HexBrain
Sign in

Browse / curl

curl

683disclosed reports

See its reports on the map

What gets reported to curl

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. CVE-2021-22901: TLS session caching disasterUse After Free · high
    76 votes
  2. CVE-2025-5399: WebSocket endless loopLoop with Unreachable Exit Condition ('Infinite Loop') · low
    58 votes
  3. CVE-2023-38545: socks5 heap buffer overflowHeap Overflow · high
    55 votes
  4. CVE-2020-8177: curl overwrite local file with -JImproper Input Validation · medium
    55 votes
  5. CVE-2025-5025: No QUIC certificate pinning with wolfSSLImproper Certificate Validation · medium
    54 votes
  6. CVE-2024-7264: ASN.1 date parser overreadBuffer Over-read · low
    53 votes
  7. CVE-2020-8286: Inferior OCSP verificationImproper Certificate Validation · medium
    51 votes
  8. CVE-2024-9681: HSTS subdomain overwrites parent cache entryBusiness Logic Errors · low
    49 votes
  9. CVE-2025-10966: missing SFTP host verification with wolfSSHImproper Certificate Validation · low
    43 votes
  10. CVE-2025-4947: QUIC certificate check skip with wolfSSLImproper Validation of Certificate with Host Mismatch · medium
    43 votes
  11. CVE-2026-7168: cross-proxy Digest auth state leakExposure of Data Element to Wrong Session · medium
    37 votes
  12. CVE-2025-9086: Out of bounds read for cookie pathBuffer Over-read · low
    36 votes
  13. CVE-2025-0167: netrc and default credential leakLLM06: Sensitive Information Disclosure · low
    36 votes
  14. CVE-2024-8096: OCSP stapling bypass with GnuTLSImproper Certificate Validation · medium
    36 votes
  15. CVE-2026-3805: use after free in SMB connection reuseUse After Free · medium
    34 votes
  16. CVE-2024-6197: freeing stack buffer in utf8asn1strFree of Memory not on the Heap · medium
    34 votes
  17. CVE-2026-7009: OCSP stapling bypass with Apple SecTrustImproper Certificate Validation · medium
    33 votes
  18. CVE-2024-11053: netrc + redirect credential leakInformation Disclosure · low
    33 votes
  19. CVE-2024-2004: Usage of disabled protocolMisinterpretation of Input · low
    33 votes
  20. CVE-2026-3784: wrong proxy connection reuse with credentialsIncorrect Authorization · low
    30 votes
  21. CVE-2025-10148: predictable WebSocket maskReusing a Nonce, Key Pair in Encryption · low
    30 votes
  22. CVE-2020-8284: trusting FTP PASV responsesInformation Disclosure · low
    30 votes
  23. CVE-2023-46218: cookie mixed case PSL bypassInformation Exposure Through Sent Data · medium
    28 votes
  24. CVE-2023-46219: HSTS long file name clears contentsMissing Encryption of Sensitive Data · low
    27 votes
  25. CVE-2026-3783: token leak with redirect and netrcInformation Exposure Through Sent Data · medium
    26 votes
  26. CVE-2023-32001: fopen race conditionTime-of-check Time-of-use (TOCTOU) Race Condition · medium
    26 votes
  27. CVE-2024-6874: macidn punycode buffer overreadBuffer Over-read · low
    25 votes
  28. CVE-2019-5443: Windows Privilege Escalation: Malicious OpenSSL EngineCode Injection · high
    25 votes
  29. CVE-2026-6276: stale custom cookie host causes cookie leakExposure of Data Element to Wrong Session · low
    24 votes
  30. CVE-2026-6253: proxy credentials leak over redirect-to proxyInformation Disclosure · medium
    24 votes
  31. CVE-2025-0665: eventfd double closeConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') · low
    24 votes
  32. CVE-2019-5435: An integer overflow found in /lib/urlapi.cIncorrect Calculation of Buffer Size · low
    24 votes
