https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:22:10.509632+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-3620 CVE-2014-3620 2026-10-08T07:22:10.550831+00:00

cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.

 https://cve.radiocsirt.org/vuln/usn-2346-1 USN-2346-1 — curl vulnerabilities 2026-10-08T07:22:10.550884+00:00

Affected: Ubuntu:14.04:LTS: curl

Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and malicious sites being able to set cookies for others. (CVE-2014-3613)

Tim Ruehsen discovered that curl incorrectly allowed cookies to be set for Top Level Domains (TLDs). This could allow a malicious site to set a cookie that gets sent to other sites. (CVE-2014-3620)