5 results (0.002 seconds)

CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0

23 Feb 2018 — ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation. ELinks 0.12 y Twibright Links 2.3 tienen una falta de validación de certificados SSL. • https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 • CWE-295: Improper Certificate Validation •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

30 Jul 2017 — The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file. La función put_chars en el archivo html_r.c en Twibright Links versión 2.14, permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer) por medio de un archivo HTML creado. The put_chars function in html_r.c in Links version 2.14 can cause a denial of service (buffer over-read) via a crafted html file. • https://packetstorm.news/files/id/143552 • CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

30 Nov 2013 — Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables. Desbordamiento de enteros en Links anterior a la versión 2.8 permite a atacantes remotos provocar una denegación de servicio (caída) a través de tablas HTML. Mikulas Patocka discovered an integer overflow in the parsing of HTML tables in the Links web browser. This can only be exploited when running Links in graphical mode. • http://links.twibright.com/download/ChangeLog • CWE-189: Numeric Errors •

CVSS: 9.8EPSS: 0%CPEs: 92EXPL: 0

27 Jul 2008 — Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs." Vulnerabilidad no especificada en Links anterior a 2.1, cuando la opción "only proxies" (solo proxies) está activada, tiene un impacto y vectores de ataques desconocidos relacionado con que proporciona "URLs a programas externos". • http://links.twibright.com/download/ChangeLog • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 0

31 Dec 2002 — Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images. • http://atrey.karlin.mff.cuni.cz/~clock/twibright/links/download/ChangeLog •