  33. CVE-2024-0853: OCSP verification bypass with TLS session reuseImproper Check for Certificate Revocation · low
    23 votes
  34. CVE-2026-80256: wcurl backslash bypassPath Traversal: '.../...//' · medium
    22 votes
  35. CVE-2026-5545: wrong reuse of HTTP Negotiate connectionAuthentication Bypass by Primary Weakness · medium
    22 votes
  36. CVE-2020-8169: Partial password leak over DNS on HTTP redirectInformation Disclosure · medium
    21 votes
  37. CVE-2023-28319: UAF in SSH sha256 fingerprint checkUse After Free · medium
    20 votes
  38. CVE-2026-6429: netrc credential leak with reused proxy connectionInformation Exposure Through Sent Data · medium
    19 votes
  39. CVE-2022-27776: Auth/cookie leak on redirect Insufficiently Protected Credentials · medium
    19 votes
  40. CVE-2025-15079: libssh global knownhost override Improper Validation of Certificate with Host Mismatch · low
    18 votes
  41. CVE-2025-14524: bearer token leak on cross-protocol redirectInsufficiently Protected Credentials · low
    17 votes
  42. CVE-2025-0725: gzip integer overflowInteger Overflow to Buffer Overflow · low
    17 votes
  43. CVE-2024-2466: TLS certificate check bypass with mbedTLSImproper Validation of Certificate with Host Mismatch · medium
    17 votes
  44. CVE-2023-23916: HTTP multi-header compression denial of serviceAllocation of Resources Without Limits or Throttling · medium
    16 votes
  45. CVE-2022-43552: HTTP Proxy deny use-after-freeUse After Free · low
    16 votes
  46. CVE-2019-5436: Heap Buffer Overflow at lib/tftp.cHeap Overflow · low
    16 votes
  47. CVE-2026-82209: domain-scoped PSL domain cookieInformation Disclosure
    15 votes
  48. CVE-2026-18924: HTTP/2 server push UAFUse After Free · low
    14 votes
  49. CVE-2026-5773: wrong reuse of SMB connectionlow
    14 votes
  50. CVE-2021-22945: UAF and double-free in MQTT sendingDouble Free · medium
    14 votes
  51. CVE-2021-22897: schannel cipher selection surpriseBusiness Logic Errors · low
    14 votes
  52. CVE-2026-4873: connection reuse ignores TLS requirementCleartext Transmission of Sensitive Information · low
    13 votes
  53. CVE-2025-15224: libssh key passphrase bypass without agent setImproper Access Control - Generic · low
    13 votes
  54. CVE-2022-35252: control code in cookie denial of serviceImproper Input Validation · low
    13 votes
  55. CVE-2026-19931: Negotiate ambient user conn reuseAuthentication Bypass by Primary Weakness · medium
    12 votes
  56. CVE-2024-2398: HTTP/2 push headers memory-leakUncontrolled Resource Consumption · medium
    12 votes
  57. CVE-2023-27537: HSTS double-freeDouble Free · low
    12 votes
  58. CVE-2024-2379: QUIC certificate check bypass with wolfSSLImproper Certificate Validation · low
    11 votes
  59. CVE-2022-32208: FTP-KRB bad message verificationBusiness Logic Errors · low
    11 votes
  60. CVE-2022-27778: curl removes wrong file on errorBusiness Logic Errors · medium
    11 votes
  61. CVE-2020-8231: Connect-only connections can use the wrong connectionInformation Disclosure · low
    11 votes
  62. CVE-2019-5482: Heap buffer overflow in TFTP when using small blksizeHeap Overflow · medium
    11 votes
  63. CVE-2021-22946: Protocol downgrade required TLS bypassedMissing Required Cryptographic Step · medium
    10 votes
  64. CVE-2026-92392: HTTP/2 upload Use-After-FreeUse After Free · high
    9 votes
  65. CVE-2022-27780: percent-encoded path separator in URL hostServer-Side Request Forgery (SSRF) · medium
    9 votes
