https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:30:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10463 bdu:2024-10463 https://cve.radiocsirt.org/vuln/bdu:2024-10463 https://cve.radiocsirt.org/vuln/bell-cve-2024-10524 <p><strong>Affected:</strong> Alpaquita:23: wget, Alpaquita:stream: wget</p> <p><strong>Affected:</strong> Alpaquita:23: wget, Alpaquita:stream: wget</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-10524 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/cnvd-2025-08336 cnvd-2025-08336 https://cve.radiocsirt.org/vuln/cnvd-2025-08336 https://cve.radiocsirt.org/vuln/euvd-2026-224329 EUVD-2026-224329 https://cve.radiocsirt.org/vuln/euvd-2026-224329 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10524 <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10524 https://cve.radiocsirt.org/vuln/ghsa-mqrm-h2pw-9j9r <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> https://cve.radiocsirt.org/vuln/ghsa-mqrm-h2pw-9j9r https://cve.radiocsirt.org/vuln/msrc_cve-2024-10524 msrc_CVE-2024-10524 https://cve.radiocsirt.org/vuln/msrc_cve-2024-10524 https://cve.radiocsirt.org/vuln/oesa-2024-2497 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: wget, openEuler:20.03-LTS-SP4: wget, openEuler:22.03-LTS-SP1: wget, openEuler:24.03-LTS: wget, openEuler:22.03-LTS-SP4: wget</p> <p>GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fix(es): Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.(CVE-2024-10524)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: wget, openEuler:20.03-LTS-SP4: wget, openEuler:22.03-LTS-SP1: wget, openEuler:24.03-LTS: wget, openEuler:22.03-LTS-SP4: wget</p> <p>GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fix(es): Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.(CVE-2024-10524)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2497 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14492-1 <p>wget-1.25.0-1.1 on GA media</p> <p>wget-1.25.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14492-1 https://cve.radiocsirt.org/vuln/suse-su-2024:4138-1 <p>Security update for wget</p> <p>Security update for wget</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4138-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10524 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wget, Ubuntu:Pro:16.04:LTS: wget, Ubuntu:Pro:18.04:LTS: wget, Ubuntu:Pro:20.04:LTS: wget, Ubuntu:22.04:LTS: wget, Ubuntu:24.04:LTS: wget, Ubuntu:25.10: wget</p> <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wget, Ubuntu:Pro:16.04:LTS: wget, Ubuntu:Pro:18.04:LTS: wget, Ubuntu:Pro:20.04:LTS: wget, Ubuntu:22.04:LTS: wget, Ubuntu:24.04:LTS: wget, Ubuntu:25.10: wget</p> <p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10524 https://cve.radiocsirt.org/vuln/vde-2025-053 <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> https://cve.radiocsirt.org/vuln/vde-2025-053 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3487 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wget ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wget ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3487