Vulnerabilities > Haxx > Curl > 7.52.0

DATE CVE VULNERABILITY TITLE RISK
2017-10-05 CVE-2017-1000101 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Haxx Curl
curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers.
network
haxx CWE-119
4.3
2017-06-14 CVE-2017-9502 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Haxx Curl
In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes.
network
low complexity
haxx CWE-119
5.0