Lucene search
K

537 matches found

OSV
OSV
added 2026/04/15 8:29 p.m.3 views

JLSEC-2026-120

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...

9.1CVSS6.7AI score0.00197EPSS
Exploits0References6
Redos
Redos
added 2026/02/09 12:0 a.m.4 views

ROS-20260209-73-0003

A vulnerability in the userinfo subcomponent of the Lynx text-based web browser is related to SNI credential disclosure. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive data...

5.3CVSS5.5AI score0.04281EPSS
Exploits0
EUVD
EUVD
added 2025/10/31 12:30 a.m.2 views

EUVD-2023-60046

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of...

9.4CVSS5.9AI score0.00315EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-0267

Malware in sbrugna...

10CVSS6.1AI score0.01352EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-1897

Malware in sbrugna...

4.7CVSS5.3AI score0.00121EPSS
Exploits0References4
NVD
NVD
added 2025/10/04 4:15 p.m.2 views

CVE-2023-53562

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...

5.5CVSS0.00017EPSS
Exploits0References4
OSV
OSV
added 2025/10/04 4:15 p.m.1 views

AZL-77438 CVE-2023-53562 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/04 3:17 p.m.7 views

CVE-2023-53562 drm/msm: fix vram leak on bind errors

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...

0.00017EPSS
Exploits0References4
CVE
CVE
added 2025/10/04 3:17 p.m.7 views

CVE-2023-53562

CVE-2023-53562 affects the Linux kernel DRM MSM driver. The issue is a VRAM leak that occurs when a subcomponent fails to bind, and the fix releases the VRAM buffer on bind errors. The vulnerability is mitigated by applying the patch that adds VRAM release on error paths (patch reference: patchwo...

5.5CVSS6.2AI score0.00017EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/04 12:0 a.m.1 views

PT-2025-40704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/MSM subsystem that can lead to a VRAM leak during bind errors. Specifically, the vulnerability occurs when a subcomponent fails to bind, and the...

6.2AI score0.00017EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 8:37 a.m.6 views

CVE-2019-2820

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Gnuplot. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

7.3CVSS6.4AI score0.00051EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2024/10/16 4:9 p.m.17 views

K000141479: Wget vulnerability CVE-2024-38428

Security Advisory Description url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent...

9.1CVSS7.1AI score0.00197EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:0 a.m.23 views

EulerOS 2.0 SP10 : wget (EulerOS-SA-2024-2453)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data...

9.1CVSS7.1AI score0.00197EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:0 a.m.23 views

EulerOS 2.0 SP9 : wget (EulerOS-SA-2024-2382)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data...

9.1CVSS7.1AI score0.00197EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/09/12 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2024-2453)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.4AI score0.00197EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/12 12:0 a.m.8 views

EulerOS 2.0 SP9 : wget (EulerOS-SA-2024-2407)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data...

9.1CVSS7.1AI score0.00197EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/22 12:0 a.m.20 views

Amazon Linux 2023 : wget (ALAS2023-2024-657)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-657 advisory. url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent i...

9.1CVSS7AI score0.00197EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.22 views

CBL Mariner 2.0 Security Update: wget (CVE-2024-38428)

The version of wget installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38428 advisory. - url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there M...

9.1CVSS7AI score0.00197EPSS
Exploits0References2
OSV
OSV
added 2024/06/27 5:12 p.m.15 views

MGASA-2024-0240 Updated wget packages fix security vulnerability

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent. CVE-2024-38428...

9.1CVSS9AI score0.00197EPSS
Exploits0References3
Mageia
Mageia
added 2024/06/27 5:12 p.m.36 views

Updated wget packages fix security vulnerability

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent. CVE-2024-38428...

9.1CVSS7.1AI score0.00197EPSS
Exploits0References2
Rows per page
Query Builder