lynx kayıtları
lynx üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
- CWE-295 Improper Certificate Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2008-4690İstismar yok | lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbilynx · lynx | Kritik10,0 | — | %5,0 | 22 Eki 2008 |
31İzleyin | CVE-2016-9179İstismar yok | lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could inslynx · lynx · CWE-20 | Yüksek7,5 | — | %1,9 | 22 Ara 2016 |
28İzleyin | CVE-2010-2810İstismar yok | Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 alllynx · lynx · CWE-119 | Orta6,8 | — | %3,6 | 20 Ağu 2010 |
23İzleyin | CVE-2012-5821İstismar yok | Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers lynx · lynx · CWE-295 | Orta5,9 | — | %0,8 | 4 Kas 2012 |
18İzleyin | CVE-2006-7234Kavram kanıtı | Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2lynx · lynx | Orta4,6 | — | %0,8 | 27 Eki 2008 |
- CVE-2008-469042Planlayın
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbi
KritikCVSS 10,0İstismar yokEPSS %5lynx · lynx22 Eki 2008
- CVE-2016-917931İzleyin
lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could ins
YüksekCVSS 7,5İstismar yokEPSS %1lynx · lynx22 Ara 2016
- CVE-2010-281028İzleyin
Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 all
OrtaCVSS 6,8İstismar yokEPSS %3lynx · lynx20 Ağu 2010
- CVE-2012-582123İzleyin
Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers
OrtaCVSS 5,9İstismar yokEPSS %0lynx · lynx4 Kas 2012
- CVE-2006-723418İzleyin
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2
OrtaCVSS 4,6Kavram kanıtıEPSS %0lynx · lynx27 Eki 2008