Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2006-7234

lynx: .mailcap and .mime.types files read from CWD

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Lynx Redhat
Products
Lynx Enterprise Linux
CVE-2008-4690

lynx: remote arbitrary command execution via a crafted lynxcgi: URL

lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.

CVSS 2.0 · 10.0 Critical EPSS 5.1% KEV · Not listed
Vendors
Lynx Redhat
Products
Lynx Enterprise Linux
CVE-2016-9179

lynx: Invalid URL parsing of pages containing '?'

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Lynx
Products
Lynx
CVE-2010-2810

Lynx: Heap-based buffer overflow by processing URLs with % (percent) character in the domain name

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed
Vendors
Lynx
Products
Lynx
CVE-2012-5821

lynx: Does not verify that the server's certificate is signed by a trusted certification authority

Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Lynx
Products
Ubuntu Linux Lynx