Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aria2 vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2019-3500
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
Aria2 Project Aria2 1.33.1
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 28
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Canonical Ubuntu Linux 18.10
Canonical Ubuntu Linux 19.04
7.5
CVSSv3
CVE-2023-39141
webui-aria2 commit 4fe2e exists to contain a path traversal vulnerability.
Ziahamza Webui-aria2 -
1 Github repository
NA
CVE-2010-1512
Directory traversal vulnerability in aria2 prior to 1.9.3 allows remote malicious users to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.1.2
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 1.2.0
Tatsuhiro Tsujikawa Aria2 0.11.1\\+1
Tatsuhiro Tsujikawa Aria2 0.11.1
Tatsuhiro Tsujikawa Aria2 0.8.1
Tatsuhiro Tsujikawa Aria2 0.8.0
Tatsuhiro Tsujikawa Aria2 0.5.2
Tatsuhiro Tsujikawa Aria2 0.5.1
Tatsuhiro Tsujikawa Aria2 0.3.1\\+2
Tatsuhiro Tsujikawa Aria2 0.3.1\\+1
Tatsuhiro Tsujikawa Aria2 0.3.1
Tatsuhiro Tsujikawa Aria2 1.9.0
Tatsuhiro Tsujikawa Aria2 1.8.3
Tatsuhiro Tsujikawa Aria2 1.6.3
Tatsuhiro Tsujikawa Aria2 1.6.2
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
NA
CVE-2009-3617
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 prior to 1.6.2, when logging is enabled, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via format string specifiers i...
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.6.0
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.15.2
Tatsuhiro Tsujikawa Aria2 1.5.2
Tatsuhiro Tsujikawa Aria2 0.16.0
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
Tatsuhiro Tsujikawa Aria2 1.0.0
Tatsuhiro Tsujikawa Aria2 0.13.2\\+1
Tatsuhiro Tsujikawa Aria2 1.3.0
Tatsuhiro Tsujikawa Aria2 0.12.0
Tatsuhiro Tsujikawa Aria2 1.1.1
Tatsuhiro Tsujikawa Aria2 0.13.1
Tatsuhiro Tsujikawa Aria2 0.11.5
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 0.14.0\\+1
Tatsuhiro Tsujikawa Aria2 0.13.1\\+1
Tatsuhiro Tsujikawa Aria2 1.3.3
NA
CVE-2009-3575
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 1.2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started