Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2010-0011

The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Uzbl
Products
Uzbl
CVE-2010-2809

The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.

CVSS 2.0 · 6.8 Medium EPSS 7.3% KEV · Not listed
Vendors
Uzbl
Products
Uzbl