https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:44:49 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:5299 <p><strong>Affected:</strong> AlmaLinux:8: wget</p> <p>The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.</p> <p>Security Fix(es):</p> <p>* wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: wget</p> <p>The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.</p> <p>Security Fix(es):</p> <p>* wget: Misinterpretation of input may lead to improper behavior (CVE-2024-38428)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:5299 https://cve.radiocsirt.org/vuln/bdu:2024-04683 bdu:2024-04683 https://cve.radiocsirt.org/vuln/bdu:2024-04683 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0713 certfr-2024-avi-0713 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0713 https://cve.radiocsirt.org/vuln/euvd-2026-231960 EUVD-2026-231960 https://cve.radiocsirt.org/vuln/euvd-2026-231960 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38428 <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38428 https://cve.radiocsirt.org/vuln/ghsa-2j66-vp53-phjj <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> https://cve.radiocsirt.org/vuln/ghsa-2j66-vp53-phjj https://cve.radiocsirt.org/vuln/msrc_cve-2024-38428 msrc_CVE-2024-38428 https://cve.radiocsirt.org/vuln/msrc_cve-2024-38428 https://cve.radiocsirt.org/vuln/oesa-2024-1756 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: wget, openEuler:22.03-LTS-SP1: wget, openEuler:22.03-LTS-SP3: wget, openEuler:24.03-LTS: wget</p> <p>GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fix(es): url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.(CVE-2024-38428)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: wget, openEuler:22.03-LTS-SP1: wget, openEuler:22.03-LTS-SP3: wget, openEuler:24.03-LTS: wget</p> <p>GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fix(es): url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.(CVE-2024-38428)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1756 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14056-1 <p>wget-1.24.5-2.1 on GA media</p> <p>wget-1.24.5-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14056-1 https://cve.radiocsirt.org/vuln/rhsa-2024:4998 <p>wget: Misinterpretation of input may lead to improper behavior</p> <p>wget: Misinterpretation of input may lead to improper behavior</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4998 https://cve.radiocsirt.org/vuln/suse-su-2024:2154-1 <p>Security update for wget</p> <p>Security update for wget</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2154-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38428 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wget, Ubuntu:Pro:16.04:LTS: wget, Ubuntu:Pro:18.04:LTS: wget, Ubuntu:20.04:LTS: wget, Ubuntu:22.04:LTS: wget, Ubuntu:24.04:LTS: wget</p> <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wget, Ubuntu:Pro:16.04:LTS: wget, Ubuntu:Pro:18.04:LTS: wget, Ubuntu:20.04:LTS: wget, Ubuntu:22.04:LTS: wget, Ubuntu:24.04:LTS: wget</p> <p>url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38428 https://cve.radiocsirt.org/vuln/vde-2025-053 <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> https://cve.radiocsirt.org/vuln/vde-2025-053 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1386 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wget ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wget ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1386