gnu wget

Name: gnu wget
Brand: gnu

productUS

cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical8high10medium1low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-13089US	high8.8	79.9% (100th)	Exploit	no fix	2017-10-27	≤ 1.19.1
CVE-2016-4971US	high8.8	46.1% (99th)	Exploit	1.18	2016-06-30	< 1.18
CVE-2014-4877US	high9.3	39.9% (99th)	Exploit	no fix	2014-10-29	8 versions
CVE-2018-0494US	medium6.5	16.5% (97th)	Exploit	1.19.5	2018-05-06	< 1.19.5
CVE-2004-1488US	medium5.0	11.9% (96th)	Exploit	no fix	2005-04-27	5 versions
CVE-2016-7098US	high8.1	7.50% (94th)	Exploit	no fix	2016-09-26	≤ 1.17
CVE-2006-6719US	medium5.0	4.30% (91st)	Exploit	no fix	2006-12-23	12 versions
CVE-2004-2014US	low2.6	0.96% (61st)	Exploit	no fix	2004-12-31	9 versions
CVE-2017-13090US	high8.8	36.6% (98th)	—	no fix	2017-10-27	≤ 1.19.1
CVE-2019-5953US	critical9.8	5.86% (93rd)	—	no fix	2019-05-17	≤ 1.20.1
CVE-2002-1344US	medium5.0	4.25% (91st)	—	no fix	2002-12-18	7 versions
CVE-2010-2252US	medium6.8	4.21% (91st)	—	no fix	2010-07-06	18 versions
CVE-2009-3490US	medium6.8	3.52% (89th)	—	no fix	2009-09-30	16 versions
CVE-2017-6508US	medium6.1	2.94% (87th)	—	no fix	2017-03-07	≤ 1.19.1
CVE-2004-1487US	medium5.0	1.66% (76th)	—	no fix	2005-04-27	5 versions
CVE-1999-0402US	medium5.0	1.48% (74th)	—	no fix	1999-01-02	= 1.5.3
CVE-2021-31879US	medium6.1	1.10% (66th)	—	no fix	2021-04-29	≤ 1.21.1
CVE-2024-38428US	critical9.1	0.67% (52nd)	—	no fix	2024-06-16	≤ 1.24.5
CVE-2018-20483US	high7.8	0.66% (51st)	—	1.20.1	2018-12-26	< 1.20.1
CVE-2026-58469US	—	0.49% (42nd)	—	no fix	2026-07-07	≤ 1.25.0
CVE-2026-58472US	high7.1	0.39% (33rd)	—	no fix	2026-07-07	≤ 1.25.0
CVE-2026-58471US	high7.1	0.39% (33rd)	—	no fix	2026-07-07	≤ 1.25.0
CVE-2026-58470US	—	0.25% (16th)	—	no fix	2026-07-07	≤ 1.25.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-115Misinterpretation of Input1 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan