https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:06:18 +0000 https://cve.radiocsirt.org/vuln/cve-2014-3620 <p>cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.</p> <p>cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.</p> https://cve.radiocsirt.org/vuln/cve-2014-3620 https://cve.radiocsirt.org/vuln/usn-2346-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl</p> <p>Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and malicious sites being able to set cookies for others. (CVE-2014-3613)</p> <p>Tim Ruehsen discovered that curl incorrectly allowed cookies to be set for Top Level Domains (TLDs). This could allow a malicious site to set a cookie that gets sent to other sites. (CVE-2014-3620)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl</p> <p>Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and malicious sites being able to set cookies for others. (CVE-2014-3613)</p> <p>Tim Ruehsen discovered that curl incorrectly allowed cookies to be set for Top Level Domains (TLDs). This could allow a malicious site to set a cookie that gets sent to other sites. (CVE-2014-3620)</p> https://cve.radiocsirt.org/vuln/usn-2346-1