
||||
- https://www.oracle.com/security-alerts/cpuApr2021.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-15523](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2020-15778](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15778)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-15801](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19185](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19185)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19186](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19186)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19187](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19187)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19188](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19188)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19189](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19189)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19190](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19190)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-19909](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19909)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-21913](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-24977](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24977)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-25692](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25692)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-25709](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25709)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-26116](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26116)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-27618](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27618)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-28196](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28196)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-29361](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29361)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-29363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29363)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-29562](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
### [CVE-2020-35525](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35525)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-35527](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35527)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36221)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36222)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36223](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36223)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36224](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36224)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36225](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36225)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36226](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36226)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36227](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36227)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36228)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36229](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36229)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2020-36230](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36230)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-20193](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-20227](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20227)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-20231](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20231)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-20232](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20232)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-22876](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
@@ -10,6 +11,7 @@ curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Pers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com//security-alerts/cpujul2021.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-22890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
@@ -10,6 +11,7 @@ curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicio
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com//security-alerts/cpujul2021.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-22897](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22897)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
@@ -10,6 +11,7 @@ curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong sessio
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com//security-alerts/cpujul2021.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-22898](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-22901](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22901)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
@@ -10,6 +11,7 @@ curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com//security-alerts/cpujul2021.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22922](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ When curl is instructed to download content using the metalink feature, theconte
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22923](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ When curl is instructed to get content using the metalink feature, and a user na
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22924](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ libcurl keeps previously used connections in a connection pool for subsequenttra
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22925](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22925)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -11,6 +12,7 @@ curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in l
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2021/Sep/39
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22926](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22926)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ libcurl-using applications can ask for a specific client certificate to be used
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22945](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22946](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2022.html
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-22947](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
@@ -10,6 +11,7 @@ When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujan2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2022.html
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-27219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27219)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-27645](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27645)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-28041](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28041)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-28153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28153)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-28363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28363)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-28861](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28861)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
### [CVE-2021-31239](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31239)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-3177](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3177)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-32292](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32292)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-3326](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3326)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-33294](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33294)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2021-33560](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33560)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
Loaded 100 of 1531 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user