Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aria2 vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2009-3575
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 1.2.0
7.6
CVSSv2
CVE-2009-3617
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 prior to 1.6.2, when logging is enabled, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via format string specifiers i...
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.6.0
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.15.2
Tatsuhiro Tsujikawa Aria2 1.5.2
Tatsuhiro Tsujikawa Aria2 0.16.0
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
Tatsuhiro Tsujikawa Aria2 1.0.0
Tatsuhiro Tsujikawa Aria2 0.13.2\\+1
Tatsuhiro Tsujikawa Aria2 1.3.0
Tatsuhiro Tsujikawa Aria2 0.12.0
Tatsuhiro Tsujikawa Aria2 1.1.1
Tatsuhiro Tsujikawa Aria2 0.13.1
Tatsuhiro Tsujikawa Aria2 0.11.5
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 0.14.0\\+1
Tatsuhiro Tsujikawa Aria2 0.13.1\\+1
Tatsuhiro Tsujikawa Aria2 1.3.3
4.3
CVSSv2
CVE-2010-1512
Directory traversal vulnerability in aria2 prior to 1.9.3 allows remote malicious users to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.1.2
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 1.2.0
Tatsuhiro Tsujikawa Aria2 0.11.1\\+1
Tatsuhiro Tsujikawa Aria2 0.11.1
Tatsuhiro Tsujikawa Aria2 0.8.1
Tatsuhiro Tsujikawa Aria2 0.8.0
Tatsuhiro Tsujikawa Aria2 0.5.2
Tatsuhiro Tsujikawa Aria2 0.5.1
Tatsuhiro Tsujikawa Aria2 0.3.1\\+2
Tatsuhiro Tsujikawa Aria2 0.3.1\\+1
Tatsuhiro Tsujikawa Aria2 0.3.1
Tatsuhiro Tsujikawa Aria2 1.9.0
Tatsuhiro Tsujikawa Aria2 1.8.3
Tatsuhiro Tsujikawa Aria2 1.6.3
Tatsuhiro Tsujikawa Aria2 1.6.2
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
2.1
CVSSv2
CVE-2019-3500
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
Aria2 Project Aria2 1.33.1
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 28
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Canonical Ubuntu Linux 18.10
Canonical Ubuntu Linux 19.04
NA
CVE-2024-3273
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The mani...
Dlink Dns-320l Firmware -
Dlink Dns-120 Firmware -
Dlink Dnr-202l Firmware -
Dlink Dns-315l Firmware -
Dlink Dns-320 Firmware -
Dlink Dns-320lw Firmware -
Dlink Dns-321 Firmware -
Dlink Dnr-322l Firmware -
Dlink Dns-323 Firmware -
Dlink Dns-325 Firmware -
Dlink Dns-326 Firmware -
Dlink Dns-327l Firmware -
Dlink Dnr-326 Firmware -
Dlink Dns-340l Firmware -
Dlink Dns-343 Firmware -
Dlink Dns-345 Firmware -
Dlink Dns-726-4 Firmware -
Dlink Dns-1100-4 Firmware -
Dlink Dns-1200-05 Firmware -
Dlink Dns-1550-04 Firmware -
6 Github repositories
2 Articles
NA
CVE-2023-39141
webui-aria2 commit 4fe2e exists to contain a path traversal vulnerability.
Ziahamza Webui-aria2 -
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4040
cross-site scripting
CVE-2023-25790
CVE-2024-2961
XML external entity
CVE-2024-26926
CVE-2024-32806
CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started