875 matches found
GHSA-94CQ-7CCQ-CMCM lynx doesn't properly sanitize user input and exposes database password to unauthorized users
The lynx gem prior to 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes. As of version 1.0.0, lynx no longer supports a --password option. Passwords are only configured in a configuration file, so it's no...
CVE-2014-5002
The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes...
CVE-2014-5002
The CVE-2014-5002 issue affects the Ruby lynx gem prior to version 1.0.0, where the configured password can be exposed on the command line, enabling local attackers to view sensitive information via the process list. The vulnerability stems from a design flaw in which passwords may appear on the ...
CVE-2014-5002
The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes...
Fedora Update for lynx FEDORA-2017-bf172b2035
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : lynx (2017-bf172b2035)
update to the latest upstream pre-release fixes CVE-2017-1000211 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 26 Update: lynx-2.8.9-0.20.dev16.fc26
Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages...
Updated lynx package fixes security vulnerability
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself. CVE-2017-1000211...
MGASA-2017-0451 Updated lynx package fixes security vulnerability
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself. CVE-2017-1000211...
openSUSE Security Update : lynx (openSUSE-2017-1332)
This update for lynx fixes the following issues : Security issue fixed : - CVE-2017-1000211: Fix use after free in the HTMLparser that can resulting in memory disclosure bsc1068885. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2017-1000211
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself...
SUSE-SU-2017:3180-1 Security update for lynx
This update for lynx fixes the following issues: Security issue fixed: - CVE-2017-1000211: Fix use after free in the HTMLparser that can resulting in memory disclosure bsc1068885...
Lynx 'HTML.c:HTML_put_string()' memory misreference vulnerability
Lynx is a text-only web browser. html parser is one of the HTML parsers. A memory misreference vulnerability exists in Lynx 'HTML.c:HTMLputstring'. An attacker could exploit this vulnerability to cause a memory leak...
Debian DLA-1175-1 : lynx-cur security update
It was discovered that there was a use-after-free vulnerability in the HTML parser of lynx-cur, a terminal-based web browser. This could have led to memory/information disclosure. For Debian 7 'Wheezy', this issue has been fixed in lynx-cur version 2.8.8dev.12-2+deb7u2. We recommend that you...
[SECURITY] [DLA 1175-1] lynx-cur security update
Package : lynx-cur Version : 2.8.8dev.12-2+deb7u2 CVE ID : CVE-2017-1000211 It was discovered that there was a use-after-free vulnerability in the HTML parser of lynx-cur, a terminal-based web browser. This could have led to memory/information disclosure. For Debian 7 "Wheezy", this issue has bee...
DLA-1175-1 lynx-cur - security update
Bulletin has no description...
CVE-2017-1000211
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself...
DEBIAN-CVE-2017-1000211
Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself...
