wget

8 results · Clear filters · Feed

• Unscored —
  CVE-2018-0494 Public exploit EPSS 16%

  GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…

  wget wget wget Debian Ubuntu Alpine
  May 6, 2018
• High 8.8
  CVE-2017-13089 Public exploit EPSS 80%

  GNU Wget: stack overflow in HTTP protocol handling

  The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

  GNU Project Wget wget wget Debian Ubuntu Alpine
  Oct 27, 2017
• Unscored —
  CVE-2016-7098 Public exploit

  Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allo…

  wget wget Debian Ubuntu
  Sep 26, 2016
• Unscored —
  CVE-2016-4971 Public exploit EPSS 46%

  GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …

  wget wget wget Debian Ubuntu Alpine
  Jun 30, 2016
• Unscored —
  CVE-2014-4877 Public exploit EPSS 40%

  Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to …

  wget wget Debian Ubuntu
  Oct 29, 2014
• Unscored —
  CVE-2006-6719 Public exploit

  The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause…

  wget Debian
  Dec 23, 2006
• Unscored —
  CVE-2004-2014 Public exploit

  Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being d…

  wget Debian
  May 10, 2005
• Unscored —
  CVE-2004-1488 Public exploit EPSS 12%

  wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …

  wget Debian
  Feb 15, 2005