1656 matches found
Security Bulletin: Vulnerability in GNU Wget affects watsonx.data
Summary GNU Wget could allow a remote authenticated attacker to bypass security restrictions, and this could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-38428 DESCRIPTION: GNU Wget could allow a remote authenticated attacker to bypass security restrictions, caused by the mishandling...
Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2025-1130)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : wget (EulerOS-SA-2025-1130)
According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wget (SUSE-SU-2024:4138-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4138-1 advisory. - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Tenable has extracted the preceding...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wget (SUSE-SU-2024:4145-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4145-1 advisory. - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Tenable has extracted the preceding...
OESA-2024-2497 wget security update
GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: Applications th...
CLSA-2024-1733428726 wget: Fix of CVE-2024-38428
CVE-2024-38428: properly re-implement userinfo parsing rfc2396...
openSUSE Security Advisory (SUSE-SU-2024:4145-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for wget
This update for wget fixes the following issues: CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...
SUSE-SU-2024:4145-1 Security update for wget
This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773...
openSUSE Security Advisory (SUSE-SU-2024:4138-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for wget
This update for wget fixes the following issues: CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...
SUSE-SU-2024:4138-1 Security update for wget
This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773...
The vulnerability of the GNU Wget download manager, related to insufficient validation of requests on the server side, allows a perpetrator to execute SSRF attacks, spear-phishing attacks, or “man-in-the-middle” attacks.
The vulnerability of the GNU Wget download manager is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack, a man-in-the-middle attack, or another type of attack...
Mageia: Security Advisory (MGASA-2024-0378)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0378 Updated wget packages fix security vulnerability
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...
Updated wget packages fix security vulnerability
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...
GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs
...
CBL Mariner 2.0 Security Update: wget (CVE-2024-10524)
The version of wget installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10524 advisory. - Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credential...
