uzbl vulnerabilities

Products

• uzbl 3

Latest uzbl CVEs

Newest publication first

1. CVE-2012-0843 uzbl: Information disclosure via world-readable cookies storage file

   Published 2019-11-19

   Medium·CVSS 5.5 EPSS 0.43%

   uzbl: Information disclosure via world-readable cookies storage file

2. CVE-2010-2809 The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands....

   Published 2010-08-19

   Medium·CVSS 6.8 EPSS 7.3%

   The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.

3. CVE-2010-0011 The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

   Published 2010-02-25

   High·CVSS 7.5 EPSS 2.1%

   The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.