twibright vulnerabilities

Products

• links 4

Latest twibright CVEs

Newest publication first

1. CVE-2012-6709 ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

   Published 2018-02-23

   Medium·CVSS 5.9 EPSS 0.66%

   ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

2. CVE-2017-11114 The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.

   Published 2017-07-31

   Medium·CVSS 5.5 EPSS 0.89%

   The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.

3. CVE-2013-6050 Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.

   Published 2013-12-07

   Medium·CVSS 4.3 EPSS 1.2%

   Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.

4. CVE-2008-3329 Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."

   Published 2008-07-27

   High·CVSS 9.3 EPSS 1.2%

   Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.