Security News

주요 제품 취약점 (8건)

"curl" 관련 CVE만 표시 중 · 필터 해제 ×

기술CVE심각도유형KEV등재일
curl Ruckus Wireless Multiple Products
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_us…
CVE-2023-25717 9.8 CWE-94 KEV 2023-05-12
curl
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get …
CVE-2026-9079 9.8 CWE-522 —
curl
Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a diff…
CVE-2026-11856 9.8 CWE-294 —
curl
When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentic…
CVE-2026-8927 9.1 CWE-294 —
curl
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use…
CVE-2026-92392 8.1 CWE-416 —
curl
libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. li…
CVE-2026-8932 7.5 CWE-305 —
curl
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* b…
CVE-2026-6276 7.5 CWE-346 —
curl
Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *…
CVE-2026-107362 7.1 CWE-918 —