Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wget vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2017-6508
CRLF injection vulnerability in the url_parse function in url.c in Wget up to and including 1.19.1 allows remote malicious users to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
Gnu Wget
7.5
CVSSv2
CVE-2019-5953
Buffer overflow in GNU Wget 1.20.1 and previous versions allows remote malicious users to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
Gnu Wget
5
CVSSv2
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
Gnu Wget 1.5.3
5.8
CVSSv2
CVE-2021-31879
GNU Wget up to and including 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
Gnu Wget
Broadcom Brocade Fabric Operating System Firmware -
Netapp Cloud Backup -
Netapp Ontap Select Deploy Administration Utility -
Netapp A250 Firmware -
Netapp 500f Firmware -
1 Github repository
7.5
CVSSv2
CVE-2002-1565
Buffer overflow in url_filename function for wget 1.8.1 allows malicious users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
Immunix Immunix 7
5.1
CVSSv2
CVE-2010-2246
feh prior to 1.8, when the --wget-timestamp option is enabled, might allow remote malicious users to execute arbitrary commands via shell metacharacters in a URL.
Feh Project Feh 1.2.6
Feh Project Feh 1.2.5
Feh Project Feh 1.2.3
Feh Project Feh 1.2.1
Feh Project Feh 1.6
Feh Project Feh 1.4.3
Feh Project Feh 1.3.1
Feh Project Feh 1.2.7
Feh Project Feh 1.2.0
Feh Project Feh 0.9.9
Feh Project Feh 1.4.1
Feh Project Feh 1.4
Feh Project Feh 1.3.5
Feh Project Feh
Feh Project Feh 0.6.4
Feh Project Feh 0.5.0
Feh Project Feh 1.6.1
Feh Project Feh 1.5
Feh Project Feh 1.4.2
Feh Project Feh 1.3.3
Feh Project Feh 1.3.0
Feh Project Feh 1.1.0
1 EDB exploit
6.8
CVSSv2
CVE-2018-1000500
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain...
Busybox Busybox
5
CVSSv2
CVE-2015-7665
Tails prior to 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback i...
Tails Project Tails
7.5
CVSSv2
CVE-2014-8517
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 up to and including 5.1.4, 5.2 up to and including 5.2.2, 6.0 up to and including 6.0.6, and 6.1 up to and including 6.1.5 allows remote malicious users to execute arbitrary commands via a | (pipe) char...
Apple Mac Os X 10.10.1
Apple Mac Os X 10.10.0
Apple Mac Os X 10.9.5
Apple Mac Os X 10.8.5
Netbsd Netbsd 5.1.3
Netbsd Netbsd 5.1.4
Netbsd Netbsd 5.2
Netbsd Netbsd 6.0.4
Netbsd Netbsd 6.0.5
Netbsd Netbsd 6.1.5
Netbsd Netbsd 5.1
Netbsd Netbsd 6.0
Netbsd Netbsd 6.0.1
Netbsd Netbsd 6.1.1
Netbsd Netbsd 6.1.2
Netbsd Netbsd 5.2.1
Netbsd Netbsd 5.2.2
Netbsd Netbsd 6.0.6
Netbsd Netbsd 6.1
Netbsd Netbsd 5.1.1
Netbsd Netbsd 5.1.2
Netbsd Netbsd 6.0.2
2 EDB exploits
1 Github repository
1 Article
NA
CVE-2023-33269
An issue exists in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind).
Dts Monitoring 3.57.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »