Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-smv5-udwt-5qcq
Summarywget: files rejected by access list are kept on the disk for the duration of HTTP connection
Aliases
0
alias CVE-2016-7098
Fixed_packages
0
url pkg:deb/debian/wget@1.18-4?distro=trixie
purl pkg:deb/debian/wget@1.18-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.18-4%3Fdistro=trixie
1
url pkg:deb/debian/wget@1.18-5%2Bdeb9u3
purl pkg:deb/debian/wget@1.18-5%2Bdeb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b4sh-m4q3-8fd3
1
vulnerability VCID-cjxy-4u1b-kyht
2
vulnerability VCID-qtqz-p2a8-ykcv
3
vulnerability VCID-qwxx-kuek-j3fu
4
vulnerability VCID-um8z-unc6-bqhf
5
vulnerability VCID-v7yu-hy66-gyh4
6
vulnerability VCID-yyf4-yz4z-rugu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.18-5%252Bdeb9u3
2
url pkg:deb/debian/wget@1.21-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/wget@1.21-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q53y-6aup-17gk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.21-1%252Bdeb11u1%3Fdistro=trixie
3
url pkg:deb/debian/wget@1.21.3-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/wget@1.21.3-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q53y-6aup-17gk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.21.3-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/wget@1.25.0-2?distro=trixie
purl pkg:deb/debian/wget@1.25.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.25.0-2%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/wget@1.4.5-0.1
purl pkg:deb/debian/wget@1.4.5-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4drq-2td7-akbk
1
vulnerability VCID-5u23-3wxr-27du
2
vulnerability VCID-8v5w-xx4w-fyc3
3
vulnerability VCID-b4sh-m4q3-8fd3
4
vulnerability VCID-cjxy-4u1b-kyht
5
vulnerability VCID-fbj7-rc7e-mkgh
6
vulnerability VCID-fuw5-1kwb-tyck
7
vulnerability VCID-h2ee-geak-xqfv
8
vulnerability VCID-p2rg-34nt-dbc1
9
vulnerability VCID-pbm5-fnnd-d3bw
10
vulnerability VCID-pvwa-watz-dfh9
11
vulnerability VCID-qtqz-p2a8-ykcv
12
vulnerability VCID-qwxx-kuek-j3fu
13
vulnerability VCID-smv5-udwt-5qcq
14
vulnerability VCID-txw8-ve2p-vubh
15
vulnerability VCID-um8z-unc6-bqhf
16
vulnerability VCID-v7yu-hy66-gyh4
17
vulnerability VCID-yyf4-yz4z-rugu
18
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.4.5-0.1
1
url pkg:deb/debian/wget@1.5.3-1.1
purl pkg:deb/debian/wget@1.5.3-1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4drq-2td7-akbk
1
vulnerability VCID-5u23-3wxr-27du
2
vulnerability VCID-8v5w-xx4w-fyc3
3
vulnerability VCID-b4sh-m4q3-8fd3
4
vulnerability VCID-cjxy-4u1b-kyht
5
vulnerability VCID-fbj7-rc7e-mkgh
6
vulnerability VCID-fuw5-1kwb-tyck
7
vulnerability VCID-h2ee-geak-xqfv
8
vulnerability VCID-p2rg-34nt-dbc1
9
vulnerability VCID-pbm5-fnnd-d3bw
10
vulnerability VCID-pvwa-watz-dfh9
11
vulnerability VCID-qtqz-p2a8-ykcv
12
vulnerability VCID-qwxx-kuek-j3fu
13
vulnerability VCID-smv5-udwt-5qcq
14
vulnerability VCID-txw8-ve2p-vubh
15
vulnerability VCID-um8z-unc6-bqhf
16
vulnerability VCID-v7yu-hy66-gyh4
17
vulnerability VCID-yyf4-yz4z-rugu
18
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.5.3-1.1
2
url pkg:deb/debian/wget@1.5.3-3
purl pkg:deb/debian/wget@1.5.3-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4drq-2td7-akbk
1
vulnerability VCID-5u23-3wxr-27du
2
vulnerability VCID-8v5w-xx4w-fyc3
3
vulnerability VCID-b4sh-m4q3-8fd3
4
vulnerability VCID-cjxy-4u1b-kyht
5
vulnerability VCID-fbj7-rc7e-mkgh
6
vulnerability VCID-fuw5-1kwb-tyck
7
vulnerability VCID-h2ee-geak-xqfv
8
vulnerability VCID-p2rg-34nt-dbc1
9
vulnerability VCID-pbm5-fnnd-d3bw
10
vulnerability VCID-pvwa-watz-dfh9
11
vulnerability VCID-qtqz-p2a8-ykcv
12
vulnerability VCID-qwxx-kuek-j3fu
13
vulnerability VCID-smv5-udwt-5qcq
14
vulnerability VCID-txw8-ve2p-vubh
15
vulnerability VCID-um8z-unc6-bqhf
16
vulnerability VCID-v7yu-hy66-gyh4
17
vulnerability VCID-yyf4-yz4z-rugu
18
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.5.3-3
3
url pkg:deb/debian/wget@1.8.1-6.1
purl pkg:deb/debian/wget@1.8.1-6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4drq-2td7-akbk
1
vulnerability VCID-5u23-3wxr-27du
2
vulnerability VCID-8v5w-xx4w-fyc3
3
vulnerability VCID-b4sh-m4q3-8fd3
4
vulnerability VCID-cjxy-4u1b-kyht
5
vulnerability VCID-fbj7-rc7e-mkgh
6
vulnerability VCID-fuw5-1kwb-tyck
7
vulnerability VCID-h2ee-geak-xqfv
8
vulnerability VCID-p2rg-34nt-dbc1
9
vulnerability VCID-pbm5-fnnd-d3bw
10
vulnerability VCID-pvwa-watz-dfh9
11
vulnerability VCID-qtqz-p2a8-ykcv
12
vulnerability VCID-qwxx-kuek-j3fu
13
vulnerability VCID-smv5-udwt-5qcq
14
vulnerability VCID-txw8-ve2p-vubh
15
vulnerability VCID-um8z-unc6-bqhf
16
vulnerability VCID-v7yu-hy66-gyh4
17
vulnerability VCID-yyf4-yz4z-rugu
18
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.8.1-6.1
4
url pkg:deb/debian/wget@1.9.1-12
purl pkg:deb/debian/wget@1.9.1-12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4drq-2td7-akbk
1
vulnerability VCID-5u23-3wxr-27du
2
vulnerability VCID-8v5w-xx4w-fyc3
3
vulnerability VCID-b4sh-m4q3-8fd3
4
vulnerability VCID-cjxy-4u1b-kyht
5
vulnerability VCID-fbj7-rc7e-mkgh
6
vulnerability VCID-h2ee-geak-xqfv
7
vulnerability VCID-qtqz-p2a8-ykcv
8
vulnerability VCID-qwxx-kuek-j3fu
9
vulnerability VCID-smv5-udwt-5qcq
10
vulnerability VCID-um8z-unc6-bqhf
11
vulnerability VCID-v7yu-hy66-gyh4
12
vulnerability VCID-yyf4-yz4z-rugu
13
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.9.1-12
5
url pkg:deb/debian/wget@1.10.2-2
purl pkg:deb/debian/wget@1.10.2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5u23-3wxr-27du
1
vulnerability VCID-8v5w-xx4w-fyc3
2
vulnerability VCID-b4sh-m4q3-8fd3
3
vulnerability VCID-cjxy-4u1b-kyht
4
vulnerability VCID-fbj7-rc7e-mkgh
5
vulnerability VCID-h2ee-geak-xqfv
6
vulnerability VCID-qtqz-p2a8-ykcv
7
vulnerability VCID-qwxx-kuek-j3fu
8
vulnerability VCID-smv5-udwt-5qcq
9
vulnerability VCID-um8z-unc6-bqhf
10
vulnerability VCID-v7yu-hy66-gyh4
11
vulnerability VCID-yyf4-yz4z-rugu
12
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.10.2-2
6
url pkg:deb/debian/wget@1.10.2-2%2Betch1
purl pkg:deb/debian/wget@1.10.2-2%2Betch1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5u23-3wxr-27du
1
vulnerability VCID-8v5w-xx4w-fyc3
2
vulnerability VCID-b4sh-m4q3-8fd3
3
vulnerability VCID-cjxy-4u1b-kyht
4
vulnerability VCID-fbj7-rc7e-mkgh
5
vulnerability VCID-h2ee-geak-xqfv
6
vulnerability VCID-qtqz-p2a8-ykcv
7
vulnerability VCID-qwxx-kuek-j3fu
8
vulnerability VCID-smv5-udwt-5qcq
9
vulnerability VCID-um8z-unc6-bqhf
10
vulnerability VCID-v7yu-hy66-gyh4
11
vulnerability VCID-yyf4-yz4z-rugu
12
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.10.2-2%252Betch1
7
url pkg:deb/debian/wget@1.11.4-2%2Blenny2
purl pkg:deb/debian/wget@1.11.4-2%2Blenny2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5u23-3wxr-27du
1
vulnerability VCID-8v5w-xx4w-fyc3
2
vulnerability VCID-b4sh-m4q3-8fd3
3
vulnerability VCID-cjxy-4u1b-kyht
4
vulnerability VCID-fbj7-rc7e-mkgh
5
vulnerability VCID-h2ee-geak-xqfv
6
vulnerability VCID-qtqz-p2a8-ykcv
7
vulnerability VCID-qwxx-kuek-j3fu
8
vulnerability VCID-smv5-udwt-5qcq
9
vulnerability VCID-um8z-unc6-bqhf
10
vulnerability VCID-v7yu-hy66-gyh4
11
vulnerability VCID-yyf4-yz4z-rugu
12
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.11.4-2%252Blenny2
8
url pkg:deb/debian/wget@1.12-2.1
purl pkg:deb/debian/wget@1.12-2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5u23-3wxr-27du
1
vulnerability VCID-8v5w-xx4w-fyc3
2
vulnerability VCID-b4sh-m4q3-8fd3
3
vulnerability VCID-cjxy-4u1b-kyht
4
vulnerability VCID-qtqz-p2a8-ykcv
5
vulnerability VCID-qwxx-kuek-j3fu
6
vulnerability VCID-smv5-udwt-5qcq
7
vulnerability VCID-um8z-unc6-bqhf
8
vulnerability VCID-v7yu-hy66-gyh4
9
vulnerability VCID-yyf4-yz4z-rugu
10
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.12-2.1
9
url pkg:deb/debian/wget@1.12-2.1%2Bdeb6u1
purl pkg:deb/debian/wget@1.12-2.1%2Bdeb6u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5u23-3wxr-27du
1
vulnerability VCID-8v5w-xx4w-fyc3
2
vulnerability VCID-b4sh-m4q3-8fd3
3
vulnerability VCID-cjxy-4u1b-kyht
4
vulnerability VCID-qtqz-p2a8-ykcv
5
vulnerability VCID-qwxx-kuek-j3fu
6
vulnerability VCID-smv5-udwt-5qcq
7
vulnerability VCID-um8z-unc6-bqhf
8
vulnerability VCID-v7yu-hy66-gyh4
9
vulnerability VCID-yyf4-yz4z-rugu
10
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.12-2.1%252Bdeb6u1
10
url pkg:deb/debian/wget@1.13.4-3%2Bdeb7u2
purl pkg:deb/debian/wget@1.13.4-3%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8v5w-xx4w-fyc3
1
vulnerability VCID-b4sh-m4q3-8fd3
2
vulnerability VCID-cjxy-4u1b-kyht
3
vulnerability VCID-qtqz-p2a8-ykcv
4
vulnerability VCID-qwxx-kuek-j3fu
5
vulnerability VCID-smv5-udwt-5qcq
6
vulnerability VCID-um8z-unc6-bqhf
7
vulnerability VCID-v7yu-hy66-gyh4
8
vulnerability VCID-yyf4-yz4z-rugu
9
vulnerability VCID-zsab-gux6-eyh6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.13.4-3%252Bdeb7u2
11
url pkg:deb/debian/wget@1.16-1
purl pkg:deb/debian/wget@1.16-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8v5w-xx4w-fyc3
1
vulnerability VCID-b4sh-m4q3-8fd3
2
vulnerability VCID-cjxy-4u1b-kyht
3
vulnerability VCID-qtqz-p2a8-ykcv
4
vulnerability VCID-qwxx-kuek-j3fu
5
vulnerability VCID-smv5-udwt-5qcq
6
vulnerability VCID-um8z-unc6-bqhf
7
vulnerability VCID-v7yu-hy66-gyh4
8
vulnerability VCID-yyf4-yz4z-rugu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.16-1
12
url pkg:deb/debian/wget@1.16-1%2Bdeb8u5
purl pkg:deb/debian/wget@1.16-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8v5w-xx4w-fyc3
1
vulnerability VCID-b4sh-m4q3-8fd3
2
vulnerability VCID-cjxy-4u1b-kyht
3
vulnerability VCID-qtqz-p2a8-ykcv
4
vulnerability VCID-qwxx-kuek-j3fu
5
vulnerability VCID-smv5-udwt-5qcq
6
vulnerability VCID-um8z-unc6-bqhf
7
vulnerability VCID-v7yu-hy66-gyh4
8
vulnerability VCID-yyf4-yz4z-rugu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wget@1.16-1%252Bdeb8u5
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7098.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7098.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7098
reference_id
reference_type
scores
0
value 0.08815
scoring_system epss
scoring_elements 0.92543
published_at 2026-04-18T12:55:00Z
1
value 0.08815
scoring_system epss
scoring_elements 0.92494
published_at 2026-04-01T12:55:00Z
2
value 0.08815
scoring_system epss
scoring_elements 0.92499
published_at 2026-04-02T12:55:00Z
3
value 0.08815
scoring_system epss
scoring_elements 0.92508
published_at 2026-04-04T12:55:00Z
4
value 0.08815
scoring_system epss
scoring_elements 0.9251
published_at 2026-04-07T12:55:00Z
5
value 0.08815
scoring_system epss
scoring_elements 0.92522
published_at 2026-04-08T12:55:00Z
6
value 0.08815
scoring_system epss
scoring_elements 0.92527
published_at 2026-04-09T12:55:00Z
7
value 0.08815
scoring_system epss
scoring_elements 0.92533
published_at 2026-04-13T12:55:00Z
8
value 0.08815
scoring_system epss
scoring_elements 0.92534
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7098
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7098
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1328137
reference_id 1328137
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1328137
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836503
reference_id 836503
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836503
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/40824.py
reference_id CVE-2016-7098
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/40824.py
7
reference_url https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html
reference_id CVE-2016-7098
reference_type exploit
scores
url https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html
8
reference_url https://usn.ubuntu.com/3464-1/
reference_id USN-3464-1
reference_type
scores
url https://usn.ubuntu.com/3464-1/
9
reference_url https://usn.ubuntu.com/3464-2/
reference_id USN-3464-2
reference_type
scores
url https://usn.ubuntu.com/3464-2/
Weaknesses
Exploits
0
date_added 2016-11-24
description GNU Wget < 1.18 - Access List Bypass / Race Condition
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2016-11-24
exploit_type remote
platform multiple
source_date_updated 2016-11-24
data_source Exploit-DB
source_url https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html
Severity_range_score2.6 - 2.6
Exploitability2.0
Weighted_severity1.3
Risk_score2.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-smv5-udwt-5qcq