Lucene search
+L

875 matches found

Cvelist
Cvelist
added 2017/03/02 6:00 a.m.28 views

CVE-2017-6391

An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "adminconsole/web/tools/SimpleJWPlayer.php" URL, the "adminconsole/web/tools/AkamaiBroadcaster.php" URL, the "adminconsole/web/tools/bigRedButton.php...

6.4AI score0.00848EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/03/02 6:00 a.m.30 views

CVE-2017-6392

An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/adminconsole/web/tools/XmlJWPlayer.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the contex...

6.4AI score0.00865EPSS
SaveExploits0References3
Mageia
Mageia
added 2017/02/20 1:00 p.m.34 views

Updated lynx packages fix security vulnerability

Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host. CVE-2016-9179...

7.5CVSS2.8AI score0.01987EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/20 1:00 p.m.10 views

MGASA-2017-0052 Updated lynx packages fix security vulnerability

Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host. CVE-2016-9179...

7.5CVSS7.4AI score0.01987EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2017/02/20 12:00 a.m.24 views

Fedora Update for lynx FEDORA-2017-c9828b259c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/02/15 12:00 a.m.26 views

Fedora 25 : lynx (2017-c9828b259c)

update to the latest upstream pre-release fixes CVE-2016-9179 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

7.5CVSS7.2AI score0.01987EPSS
SaveExploits0References2
Fedora
Fedora
added 2017/02/14 9:26 p.m.26 views

[SECURITY] Fedora 25 Update: lynx-2.8.9-0.14.dev11.fc25

Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages...

7.5CVSS1.3AI score0.01987EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/01/10 12:00 a.m.63 views

FreeBSD : lynx -- multiple vulnerabilities (03532a19-d68e-11e6-9171-14dae9d210b8) (POODLE)

Oracle reports : Lynx is vulnerable to POODLE by still supporting vulnerable version of SSL. Lynx is also vulnerable to URL attacks by incorrectly parsing hostnames ending with an '?'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

7.5CVSS6.4AI score0.99999EPSS
SaveExploits7References6
NVD
NVD
added 2016/12/22 9:59 p.m.14 views

CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS6.1AI score0.01987EPSS
SaveExploits0References2
Prion
Prion
added 2016/12/22 9:59 p.m.15 views

Design/Logic Flaw

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

5CVSS6.8AI score0.01987EPSS
SaveExploits0References2
OSV
OSV
added 2016/12/22 9:59 p.m.8 views

DEBIAN-CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS6.8AI score0.01987EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/22 9:59 p.m.6 views

UBUNTU-CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS7AI score0.01987EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2016/12/22 9:59 p.m.30 views

CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS7AI score0.01987EPSS
SaveExploits0References3
CVE
CVE
added 2016/12/22 9:00 p.m.209 views

CVE-2016-9179

CVE-2016-9179 concerns the Lynx web browser. The issue: Lynx does not parse the authority component of a URL correctly when the host name ends with a '?', which could allow an attacker to trick the client into connecting to a different host. Reported impact (per NVD metrics): CVSSv2 base score 5....

7.5CVSS5.2AI score0.01987EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/12/22 9:00 p.m.37 views

CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

5.3AI score0.01987EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2016/12/22 9:00 p.m.49 views

CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS7.4AI score0.01987EPSS
SaveExploits0
OSV
OSV
added 2016/11/24 12:00 a.m.15 views

DLA-719-1 lynx-cur - security update

Bulletin has no description...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/11/14 12:00 a.m.26 views

Trango Systems Devices Detection

Detection of Trango Systems Devices The script sends a connection request to the server and attempts to detect the presence of Trango Systems Devices and to extract its version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2016/11/11 12:00 a.m.27 views

Lynx URL Redirection Vulnerability

Lynx is a text-only web browser. Lynx has a redirection vulnerability that can be exploited to construct malicious URIs, trick users into parsing them, and redirect them to arbitrary web sites for phishing attacks...

7.5CVSS6.9AI score0.01987EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2016/11/04 9:47 a.m.19 views

CVE-2016-9179

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host...

7.5CVSS2.3AI score0.01987EPSS
SaveExploits0References1
Rows per page
Query Builder