lynx records
5 published records for vendor lynx.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
- CWE-295 Improper Certificate Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2008-4690No exploit | lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbilynx · lynx | Critical10.0 | — | 5.0% | Oct 22, 2008 |
31Monitor | CVE-2016-9179No exploit | lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could inslynx · lynx · CWE-20 | High7.5 | — | 2.0% | Dec 22, 2016 |
28Monitor | CVE-2010-2810No exploit | Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 alllynx · lynx · CWE-119 | Medium6.8 | — | 3.6% | Aug 20, 2010 |
23Monitor | CVE-2012-5821No exploit | Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers lynx · lynx · CWE-295 | Medium5.9 | — | 0.8% | Nov 4, 2012 |
18Monitor | CVE-2006-7234Proof of concept | Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2lynx · lynx | Medium4.6 | — | 0.8% | Oct 27, 2008 |
- CVE-2008-469042Plan
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbi
CriticalCVSS 10.0No exploitEPSS 5%lynx · lynxOct 22, 2008
- CVE-2016-917931Monitor
lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could ins
HighCVSS 7.5No exploitEPSS 2%lynx · lynxDec 22, 2016
- CVE-2010-281028Monitor
Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 all
MediumCVSS 6.8No exploitEPSS 3%lynx · lynxAug 20, 2010
- CVE-2012-582123Monitor
Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers
MediumCVSS 5.9No exploitEPSS 0%lynx · lynxNov 4, 2012
- CVE-2006-723418Monitor
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2
MediumCVSS 4.6Proof of conceptEPSS 0%lynx · lynxOct 27, 2008