Haxx Curl 7.15.2
Approved changes feed: RSS · Atom
cpe:2.3:a:haxx:curl:7.15.2:*:*:*:*:*:*:*
part: a version: 7.15.2 update: *
| Vendor | Haxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41) |
|---|---|
| Product | Curl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/curl |
purl2cpe | 2026-06-01 10:12:19.108894 |
pkg:deb/ubuntu/curl |
purl2cpe | 2026-06-01 10:12:19.108895 |
pkg:github/curl/curl |
purl2cpe | 2026-06-01 10:12:19.108897 |
pkg:rpm/fedora/curl |
purl2cpe | 2026-06-01 10:12:19.108898 |
pkg:rpm/opensuse/curl |
purl2cpe | 2026-06-01 10:12:19.108899 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-3148 |
vulnerable | 2026-06-08 05:06:37.288597 |
Details available
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
Published: 2015-04-24T14:00:00.000Z
Updated: 2024-08-06T05:39:31.988Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3143 |
vulnerable | 2026-06-08 05:06:37.196749 |
Details available
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
Published: 2015-04-24T14:00:00.000Z
Updated: 2024-08-06T05:39:31.921Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0139 |
vulnerable | 2026-06-08 05:05:11.773900 |
Details available
cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Published: 2014-04-15T14:00:00.000Z
Updated: 2024-08-06T09:05:38.790Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0138 |
vulnerable | 2026-06-08 05:05:11.757018 |
Details available
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
Published: 2014-04-15T14:00:00.000Z
Updated: 2024-08-06T09:05:38.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0015 |
vulnerable | 2026-06-08 05:05:10.633636 |
Details available
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
Published: 2014-02-02T00:00:00.000Z
Updated: 2024-08-06T08:58:26.535Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2174 |
vulnerable | 2026-06-08 05:03:58.788936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1944 |
vulnerable | 2026-06-08 05:03:57.467627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.