419 matches found
Moderate: wget security update
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...
Moderate: Red Hat Security Advisory: wget security update
An update for wget is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as havi...
RHEL 8 : wget (RHSA-2024:4998)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4998 advisory. The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: Misinterpretation of input ma...
EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2024-2034)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified...
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-2034)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.
...
GNU Wget URI Component Compromise
The vulnerability of the userinfo URI component of the GNU Wget download manager is related to unsafe behavior where data that should be contained within the userinfo subcomponent is incorrectly interpreted as part of the host’s subcomponent. Exploiting this vulnerability could allow a malicious...
SUSE CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...
AZL-42691 CVE-2024-38428 affecting package wget for versions less than 1.21.2-3
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...
DEBIAN-CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...
CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...
RHEL 8 : Release of OpenShift Serverless Client kn 1.22.1 (Moderate) (RHSA-2022:4860)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4860 advisory. The Red Hat OpenShift Serverless Client kn 1.22.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.22.1. The kn CLI is deliver...
CVE-2024-32632
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access...
CVE-2024-32632 Printf arg type mismatch in ATCMD
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access...
CVE-2024-32632
CVE-2024-32632 affects ATCMD, where a value is misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access. The initial entry notes a medium base CVSS (6.6) with adjacent network access and user interaction required, and data shows no explicit exploit status. Conne...
CVE-2024-32632 Printf arg type mismatch in ATCMD
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access...
PT-2024-24732
Name of the Vulnerable Software and Affected Versions ATCMD affected versions not specified Description The issue arises from a misinterpretation of a value in ATCMD by the printf function, leading to incorrect output and potential out-of-bounds memory access. Recommendations At the moment, there...
CVE-2023-32228
A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user...
CVE-2023-32228
The CVE-2023-32228 entry concerns firmware bugs in AMC2-4WCF and AMC2-2WCF where data can be misinterpreted, potentially allowing an adversary to grant access to the last authorized user. The issue is rooted in a firmware-level misinterpretation vulnerability affecting the affected AMC components...
PT-2024-12304 · Amc2-2Wcf +1 · Amc2-2Wcf +1
Name of the Vulnerable Software and Affected Versions: AMC2-4WCF and AMC2-2WCF affected versions not specified Description: The issue is related to a firmware bug that may cause misinterpretation of data, allowing an adversary to grant access to the last authorized user. Recommendations: At the...