https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:56:21.152047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04857 bdu:2020-04857 2026-10-03T21:56:21.160250+00:00 bdu:2020-04857 https://cve.radiocsirt.org/vuln/bell-cve-2018-20483 Withdrawn: BELL-CVE-2018-20483 — CVE-2018-20483 does not affect BellSoft software 2026-10-03T21:56:21.160286+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cleanstart-2026-rq35898 CLEANSTART-2026-RQ35898 — set_file_metadata in xattr 2026-10-03T21:56:21.160305+00:00

Affected: CleanStart: wget

Security vulnerability affects the wget package. set_file_metadata in xattr.

 https://cve.radiocsirt.org/vuln/cnvd-2019-03429 cnvd-2019-03429 2026-10-03T21:56:21.160332+00:00 cnvd-2019-03429 https://cve.radiocsirt.org/vuln/euvd-2026-70320 EUVD-2026-70320 2026-10-03T21:56:21.160346+00:00 EUVD-2026-70320 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20483 fkie_cve-2018-20483 2026-10-03T21:56:21.160356+00:00

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.

 https://cve.radiocsirt.org/vuln/ghsa-mxm6-6r3r-6wj4 GHSA-mxm6-6r3r-6wj4 2026-10-03T21:56:21.160380+00:00

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.

 https://cve.radiocsirt.org/vuln/gsd-2018-20483 gsd-2018-20483 2026-10-03T21:56:21.160406+00:00 gsd-2018-20483 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0057-1 openSUSE-SU-2019:0057-1 — Security update for wget 2026-10-03T21:56:21.160416+00:00

Security update for wget

 https://cve.radiocsirt.org/vuln/suse-su-2019:0093-1 SUSE-SU-2019:0093-1 — Security update for wget 2026-10-03T21:56:21.160432+00:00

Security update for wget

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-20483 UBUNTU-CVE-2018-20483 2026-10-03T21:56:21.160445+00:00

Affected: Ubuntu:18.04:LTS: wget

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.