https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T01:42:36.249942+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-9179 CVE-2016-9179 2026-10-02T01:42:36.287328+00:00

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

 https://vulnerability.circl.lu/vuln/usn-4800-1 USN-4800-1 — lynx vulnerabilities 2026-10-02T01:42:36.287422+00:00

Affected: Ubuntu:Pro:16.04:LTS: lynx, Ubuntu:Pro:18.04:LTS: lynx, Ubuntu:Pro:20.04:LTS: lynx

It was discovered that Lynx incorrectly handled certain URLs. A remote attacker could possibly use this issue to obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM. (CVE-2016-9179)

It was discovered that Lynx incorrectly handled certain HTML files. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-1000211)

Thorsten Glaser discovered that Lynx mishandles the userinfo subcomponents of a URI. An attacker monitoring the network could discover cleartext credentials because they may appear in SNI data. (CVE-2021-38165)