WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product wget✕
Overview 14 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
14matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC21.4% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 7.1% Not applicable 13 92.9% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 14 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 21.4% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 11 78.6%
split by peak 4 / year
Not applicable: 13Outside Waratek scope: 1 Medium: 14 not blocked: 14 No public exploit: 11Working exploit published: 3
19991 Not applicable1 Medium1 not blocked1 No public exploit1 20000 20010 20021 Not applicable1 Medium1 not blocked1 No public exploit1 20030 20040 20052 Not applicable2 Medium2 not blocked2 Working exploit published1 No public exploit1 20061 Not applicable1 Medium1 not blocked1 Working exploit published1 20070 20080 20091 Not applicable1 Medium1 not blocked1 No public exploit1 20101 Not applicable1 Medium1 not blocked1 No public exploit1 20110 20120 20130 20140 20150 20160 20171 Not applicable1 Medium1 not blocked1 No public exploit1 20181 Not applicable1 Medium1 not blocked1 Working exploit published1 20190 20200 20211 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 20220 20230 20240 20250 20264 Not applicable4 Medium4 not blocked4 No public exploit4
1999200220052008201120142017202020232026
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-58472 Medium 2026-07-07 Not applicable No public exploit GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
CVE-2026-58471 Medium 2026-07-07 Not applicable No public exploit GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.
CVE-2026-58470 Medium 2026-07-07 Not applicable No public exploit GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client.
CVE-2026-1858 Medium 2026-04-29 Not applicable No public exploit wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
CVE-2021-31879 Medium 2021-04-29 Outside Waratek scope No public exploit GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
CVE-2018-0494 Medium 2018-05-06 Not applicable Working exploit published GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
CVE-2017-6508 Medium 2017-03-07 Not applicable No public exploit CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
CVE-2010-2252 Medium 2010-07-06 Not applicable No public exploit GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
CVE-2009-3490 Medium 2009-09-30 Not applicable No public exploit GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVE-2006-6719 Medium 2006-12-23 Not applicable Working exploit published The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
CVE-2004-1488 Medium 2005-04-27 Not applicable Working exploit published wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
CVE-2004-1487 Medium 2005-04-27 Not applicable No public exploit wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
CVE-2002-1344 Medium 2002-12-18 Not applicable No public exploit Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
CVE-1999-0402 Medium 1999-01-02 Not applicable No public exploit wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.