  66. CVE-2026-12064: proto-default skips SSH verificationImproper Certificate Validation · low
    8 votes
  67. CVE-2026-107928: info leak uploading over WebSockets with GnuTLSBuffer Over-read · low
    7 votes
  68. CVE-2026-80229: OpenSSL provider use-after-freeCryptographic Issues - Generic
    7 votes
  69. CVE-2026-11564: Native CA trust persistlow
    7 votes
  70. CVE-2026-11352: QUIC zero-length UDP datagrams busy-loopUncontrolled Resource Consumption · low
    7 votes
  71. CVE-2023-23915: HSTS amnesia with --parallelCleartext Transmission of Sensitive Information · low
    7 votes
  72. CVE-2022-43551: Another HSTS bypass via IDNCleartext Transmission of Sensitive Information · medium
    7 votes
  73. CVE-2022-42915: HTTP proxy double-freeDouble Free · medium
    7 votes
  74. CVE-2022-35260: .netrc parser out-of-bounds accessOut-of-bounds Read · low
    7 votes
  75. CVE-2022-30115: HSTS bypass via trailing dotMissing Required Cryptographic Step · medium
    7 votes
  76. CVE-2022-27775: Bad local IPv6 connection reuseBusiness Logic Errors · low
    7 votes
  77. CVE-2022-27774: Credential leak on redirectInsufficiently Protected Credentials · high
    7 votes
  78. CVE-2021-22947: STARTTLS protocol injection via MITMCryptographic Issues - Generic · medium
    7 votes
  79. CVE-2021-22898: TELNET stack contents disclosureInformation Disclosure · medium
    7 votes
  80. CVE-2021-22890: TLS 1.3 session ticket proxy host mixupMan-in-the-Middle · low
    7 votes
  81. CVE-2026-80230: OpenSSL pinning bypassImproper Access Control - Generic
    6 votes
  82. CVE-2026-13608: OpenLDAP SASL authentication bypassAuthentication Bypass by Primary Weakness · low
    6 votes
  83. CVE-2026-11586: WS Auto-PONG memory exhaustionAllocation of Resources Without Limits or Throttling · low
    6 votes
  84. CVE-2023-28320: siglongjmp race conditionImproper Synchronization · low
    6 votes
  85. CVE-2023-23914: curl HSTS ignored on multiple requestsCleartext Transmission of Sensitive Information · low
    6 votes
  86. CVE-2022-32207: Unpreserved file permissionsBusiness Logic Errors · medium
    6 votes
  87. CVE-2022-27782: TLS and SSH connection too eager reuseBusiness Logic Errors · medium
    6 votes
  88. CVE-2022-22576: OAUTH2 bearer bypass in connection re-useImproper Authentication - Generic · medium
    6 votes
  89. CVE-2019-5481: krb5: double-free in read_data() after realloc() failDouble Free · medium
    6 votes
  90. CVE-2026-107929: local interface connection reuse mixupExposure of Data Element to Wrong Session · low
    5 votes
  91. CVE-2026-80231: native CA store conn reuselow
    5 votes
  92. CVE-2026-10536: HTTP/2 stream-dependency tree UAFBuffer Over-read · low
    5 votes
  93. CVE-2022-27781: CERTINFO never-ending busy-loopUncontrolled Resource Consumption · low
    5 votes
  94. CVE-2022-27779: cookie for trailing dot TLDInformation Exposure Through Sent Data · medium
    5 votes
  95. CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure TransportBusiness Logic Errors · medium
    5 votes
  96. CVE-2021-22924: Bad connection reuse due to flawed path name checksImproper Input Validation · high
    5 votes
  97. CVE-2021-22922: Wrong content via metalink not discardedBusiness Logic Errors · medium
    5 votes
  98. CVE-2021-22876: Automatic referer leaks credentialsInformation Disclosure · low
    5 votes
  99. CVE-2026-115528: wolfSSL TLS connect without certImproper Certificate Validation · medium
    4 votes
  100. CVE-2026-111951: curl -OJ truncate without filenameExternal Control of File Name or Path · low
    4 votes