Haxx Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Network Utility Software	12

Product

haxx.se cURL	12
haxx.se libcURL	2

Remediation

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Exploitability

High	0
Functional	0
Proof-of-Concept	4
Unproven	2
Not Defined	6

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	10

Authentication

Not Defined	0
High	0
Low	0
None	12

User Interaction

Not Defined	0
Required	2
None	10

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	6
≤8	0
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	2
≤8	0
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	6
≤8	0
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	2
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	10
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (2): cURL (11), libcURL (4)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
12/15/2020	5.9	5.9	haxx.se cURL FTP Wildcard stack-based overflow	Network Utility Software	Not Defined	Not Defined	0.00710	0.00	CVE-2020-8285
05/18/2016	5.3	5.2	haxx.se cURL mbedTLS/PolarSSL mbedtls.c sslsethostname input validation	Network Utility Software	Not Defined	Official Fix	0.00754	0.00	CVE-2016-3739
03/26/2014	6.5	5.7	haxx.se cURL/libcURL Session improper authentication	Network Utility Software	Unproven	Official Fix	0.00621	0.00	CVE-2014-0138
03/26/2014	5.3	4.6	haxx.se cURL/libcURL SSL Certificate hostmatch cryptographic issues	Network Utility Software	Unproven	Official Fix	0.00193	0.00	CVE-2014-0139
03/17/2014	5.3	4.4	haxx.se cURL/libcURL Schannel SSL Backend input validation	Network Utility Software	Unproven	Official Fix	0.00295	0.00	CVE-2014-2522
01/07/2014	6.5	5.9	haxx.se cURL HTTP NTLM Connection improper authentication	Network Utility Software	Proof-of-Concept	Official Fix	0.00752	0.00	CVE-2014-0015
12/19/2013	6.5	6.2	haxx.se cURL CN/SAN Name Field input validation	Network Utility Software	Proof-of-Concept	Not Defined	0.00245	0.04	CVE-2013-6422
06/22/2013	6.3	6.0	haxx.se cURL escape.c curl_easy_unescape memory corruption	Network Utility Software	Not Defined	Official Fix	0.09274	0.00	CVE-2013-2174
04/12/2013	5.3	5.1	haxx.se cURL/libcURL Domain Matching cookie.c tailmatch information disclosure	Network Utility Software	Not Defined	Official Fix	0.00758	0.00	CVE-2013-1944
02/06/2013	10.0	9.0	haxx.se cURL curl_sasl.c Curl_sasl_create_digest_md5_message memory corruption	Network Utility Software	Proof-of-Concept	Official Fix	0.92318	0.04	CVE-2013-0249