Daniel Stenberg Curl — known CVE vulnerabilities

Every CVE whose affected-product data names Daniel Stenberg Curl, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2000-0973 — CVSS 10.0 (critical): Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by…
• CVE-2006-1061 — CVSS 7.5 (high): Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL…
• CVE-2005-4077 — CVSS 4.6 (medium): Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a…